How to make PFsense more senses by configuring the Snort

  • I realized the SNORT module is not capturing the correct and useful information. How can I configure it to be able to capture the data?

    Is there anything I need to install?

  • Look in Services -> Snort -> Alerts.

    I've found its better to run snort on the internal interface as if you use it on the WAN it logs the WAN address not the client that is natted.

Log in to reply