RE: Activeworx IDS Policy Manager

["Jeff Dell" <jdell () activeworx com>]

These are great.. I wish you would email anything like this to
bugs () activeworx com and I will fix them asap. I usually try to get any
bugs fixed within a week or so. When no one tells me them, it is hard to
fix them. This issue that you have mentioned... it can be resolved if
you open the policy manager, and click on options/settings/Policy Editor
Settings and click on "Ability to Modify Snort ID and Revision". You
will see when you edit a rule you will now be able to edit the Snort ID
and Revision number. This has also been fixed in the next build which
will be released on Monday. If anyone has any other bugs. Please let me
know and I will make sure they are fixed...

Thanks,
Jeff

> -----Original Message-----
> From: snort-users-admin () lists sourceforge net 
> [mailto:snort-users-admin () lists sourceforge net] On Behalf Of 
> Slighter, Tim
> Sent: Friday, July 26, 2002 9:07 AM
> To: 'Shifflett, Shawn'; 'snort-users () lists sourceforge net'
> Subject: RE: [Snort-users] Activeworx IDS Policy Manager
>
>
> I have experienced the same issues and also would like to add 
> one more to the list.  Sometimes, when closing the IDS policy 
> manager, once it has been re-opened, the managed sensor is no 
> longer there and I have to re-add everything.  This happens 
> on one IDS policy manager but not on another and they are 
> both the same version.  As for your particular issue, I 
> believe I have found a workaround.  For any rules/alerts that 
> I wish to modify or add. I have created a completely new and 
> separate group that is not normally included in the 
> snortrule.tar.gz...such as "experimental2.rules".  I place 
> all ot my customized and edited rules into this group and 
> therefore whenever I update the rules or update from the web, 
> all of the rules in that group stay the same and never get 
> modified by any updates.
>
> -----Original Message-----
> From: Shifflett, Shawn [mailto:SShifflett () star-systems com]
> Sent: Thursday, July 25, 2002 1:17 PM
> To: 'snort-users () lists sourceforge net'
> Subject: RE: [Snort-users] Activeworx IDS Policy Manager
>
>
>       I am currently using it in my environment.  So far I 
> have had excellent success in using it to manage several 
> sensors with multiple NICs per sensor.  Very easy to use.  
> The only semi-complaint that I have had with the product is 
> that once you use IDS Policy Manager to make any changes to 
> your 'snort.conf' file it strips all of the comments from the 
> conf file itself.  Not a big deal for me personally as I'm 
> used to modifying 'snort.conf' locally from the command line, 
> but if I were to introduce someone else to the conf file for 
> local administration it would be a minor headache to have to 
> constantly reference the Snort documentation instead of just 
> reading the comments.
>       All in all, however, I am pleased with the software.
>
>       -S
>
> -----Original Message-----
> From: spyguy [mailto:spyguy703 () earthlink net] 
> Sent: Thursday, July 25, 2002 2:34 PM
> To: snort-users () lists sourceforge net
> Subject: [Snort-users] Activeworx IDS Policy Manager
>
>
> Does anyone here use Activeworx IDS Policy Manager?
>
> If yes, how do you like it?
>
> [snip]
>
> ______________________________________________________________
> ____________
> ATTENTION:  This email may contain privileged and 
> confidential information intended only for the use of the 
> individual(s) named above. If you are not the intended 
> recipient, please delete this email and any attachments and 
> notify the sender immediately. Thank you.
>
>
>
> -------------------------------------------------------
> This sf.net email is sponsored by: Jabber - The world's 
> fastest growing 
> real-time communications platform! Don't just IM. Build it in! 
> http://www.jabber.com/osdn/xim 
> _______________________________________________
> Snort-users mailing list
> Snort-users () lists sourceforge net
> Go to this URL to change user options or unsubscribe: 
> https://lists.sourceforge.net/lists/listinfo/s> nort-users
>
> Snort-users list archive: 
> http://www.geocrawler.com/redir-sf.php3?list=snort-users
>
>
> -------------------------------------------------------
> This sf.net email is sponsored by:ThinkGeek
> Welcome to geek heaven.
> http://thinkgeek.com/sf 
> _______________________________________________
> Snort-users mailing list
> Snort-users () lists sourceforge net
> Go to this URL to change user options or unsubscribe: 
> https://lists.sourceforge.net/lists/listinfo/s> nort-users
>
> Snort-users list archive: 
> http://www.geocrawler.com/redir-sf.php3?list=snort-users



-------------------------------------------------------
This sf.net email is sponsored by:ThinkGeek
Welcome to geek heaven.
http://thinkgeek.com/sf
_______________________________________________
Snort-users mailing list
Snort-users () lists sourceforge net
Go to this URL to change user options or unsubscribe:
https://lists.sourceforge.net/lists/listinfo/snort-users
Snort-users list archive:
http://www.geocrawler.com/redir-sf.php3?list=snort-users