8. Security (IDS/IPS)

Suricata intrusion detection/prevention, installed via Package Manager. Inline IPS mode requires network interface card (NIC) driver support for netmap — confirmed working on Intel igb/ix family adapters. Virtual NICs in some hypervisors do not support this mode; detection-only (IDS) mode works everywhere.