November 2017
Intermediate to advanced
494 pages
14h 29m
English
As mentioned earlier, there are no GUI options for Suricata in Proxmox. All configurations are done through the CLI. Without a proper knowledge of IDS/IPS rules, it is very difficult to create rules based on their own environments. Suricata cannot be used to protect any Proxmox nodes, only virtual machines. This limitation may be due to the fact that IDS/IPS can frequently consume a large amount of CPU resources. While for a dedicated firewall appliance, this may or may not be an issue, for a hypervisor, where the CPU is shared between the hypervisor itself and hosted virtual machines, this could be fatal due to CPU overconsumption.
There are no dedicated log view options for Suricata as there are for the ...
Read now
Unlock full access