Exclude/bypass device from suricata in IPS mode not working

Help
1

Hi,
I would like to exclude a device from getting inspected.
I try to do this with a user defined setting that lets the device IP pass the CIDR of my LAN and ticked the bypass box.
However when in IPS mode – and only when in IPS mode – the device ‘complains’ and has network issues (it is actually my son that complains because it is his playstation and it`s lagging like crazy with IPS on).

Any idea how to troubleshoot?

Suricata version: latest built-in OPNsense 25.1.1
Interface: LAN
Pattern Matcher: Hyperscan
Hardware: Intel n100, 8GB RAM

2

I suggest posting your query at the OPNsense forums: https://forum.opnsense.org/