https://community.sophos.com/products/unified-threat-management/astaroorg/f/75/t/64316
Snort ID 2180 is generated when network traffic that indicates BitTorrent is being used.
Hi, I don't really understand why an IPS rule would be enabled by default which blocks applications, especially when I've already enabled BitTorrent under Application Control.
At least, these Snort rules should be put in a new Attack Pattern section called "Corporate Policy" or something like that.
Thanks,
Barry