Snort rules is more aggresive



  • Hello guys ,

    Iam facing problem with snort rules ,these are rules are more aggressive even these blocking  genuine request to web servers . Any idea about how to fix this ?


  • Banned

    Yeah, disable broken rules manually either the click-click way, or by using the SID Mgmt tab.



  • Snort rules could also be customized by yours or a Snort guy who is willing to do this,
    but I am pretty sure no one will do this for nothing for you, I mean you could open a bounty
    or search for someone that is able and willing to customize this rules for you that they are
    matching to your network.



  • thanks will try to fix this way


Log in to reply