Snort rules is more aggresive

  • Hello guys ,

    Iam facing problem with snort rules ,these are rules are more aggressive even these blocking  genuine request to web servers . Any idea about how to fix this ?

  • Banned

    Yeah, disable broken rules manually either the click-click way, or by using the SID Mgmt tab.

  • Snort rules could also be customized by yours or a Snort guy who is willing to do this,
    but I am pretty sure no one will do this for nothing for you, I mean you could open a bounty
    or search for someone that is able and willing to customize this rules for you that they are
    matching to your network.

  • thanks will try to fix this way

Log in to reply