Can only select ET Rules in Snort
-
I'm on the 4/3 build of 2.4, but not sure that has anything to do with my issue. For some reason, I can only select the ET Open Rules to load, none of the Snort rules are selectable. Is there something I'm missing? I know something isn't right, as I'm tuning the alerts, the only things getting hits are ET rules, none of my premium Snort rules are catching anything.
-
The thing you are probably missing is that you should NOT select any of the pre-defined policies for interface if you want to select individual categories. (IOW, untick the Use IPS Policy checkbox above).
-
The thing you are probably missing is that you should NOT select any of the pre-defined policies for interface if you want to select individual categories. (IOW, untick the Use IPS Policy checkbox above).
Thank you! That was it.