How to check that snort actually works ?
Hello everyone as a new member of this forum.
well I am new to the pfsense, and whole firewall thing…
so now I have all my machines behind pfsense including snort package with this annual VRT premium subscription (snort.org) that apparently updating automatically with the newest list...(really ? I can't access logs...)
I believe its a good protection, but how can I check that ?
I test my firewall with services like grc.com , auditmypc.com and looks like alright ... but how accurate are they ?
grc.com - show no open ports, several stealth.
auditmypc.com - show open ; 25/TCP, 465/TCP, 587/TCP.
Should I be happy with this results, this SNORT package and stop for any further test or improvements ?
Thank you all for your help and any suggestions.