DPI (Deep Packet Inspection) and pfSense

[beloc]

Hello everyone.

In the past, one of the ways that you could provide DPI on pfSense was to use something like Suricata/Snort, or NTOP. Since the Suricata package is one that doesn't have a maintainer, if the community using Snort instead? I see the Netgate has pretty specific instructions on setting something like this up. We currently use pfBlocker in all of our devices, was wondering about the Suricata/Snort situation.

Thank you for any feedback.

[SteveITS]

@beloc Snort had the same maintainer. It's only been a few weeks since that happened so it's a bit unclear yet, I'd be patient. Both still function.

Note neither can see into encrypted packets such as HTTPS.

[beloc]

@SteveITS Thank you for the reply. I understand. Hopefully its picked back up.