Re: Subscription Rulesets vs Sourcefire product rulesets

["Joel Esler \(jesler\) via Snort-users" <snort-users () lists snort org>]

The rules, themselves?  No.  The capabilities of the FirePower platform far exceed that of regular Snort (auto port 
detection, load balancing, etc). The SRU (for the firepower platform) and the ruleset you download from 
Snort.org<http://Snort.org> have the same rules in them.  But they operate completely differently/

--
Joel Esler | Talos: Manager | jesler () cisco com<mailto:jesler () cisco com>






On Feb 15, 2018, at 8:59 AM, Austin Clark via Snort-users <snort-users () lists snort org<mailto:snort-users () lists 
snort org>> wrote:


All,

Is there any fundamental difference between the Snort subscription ruleset and the ruleset my sourcefire box receives 
from cisco/Talos.

Austin
_______________________________________________
Snort-users mailing list
Snort-users () lists snort org<mailto:Snort-users () lists snort org>
Go to this URL to change user options or unsubscribe:
https://lists.snort.org/mailman/listinfo/snort-users

Please visit http://blog.snort.org<http://blog.snort.org/> to stay current on all the latest Snort news!

Please follow these rules: https://snort.org/faq/what-is-the-mailing-list-etiquette

_______________________________________________
Snort-users mailing list
Snort-users () lists snort org
Go to this URL to change user options or unsubscribe:
https://lists.snort.org/mailman/listinfo/snort-users

Please visit http://blog.snort.org to stay current on all the latest Snort news!

Please follow these rules: https://snort.org/faq/what-is-the-mailing-list-etiquette