I want IPS to work on certain subnets rather than interface binded.

[gobiursus]

Important notices

Before you add a new report, we ask you kindly to acknowledge the following:

• [X ] I have read the contributing guide lines at https://github.com/opnsense/core/blob/master/CONTRIBUTING.md
• [X ] I am convinced that my issue is new after having checked both open and closed issues at https://github.com/opnsense/core/issues?q=is%3Aissue

Is your feature request related to a problem? Please describe.
I want to let IPS system only work with the traffic on certain subnets behind a interface and I don't want to create extra Vlan interface
A clear and concise description of what the problem is including your motivation for the request,
i.e. "For the purpose of [...] I am missing a solution that will [...]."

Describe the solution you like
In IPS setting panel, I would be allowed to input whatever source or destination subnet/addresses that I want IPS to work on instead of interface based.

[Monviech]

Couldn't this solve your issue?

https://docs.opnsense.org/manual/how-tos/ips-bypass.html

You still select the interface but you can bypass any net you do not want to inspect.

[gobiursus]

Couldn't this solve your issue?

https://docs.opnsense.org/manual/how-tos/ips-bypass.html

You still select the interface but you can bypass any net you do not want to inspect.

I want those subnets run as IDS mode and rest of subnets run under IPS mode.