Making an inline Suricata box using OPNsense

[liver007]

HI
I'm looking to make an inline Suricata box to intercept certain applications. I need DPI to detect certain applications (i.e. unauthorized VPN traffic) and block it. The box needs to be inline and receive its LAN IP address from the DCHP server.

I have been looking at OPNsense (as opposed to Security Onion) to do this project quickly but got lost in the configurations. Is there a knowledgebase article to setup OPNsense in bridge mode to transparently pass through traffic with Suricata IPS active?

[spetrillo]

Does this help??

https://azizozbek.ch/blog/2018/08/opnsense-bridge-firewall/ & https://azizozbek.ch/blog/2019/02/install-suricata-opnsense/