The new docs.trellix.com features a modernized UI and AI-powered conversational search. Content is currently available in English, with additional languages launching in early November 2026. We hope you enjoy the updated experience.

Change Sensor mode from Suricata to IPS

Prev Next

Follow these steps to convert a Suricata Sensor to an IPS Sensor:

Steps:

  1. Delete the Sensor from the Manager (if applicable): If the Sensor was previously configured, delete it from the Manager interface.

  2. Change the mode to IPS: Run the CLI command to change the Sensor mode to IPS. For more information, see Configure Sensor information.

  3. Reset the configuration: Run the resetconfig command to clear the previous configuration.

    Tip

    The resetconfig command includes an implicit Sensor reboot.

  4. Add the Sensor to the Manager: Add the Sensor to the Manager. For more information, see Add a Suricata Sensor as a standalone to the Manager or Add a Suricata Sensor as a stack to the Manager.