Snort as IPS

[Forensix Land <forensixland () gmail com>]

Greetings,

We just start to run snort as IPS and would like to take any advices from this group.
-- what are the rules we can start with safely in production env?
-- how do we automate updating the drop rules with pulledpork?
-- At time the snort blocking production env, what is the easy and quick way to disable or bypass the snort and put it 
back online later?
-- Any tips are greatly appreciated.

FL
Sent from my iPhone
------------------------------------------------------------------------------
Check out the vibrant tech community on one of the world's most
engaging tech sites, Slashdot.org! http://sdm.link/slashdot
_______________________________________________
Snort-users mailing list
Snort-users () lists sourceforge net
Go to this URL to change user options or unsubscribe:
https://lists.sourceforge.net/lists/listinfo/snort-users
Snort-users list archive:
http://sourceforge.net/mailarchive/forum.php?forum_name=snort-users

Please visit http://blog.snort.org to stay current on all the latest Snort news!