Big, big problem with /

[trish]

I have a similar issue with CU 198 , the only available solution is to turn off Suricata on RED.

IPS logs overload

If I am receiving way too many IPS alerts , does that indicate that traffic passed through the Location Block + firewall or IP blocklist? I used to get a very few IPS alerts before switching to core update 198. Since the upgrade I am getting 7000-9000 alerts daily and don’t know why. The new Reporting is amazing, I just can’t handle so many alerts. I already disabled “Priority 3” allerts, so those are not an issue. Since the 198 upgrade I have been getting thousands of Priority 2 from “ET …