Hello,
I want to setup Suricata-IDS between a device like Firewall and a web server. Something like below:
Internet → Firewall → Suricata-IDS → Apache
The Firewall IP address is 1.2.3.4, Suricata-IDS IP address is 1.2.3.5 and Apache IP address is 1.2.3.6 .
Which parts of Suricata-IDS configuration file must be changed?
@ish wrote a very nice article about setup Suricata-IDS in IPS mode step by step and I’m thankful if anyone write a good article like that about this scenario.
Thank you so much.