Hi,
does the Sophos OS use the Snort as IPS Engine or Cyberoam Engine?
At the moment Snort is still single thread while Snort 3 (still in beta) is Multithreading. I do not nothing about Cyberoam IPS.
Can someone clarify this aspect? SG 650 for example has so many cores that IPS can take advantages of them.