diff --git a/config/rootfiles/core/173/filelists/suricata b/config/rootfiles/core/173/filelists/suricata
new file mode 120000
index 000000000..f671f6993
--- /dev/null
+++ b/config/rootfiles/core/173/filelists/suricata
@@ -0,0 +1 @@
+../../../common/suricata
\ No newline at end of file
diff --git a/config/rootfiles/core/173/update.sh b/config/rootfiles/core/173/update.sh
index c2bfe25b1..24d89c30a 100644
--- a/config/rootfiles/core/173/update.sh
+++ b/config/rootfiles/core/173/update.sh
@@ -49,6 +49,7 @@ done
 /usr/local/bin/openvpnctrl -k
 /usr/local/bin/openvpnctrl -kn2n
 /etc/rc.d/init.d/sshd stop
+/etc/rc.d/init.d/suricata stop
 
 KVER="xxxKVERxxx"
 
@@ -135,6 +136,9 @@ done
 /usr/local/bin/sshctrl
 
 # Start services
+if grep -q "ENABLE_IDS=on" /var/ipfire/suricata/settings; then
+	/etc/rc.d/init.d/suricata start
+fi
 /etc/rc.d/init.d/apache start
 if grep -q "ENABLE_SSH=on" /var/ipfire/remote/settings; then
 	/etc/init.d/sshd start