Tips on how to configure IDS for added security?

[ElvisNuno]

I'm looking to add either snort or suricata to my 3cx cloud instance and was wondering if anyone had any specific suggestions on how to configure / tune the rules / scanning settings to best pick up any malicious SIP / web client traffic / etc? I've been googling around and haven't managed to really find anything. Any advice would be appreciated. Thanks!

 

[cobaltit]

Probably better off checking asterisk forums or just general snort/suricata forums. SIP is SIP and http is http.

 

[JohnS_3CX]

Hi @ElvisNuno

If you are already on V16, take a look at our security recommendations to start with:

https://www.3cx.com/docs/voip-security/