fbidsmate and watchguard firebox

["Hamilton, Robert" <rhamilton () anteon com>]

I've seen very little in the way of integration of snort with Watchguard
Firebox firewalls using fbidsmate. Watchguard and several VAR's have
indicated that this combination of integration is valid, but I've not
found any documentation regarding how to do it.

 

I've only found an add-on called snortsam which claims to support calls
to fbidsmate. 

 

Any way to directly call fbidsmate from snort alert rules?

 

Thanks,

 

-Rob

--

Robert Hamilton

Network Engineer

Balkan Times Web Site

Anteon, Corp.

301.692.0548

rhamilton () anteon com