IDS working, but IPS not - Transparent / Bridge Firewall

[Stril]

Hi!

I am trying to setup an in-line-IPS with OPNsense 20.1.

--> OPNSense installed
--> Two Interfaces bridged
--> All offloading disabled
--> IDS activated and configured.


IDS ist working fine and logging alerts.

BUT: If I activate IPS, there are no more alerts, drops, etc.

Do you have any idea, what I could have made wrong?

Thank you for your help
Stril

[mimugmail]

NETMAP code, which is used with IPS mode, doesn't work for bridge interfaces, sorry.

[mb]

NETMAP code, which is used with IPS mode, doesn't work for bridge interfaces, sorry.

We'll change that soon:

https://forum.opnsense.org/index.php?topic=17363.msg80297#msg80297

[mimugmail]

Ah, that reminds me testing the VLANs for the drivers :)