IDS/IPS automatically block attempting IP after X number of alerts

Feature Requests

router

ebuckland81 October 7, 2025, 3:17pm 10

Linking this request as it very much related:

Info on whether an IDS/IPS event is a block/drop or info/alert Feature Requests

Another suggestion for improvement of IDS/IPS. I have found it not so straightforward to understand if events in the IDS/IPS Events log are related to drop/block or info/alert “type” of actions. The configuration of IDS/IPS says “Minimum severity of malicious activity that will be blocked automatically”. I suspect that is not entirely true as a lot of alerts that gets logged in the events list are actually not associated to activity that gets blocked but rather only informed/alerted upon. […

show post in topic

Home
Categories
Guidelines
Terms of Service
Privacy Policy

Powered by Discourse, best viewed with JavaScript enabled