Actions
Feature #11148
closed
Snort Inline mode note
Status:
Closed
Priority:
Normal
Assignee:
-
Category:
Snort
Target version:
-
Start date:
12/10/2020
Due date:
% Done:
0%
Estimated time:
Plus Target Version:
Description
It would be better to add a note about Inline mode rule actions,
from https://forum.netgate.com/topic/143812/snort-package-4-0-inline-ips-mode-introduction-and-configuration-instructions:
"However, Inline IPS Mode is quite different! Because the default action of all rules from the rule vendors is ALERT, if you enable Inline IPS Mode but don't change the rule actions, you will get no blocks. You must change the action of rules you wish to block traffic to be either DROP or REJECT. Details on how to do that follow below."
Updated by Viktor Gurov over 4 years ago
- Status changed from New to Closed
already there after pressing the 'save' button
Actions