<html>
<head>
<style><!--
.hmmessage P
{
margin:0px;
padding:0px
}
body.hmmessage
{
font-size: 12pt;
font-family:Calibri
}
--></style></head>
<body class='hmmessage'><div dir='ltr'>Hi all,<br>Suricata i s a great IDS and I use it as an IPS.<br>I have some questions (perhaps stupid questions :) ) :<br><br>- Suricata run as an IPS on my gateway <br>- Squid is installed with squidclamav (no cache only clamav protection)<br><br>First question :<br>- is there any real interest to run both suricata and squidclamav/clamav ?<br><br>Squid is in transparent mode so the trafic to destination port 80 goes to port 3128 in nat table.<br>I'm not sure the trafic goes to suricata then (no http.log when redirect to 3128 is active). It's a bit confused and I'm working on it.<br><br><br>Second question :<br>- is there a solution to make suricata and clamav work together ?<br><br>Thanks a lot !<br>Have a nice day.<br><br><br><br> <br><br> </div></body>
</html>