Snort mailing list archives

Re: Snort rules problem


From: Joel Esler <jesler () sourcefire com>
Date: Fri, 8 Mar 2013 09:50:53 -0500

On Mar 8, 2013, at 3:25 AM, Y M <snort () outlook com> wrote:

Rules enablement/disablement follow certain policy, with default, if I am not mistaken, is connectivity.

It's actually balanced.


If you use PulledPork, it will handle this for you and enable/disable rules based on the policy you choose.

Reference: blog.snort.org/2012/01/importance-of-pulledpork.html

------------------------------------------------------------------------------
Symantec Endpoint Protection 12 positioned as A LEADER in The Forrester  
Wave(TM): Endpoint Security, Q1 2013 and "remains a good choice" in the  
endpoint security space. For insight on selecting the right partner to 
tackle endpoint security challenges, access the full report. 
http://p.sf.net/sfu/symantec-dev2dev
_______________________________________________
Snort-sigs mailing list
Snort-sigs () lists sourceforge net
https://lists.sourceforge.net/lists/listinfo/snort-sigs
http://www.snort.org


Please visit http://blog.snort.org for the latest news about Snort!

Current thread: