Router. ------------------------Internet <---> | Suricata <-> Firewall | -------------------------
Router. ------------------------Internet <---> | Firewall <-> Suricata | -------------------------
Code: [Select] Router. ------------------------Internet <---> | Firewall <-> Suricata | -------------------------
...(it also explains why, for IPv4, IPS should be enabled on internal interfaces and not the external ones).