Asymmetric Traffic

So you’re talking about TAP interfaces and IPS mode with a bridge. Can you draw the setup and be more precise on what part Suricata would be running?
Depending on the details it could be an issue or not.