Skip to content

Glossary: Secure Infrastructure and Zero Trust

exception-policy

A Suricata setting for what to do when it hits trouble, such as running out of memory. In IPS mode, `auto` mostly fails closed (drops), and `pass-flow` fails open.

Where the book teaches it

Related terms

Suricatapass-flowfailure mode