Differences

This shows you the differences between two versions of the page.

--- pfsense:suricata:install_suricata:have_suricata_monitor_the_wan_interface [2021/01/15 14:20] – peter
+++ pfsense:suricata:install_suricata:have_suricata_monitor_the_wan_interface [2021/01/22 13:54] (current) – peter
@@ Line 78: / Line 78: @@
 In **Alert Suppression and Filtering**:
-  * Alert Suppression and Filtering:  **default**.
+  * Alert Suppression and Filtering:  **WANSuppressList**.  Changed from default.
-{{:pfsense:suricata:pfsense_-_services_-_suricata_-_edit_interface_settings_-_wan_-_alert_suppression_and_filtering.png?800|}}
+{{:pfsense:suricata:install_suricata:pfsense_-_services_-_suricata_-_edit_interface_settings_-_wan_-_alert_suppression_and_filtering.png?600|}}
 ----
@@ Line 136: / Line 136: @@
     * snort_virus.rules
     * snort_web-attacks.rules
+<WRAP info>
+**NOTE:**  Do not select all categories, as this will produce too many false positives and lots of time to get right.
+</WRAP>
+----
+===== Start Suricata on WAN =====
+Navigate to **Services -> Suricata -> Interfaces**.
+Click the **start** button.
+{{:pfsense:suricata:install_suricata:pfsense_-_services_-_suricata_-_interfaces_-_wan_-_start.png?800|}}
+----
+Return to [[PFSense:Suricata:Install Suricata]] or continue to [[PFSense:Suricata:Install Suricata:Have Suricata Monitor the LAN Interface|Have Suricata Monitor the LAN Interface]].
 ----