IDS/IPS Disabling after 30-60 seconds.

Started by thehutch, May 04, 2025, 03:35:34 AM

Previous topic - Next topic
I'm running OPNsense 25.1.5_5 on a Protectili 6 Port with Intel i5, 32GB RAM, and a 1TB SSD. I have NUT installed for a battery backup as well as clamAV. I reset to default settings then removed both of the plugins above. IPS/IDS disables after about 30-60 seconds after turning it on. I have disabled/enabled rules, attempted different settings in the IPS/IDS. I'm not sure what else it can be other than maybe it's not compatible with something within the hardware itself with the latest updates.

Logs don't show any issue and only show when starting suricata. Anyone else seeing this issue? Ideas to resolve?

Check your IPS log in informational. Ours is giving an out of space error and then shuts down suricata.