OPNSense - July 2025 Update

After testing it for a few weeks I decided to disable the IDS/IPS in OPNSense based on Suricata because it was hammering my firewall CPU when trying to download at the maximum rate, typically reducing throughput by tens of megabits and occasionally it negatively affected other LAN traffic.