diff --git a/config/rootfiles/core/171/filelists/libhtp b/config/rootfiles/core/171/filelists/libhtp
new file mode 120000
index 000000000..676e2c5e8
--- /dev/null
+++ b/config/rootfiles/core/171/filelists/libhtp
@@ -0,0 +1 @@
+../../../common/libhtp
\ No newline at end of file
diff --git a/config/rootfiles/core/171/filelists/suricata b/config/rootfiles/core/171/filelists/suricata
new file mode 120000
index 000000000..f671f6993
--- /dev/null
+++ b/config/rootfiles/core/171/filelists/suricata
@@ -0,0 +1 @@
+../../../common/suricata
\ No newline at end of file
diff --git a/config/rootfiles/core/171/update.sh b/config/rootfiles/core/171/update.sh
index 38aa57a65..a8172a929 100644
--- a/config/rootfiles/core/171/update.sh
+++ b/config/rootfiles/core/171/update.sh
@@ -50,6 +50,7 @@ done
 /usr/local/bin/openvpnctrl -k
 /usr/local/bin/openvpnctrl -kn2n
 /etc/rc.d/init.d/ipsec stop
+/etc/init.d/rc.d/suricata stop
 /etc/rc.d/init.d/collectd stop
 
 KVER="xxxKVERxxx"
@@ -226,6 +227,9 @@ chown -v root:root /var/ipfire/backup/{in,ex}clude*
 
 # Start services
 /etc/rc.d/init.d/collectd start
+if grep -q "ENABLED=on" /var/ipfire/suricata/settings; then
+	/etc/rc.d/init.d/suricata start
+fi
 /etc/rc.d/init.d/unbound start
 /etc/rc.d/init.d/apache start
 if grep -q "ENABLED=on" /var/ipfire/ovpn/settings; then