Security-Onion-Solutions / security-onion

Security Onion 16.04 - Linux distro for threat hunting, enterprise security monitoring, and log management
https://securityonion.net
3.06k stars 519 forks source link

Suricata 5.0.1 in IPS mode #1734

Closed LazaroCruz closed 4 years ago

LazaroCruz commented 4 years ago

I have Suricata 5.0.1 on Ubuntu 18.04 and I need to enable IPS mode. I have looked for information about this and I have tried it in different ways but it does not work for me. Could someone help me with this. Thank you !!!

dougburks commented 4 years ago

Hi @LazaroCruz ,

I'm not sure I understand.

Security Onion does not support IPS: https://securityonion.readthedocs.io/en/latest/nids.html#nips

Furthermore, it sounds like you're not using Security Onion at all. Instead, it sounds like you've manually installed Suricata on your own installation of Ubuntu 18.04. If you need help with your own installation of Suricata, then you should probably reach out to the Suricata community: https://suricata-ids.org/support/

Hope that helps!

LazaroCruz commented 4 years ago

Thanks you !!!