RE: Activeworx IDS Policy Manager

["Slighter, Tim" <tslighter () itc nrcs usda gov>]

I have experienced the same issues and also would like to add one more to
the list.  Sometimes, when closing the IDS policy manager, once it has been
re-opened, the managed sensor is no longer there and I have to re-add
everything.  This happens on one IDS policy manager but not on another and
they are both the same version.  As for your particular issue, I believe I
have found a workaround.  For any rules/alerts that I wish to modify or add.
I have created a completely new and separate group that is not normally
included in the snortrule.tar.gz...such as "experimental2.rules".  I place
all ot my customized and edited rules into this group and therefore whenever
I update the rules or update from the web, all of the rules in that group
stay the same and never get modified by any updates.

-----Original Message-----
From: Shifflett, Shawn [mailto:SShifflett () star-systems com]
Sent: Thursday, July 25, 2002 1:17 PM
To: 'snort-users () lists sourceforge net'
Subject: RE: [Snort-users] Activeworx IDS Policy Manager


        I am currently using it in my environment.  So far I have had
excellent success in using it to manage several sensors with multiple NICs
per sensor.  Very easy to use.  The only semi-complaint that I have had with
the product is that once you use IDS Policy Manager to make any changes to
your 'snort.conf' file it strips all of the comments from the conf file
itself.  Not a big deal for me personally as I'm used to modifying
'snort.conf' locally from the command line, but if I were to introduce
someone else to the conf file for local administration it would be a minor
headache to have to constantly reference the Snort documentation instead of
just reading the comments.
        All in all, however, I am pleased with the software.

        -S

-----Original Message-----
From: spyguy [mailto:spyguy703 () earthlink net] 
Sent: Thursday, July 25, 2002 2:34 PM
To: snort-users () lists sourceforge net
Subject: [Snort-users] Activeworx IDS Policy Manager


Does anyone here use Activeworx IDS Policy Manager?

If yes, how do you like it?

[snip]

__________________________________________________________________________
ATTENTION:  This email may contain privileged and confidential information
intended only for the use of the individual(s) named above. If you are not
the intended recipient, please delete this email and any attachments and
notify the sender immediately. Thank you.



-------------------------------------------------------
This sf.net email is sponsored by: Jabber - The world's fastest growing 
real-time communications platform! Don't just IM. Build it in! 
http://www.jabber.com/osdn/xim
_______________________________________________
Snort-users mailing list
Snort-users () lists sourceforge net
Go to this URL to change user options or unsubscribe:
https://lists.sourceforge.net/lists/listinfo/snort-users
Snort-users list archive:
http://www.geocrawler.com/redir-sf.php3?list=snort-users


-------------------------------------------------------
This sf.net email is sponsored by:ThinkGeek
Welcome to geek heaven.
http://thinkgeek.com/sf
_______________________________________________
Snort-users mailing list
Snort-users () lists sourceforge net
Go to this URL to change user options or unsubscribe:
https://lists.sourceforge.net/lists/listinfo/snort-users
Snort-users list archive:
http://www.geocrawler.com/redir-sf.php3?list=snort-users