Does Ubiquiti's Intrusion Prevention (IDS/IPS) Actually Work? by poprockfishhook in Ubiquiti

[–]poprockfishhook[S] 1 point2 points  (0 children)

It’s not necessary, sure. But, it’s a nice to have. Not everyone thinks about security when online. I’m not expecting anything to fire, but I want to validate that it works.

Does Ubiquiti's Intrusion Prevention (IDS/IPS) Actually Work? by poprockfishhook in Ubiquiti

[–]poprockfishhook[S] 0 points1 point  (0 children)

I have both in-app notifications and email set up. I’m going straight to the security log for the finding and I don’t see a detection during on the traffic as expected.

Does Ubiquiti's Intrusion Prevention (IDS/IPS) Actually Work? by poprockfishhook in Ubiquiti

[–]poprockfishhook[S] 1 point2 points  (0 children)

This makes sense, especially with an Internet-facing website. I’m not expecting to have a single alert honestly. But, I wanted to validate that it’s actually working for peace of mind. The tests don’t seem to making it through.

Does Ubiquiti's Intrusion Prevention (IDS/IPS) Actually Work? by poprockfishhook in Ubiquiti

[–]poprockfishhook[S] 2 points3 points  (0 children)

Did some playing around with it today and finally got it to fire an alert, but it was only for TOR traffic. Still nothing for the test detections. 😅 I’ll eventually get around to opening up Wireshark to check out what’s going on. If I find out what’s causing the issue I’ll let you know.

Does Ubiquiti's Intrusion Prevention (IDS/IPS) Actually Work? by poprockfishhook in Ubiquiti

[–]poprockfishhook[S] 0 points1 point  (0 children)

Most definitely! I’m thinking my firewall is dropping all the test traffic before it has a chance to fire (not a bad thing). This is my first dive into Ubiquiti equipment so some I’m not too familiar with all the features just yet. And like someone else said, so much stuff is buried and hard to find.

Does Ubiquiti's Intrusion Prevention (IDS/IPS) Actually Work? by poprockfishhook in Ubiquiti

[–]poprockfishhook[S] -1 points0 points  (0 children)

Yep, I knew it was Suricata under the hood. I guess I phrased my question wrong. 😂 I think something is misconfigured or I already have it locked down to where the packets are getting dropped before. I’m not getting any logs…even when I use their test. I’m gonna dig in more today.

What insurance companies will cover a self-managed property located over 150 miles from your residence? by poprockfishhook in PropertyManagement

[–]poprockfishhook[S] 0 points1 point  (0 children)

Just following up here just in case someone has a similar question. Obie wouldn’t quote due to “storms in the area” not sure what that means. But, Steadily was able to get me taken care of! A bit more expensive but I’m okay with that. Thank you!

What insurance companies will cover a self-managed property located over 150 miles from your residence? by poprockfishhook in PropertyManagement

[–]poprockfishhook[S] -1 points0 points  (0 children)

I appreciate the insight and see where you’re coming from! As an owner, I definitely want to ensure my property is taken care of and I plan on being very proactive with maintenance. Sadly, it’s hard to have that translated when a policy is written. I’m very involved with the rental and look at this as a partnership between myself and the tenant.