Can only select ET Rules in Snort



  • I'm on the 4/3 build of 2.4, but not sure that has anything to do with my issue. For some reason, I can only select the ET Open Rules to load, none of the Snort rules are selectable. Is there something I'm missing? I know something isn't right, as I'm tuning the alerts, the only things getting hits are ET rules, none of my premium Snort rules are catching anything.





  • Banned

    The thing you are probably missing is that you should NOT select any of the pre-defined policies for interface if you want to select individual categories. (IOW, untick the Use IPS Policy checkbox above).



  • @doktornotor:

    The thing you are probably missing is that you should NOT select any of the pre-defined policies for interface if you want to select individual categories. (IOW, untick the Use IPS Policy checkbox above).

    Thank you! That was it.


Log in to reply