As long as you use Burp Suite exclusively on networks, servers, and applications you're allowed to scan, it's perfectly legal. If you don't have permission, it might be against the law.