With the new snort being downloaded in full for every IPS update, will we receive a mail notification about snort restarting, so far today I have received 2 notifications?
So you are running in IDS mode (IDS cannot stop malicious traffic from single-packet attacks from reaching the target system before the IDS can apply a response to stop the attack. )
So you are running in IDS mode (IDS cannot stop malicious traffic from single-packet attacks from reaching the target system before the IDS can apply a response to stop the attack. )
Hi Wingman, I am not sure what you are getting at, because there is only one way to run IPS? The menu choices are not great, on or off. I just changed from termination to drop silently, not sure why the configuration had changed.