IDS/IPS Restart / Reboot /Rule Change

[karaman]

Does the Suricata service have to restart or does the firewall have to be completely restarted?

I change rules and they don't work until I restart everything

[karaman]

No body an Idea?

[Fright]

can you please be a little more specific. what have you changed in the rule? what steps did you take?

[karaman]

I have set "ET SCAN Suspicious inbound to MSSQL port 1433" to Alarm only.
Butt the Suricata is still blocking. What must i make after change Rules / Rulesets.

Suricata doesnt use the new Rules.

I have already the Apply Button on Rules and also the Download and apply button. 

[Fright]

"Apply" should be enough.
in suricata log shoud  be strings  -- rule reload starting and -- rule reload complete. after that changes starts working.