Microsoft Quick Assist not working when Suricata running IPS mode

Help
1

Hi,

When IPS mode is enabled Microsoft Quick Assist is not working. Any idea how to fix this thing issue by changing rules. Any idea which rule effecting Microsoft Quick Assist ?
Please note: Microsoft Quick Assist is not working when traffic is inspecting.

2

To help we need more information about your system such as the template from the Help category post:

Please include the following information with your help request:

  • Suricata version
  • Operating system and/or Linux distribution
  • How you installed Suricata (from source, packages, something else)

But in your case, I would suggest providng also all/relevant parts of the suricata.yaml config, rules used.

To provide more actionable advice – if you track the flows of Microsoft Assist you should see the reason for the drop.