Suricata with SSL Decryption

[Michael]

@IDSTower

Depending on your architecture and what you are trying to protect, there is actually ways to deal with encrypted traffic, for example if you are protecting web applications, the placing Suricata after the tls termination device will mean it will se unencrypted traffic.

You are correct on this piece. I do have it running on selected parts of the network where i know for sure there is no TLS.
I was running this on the edge…which i think its the issue.