Suggestions for Snort!


  • Banned

    Setup running Vlans??

    Could it be possible to "share" or make a template for rules and thereby quickly deploy rules and setup for VLAN'S on Pfsense?

    Some sort of "rules pool" to share among interfaces in Snort so the rules doesnt load multiple when running Snort on VLAN'S…



  • @Supermule:

    Setup running Vlans??

    Could it be possible to "share" or make a template for rules and thereby quickly deploy rules and setup for VLAN'S on Pfsense?

    Some sort of "rules pool" to share among interfaces in Snort so the rules doesnt load multiple when running Snort on VLAN'S…

    Intriguing idea.  You're talking about essentially a template file that has a rule configuration set and maybe some other settings.  You create the template once and then save it to disk.  You can then apply the template to any interface (or VLAN) by just selecting it from a list.  Is that the general idea?

    Bill


Log in to reply