My question is about the defaut ban time duration in sshd detection scénario.
By default, the ban durations are 4 hours.
However, you can edit the profiles.yaml to change the default or have different ban duration per scenario.
I’ve noticed that after an update the profiles.yaml file was overwritten changing the ban duration back to the default of 4 hours.
Is it possible to make a custom setting that isn’t overwritten when there is an update?
Hello @gppixelworks !
Currently, there is no way to prevent this sorry, but I’ve open an issue so we can deal with it !