Suricata blocking Microsoft Teams

Started by jmodlin, March 04, 2024, 06:42:58 PM

Previous topic - Next topic
After upgrading to 24.1.2_1 Suricata has begun blocking some MS Teams traffic, is there a way, without turning IPS/IDS off to add an allow rule for their traffic?

Any assistance is greatly appreciated..

I use MS Teams all the time and have no issues. If you are usign the emerging-chat rules, you may want to disable them instead. However you can always disable the specific rules that are blocking the traffic instead. Some troubleshooting would be involved in monitoring the alerts to identify which rules are blocking the traffic though.

Quote from: jmodlin on March 04, 2024, 06:42:58 PM
After upgrading to 24.1.2_1 Suricata has begun blocking some MS Teams traffic, is there a way, without turning IPS/IDS off to add an allow rule for their traffic?

Any assistance is greatly appreciated..

Also witj 24.1.3?