Inclusion of Suricata IPS and rules over LAN in pfsense firewall

Help
, ,
1

Consultation on integration and how to include IPS Suricata on PFsense

  • Suricata version
  • Operating system: On firewall PFSense

I need information on how to implement and configure Suricata IPS on a PFSense firewall on premise, since I am looking to carry out traffic inspection and make decisions about possible intrusions in the LAN network.

In advance I add all kinds of tips and relevant information to consider.

At the moment I have PFSense configured on a Ryzen 5 CPU, 16GB RAM and a 500GB hard drive.
I also installed the Suricata package and applied it to the Ethernet interface defined as LAN on the PC, but I have doubts about how to address the feodotracker.abuse.ch community rules.

Greetings.

2

Hi there, welcome to the Suricata community forum :slight_smile:

Considering you are using Suricata through PFSense, I think that the best place to ask your question would be their forum (maybe IDS/IPS | Netgate Forum? ).

I also installed the Suricata package and applied it to the Ethernet interface defined as LAN on the PC, but I have doubts about how to address the feodotracker.abuse.ch community rules.

Is this something unrelated to the first part of the question? If so, can you elaborate what you do mean by having doubts on how to address the feodotracker.abuse.ch rules?