Setup Snort Package

This article is part of the HOWTO series.

The package is available to install from System > Packages and you must only install SNORT or SNORT_DEV never both. It is strongly suggested you get a paid subscription form www.snort.org in order for you to download the latest rules.

Setting up snort package for the first time

Update the rules

Select what types of rules you want protecting your network

Select what types of signatures you want protecting your network

Define what servers you want to protect and improve performance

Managing blocked hosts

Managing White lists

Alert Thresholding and Suppression

Getting to know your alerts

Advanced settings