Snort XMLRPC Sync issue
-
I've configured two of my firewalls to sync Snort settings - however, I'm having an issue with the assigned alias for my pass list. The pass list is being synced down properly, but the assigned alias is blank on the child. The alias names are the same, but on the child I've got to manually update the assigned alias for it to populate after the sync. Am I doing something wrong? The FW do not sync anything else except pfBlockerNG settings.
Thanks!
-
If the Alias exists on the child, then Snort should see it and be able to use it. Are the interface names the exact same on the two firewalls? Snort expects sync'd boxes to be absolutely identical in every way including interface assignments and names.
All the XMLRPC Sync does is copy over the relevant piece of the
config.xml
file for Snort to the child firewall or firewalls.