<?xml version="1.0" encoding="UTF-8"?><rss xmlns:dc="http://purl.org/dc/elements/1.1/" xmlns:content="http://purl.org/rss/1.0/modules/content/" xmlns:atom="http://www.w3.org/2005/Atom" version="2.0"><channel><title><![CDATA[Suricata Settings Backup and Restore]]></title><description><![CDATA[<p dir="auto">I have a primary box and a backup box (DR) both with the same pfSense and packages. It'd be great if I could backup/save/export Suricata settings from my primary box and restore/import into my backup box. Suricata filtering settings are about the only regular changes I make.</p>
<p dir="auto">I don't see a choice in either the Suricata package or the pfSense Backup/Restore area to restore IDP/IDS/Suricata settings.</p>
<p dir="auto">I know I can do a full restore.</p>
]]></description><link>https://forum.netgate.com/topic/162646/suricata-settings-backup-and-restore</link><generator>RSS for Node</generator><lastBuildDate>Wed, 07 Oct 2026 16:37:29 GMT</lastBuildDate><atom:link href="https://forum.netgate.com/topic/162646.rss" rel="self" type="application/rss+xml"/><pubDate>Fri, 02 Apr 2021 15:56:23 GMT</pubDate><ttl>60</ttl><item><title><![CDATA[Reply to Suricata Settings Backup and Restore on Fri, 02 Apr 2021 19:09:25 GMT]]></title><description><![CDATA[<p dir="auto">There is an XML SYNC tab in the Suricata GUI. It will sync the configuration to multiple slaves. The one caveat is that the slave devices need to have the exact same physical interfaces and layout. So that means the hardware needs to be pretty much identical: same NIC types, and the same NIC ports defined as WAN, LAN, etc., needs to be the same on all devices.</p>
]]></description><link>https://forum.netgate.com/post/975913</link><guid isPermaLink="true">https://forum.netgate.com/post/975913</guid><dc:creator><![CDATA[bmeeks]]></dc:creator><pubDate>Fri, 02 Apr 2021 19:09:25 GMT</pubDate></item><item><title><![CDATA[Reply to Suricata Settings Backup and Restore on Fri, 02 Apr 2021 17:12:25 GMT]]></title><description><![CDATA[<p dir="auto">If they are set up using HA/CARP they can sync between the two, via the Suricata Sync tab/page.  I've not tried to sync in a non-HA configuration.</p>
]]></description><link>https://forum.netgate.com/post/975894</link><guid isPermaLink="true">https://forum.netgate.com/post/975894</guid><dc:creator><![CDATA[SteveITS]]></dc:creator><pubDate>Fri, 02 Apr 2021 17:12:25 GMT</pubDate></item></channel></rss>