Migration: Suricata to Snort

[gsanchietti]

Title: Migration: Suricata to Snort

Support is needed for migrating from Suricata on NethServer 7 to Snort on NethSecurity 8 to ensure a smooth transition for users upgrading to the latest version.

The procedure should:

• If Suricata was enabled, enable Snort.
• If Snort must be enabled, set the rule policy to balanced.
• Migrate the IPS bypass rules: replace objects with addresses.

Example of original bypass rule:

# db ips show
bypass1=bypass
  Description=bypass 1
  Host=host;vpn-rw-giacomo
  status=enabled

Additional changes:

• Ensure Snort is listed between migrated configurations inside nethserver-firewall-migration UI.
• Update the documentation to reflect the new feature.