This discussion has been locked.
You can no longer post new replies to this discussion. If you have a question you can start a new discussion

Make your own IDS rules

Anyone know the process for importing snort rules ?


This thread was automatically locked due to age.
Parents
  • On Version 7, you can't create (import) custom rules, not yet.  They are supposed to adding this feature back in in the near future.

    Version 6 does have this capability, and there's an article about it in the Astaro Knowledgebase.

    CTO, Convergent Information Security Solutions, LLC

    https://www.convergesecurity.com

    Advice given as posted on this forum does not construe a support relationship or other relationship with Convergent Information Security Solutions, LLC or its subsidiaries.  Use the advice given at your own risk.

  • Any update on this from anyone at Astaro?  I got my box all running and have some custom rules I want to put in.  For now, Im off to figure out how to to do it from the shell.

    Thanks.
  • I ask about it periodically; they tell me it's coming in a future up2date, but no news on which one it will be.  I wouldn't count on manual modifications from the shell "sticking," as any up2date could undo your changes.

    CTO, Convergent Information Security Solutions, LLC

    https://www.convergesecurity.com

    Advice given as posted on this forum does not construe a support relationship or other relationship with Convergent Information Security Solutions, LLC or its subsidiaries.  Use the advice given at your own risk.

Reply
  • I ask about it periodically; they tell me it's coming in a future up2date, but no news on which one it will be.  I wouldn't count on manual modifications from the shell "sticking," as any up2date could undo your changes.

    CTO, Convergent Information Security Solutions, LLC

    https://www.convergesecurity.com

    Advice given as posted on this forum does not construe a support relationship or other relationship with Convergent Information Security Solutions, LLC or its subsidiaries.  Use the advice given at your own risk.

Children
No Data