Netgate Discussion Forum
    • Categories
    • Recent
    • Tags
    • Popular
    • Users
    • Search
    • Register
    • Login

    ET SCAN NMAP not drop

    Scheduled Pinned Locked Moved IDS/IPS
    1 Posts 1 Posters 376 Views
    Loading More Posts
    • Oldest to Newest
    • Newest to Oldest
    • Most Votes
    Reply
    • Reply as topic
    Log in to reply
    This topic has been deleted. Only users with topic management privileges can see it.
    • A
      Arist
      last edited by

      A little issue with suricata running inline mode

      2.4.4-DEVELOPMENT (amd64)
      suricata 4.0.5_1 issue
      ET SCAN NMAP and ET POLICY rules do not drop but alert they are white instead of read in the alert tab
      i have to go into Wan rules and under ET SCAN NMAP and ET POLICY then
      SID Actions click apply
      then it would start to drop the packets

      1 Reply Last reply Reply Quote 0
      • First post
        Last post
      Copyright 2025 Rubicon Communications LLC (Netgate). All rights reserved.