Intrusion Detection - Change multiple actions at once

[Echolot_]

Hello,

First of thanks a lot for this piece of software you've created.

I have a question though regarding the Intrusion Detection (Suricata). I enabled the IPS feature but noticed that by default all rules are simply set to alert instead of drop / blocked in their action.
Is there a way to change the action of multiple rules in one go? Or do we really have to change each rule individually?

Kind Regards
Marc

[Stephan]

Hi, on the download tab You can change it for a ruleset from alert to drop.

Cheers, Stephan