Project

General

Profile

Actions

Feature #11148

closed

Snort Inline mode note

Added by Viktor Gurov over 3 years ago. Updated over 3 years ago.

Status:
Closed
Priority:
Normal
Assignee:
-
Category:
Snort
Target version:
-
Start date:
12/10/2020
Due date:
% Done:

0%

Estimated time:
Plus Target Version:

Description

It would be better to add a note about Inline mode rule actions,
from https://forum.netgate.com/topic/143812/snort-package-4-0-inline-ips-mode-introduction-and-configuration-instructions:
"However, Inline IPS Mode is quite different! Because the default action of all rules from the rule vendors is ALERT, if you enable Inline IPS Mode but don't change the rule actions, you will get no blocks. You must change the action of rules you wish to block traffic to be either DROP or REJECT. Details on how to do that follow below."

Actions #1

Updated by Viktor Gurov over 3 years ago

  • Status changed from New to Closed

already there after pressing the 'save' button

Actions

Also available in: Atom PDF