[Snort-users] Snort, BASE, and FRW

Joao Daniel Neves joaodanielnevesss at ...125...
Tue Sep 25 10:00:05 EDT 2012


Snort Users,

I'm deploying a snort installation. The enviroment is a bit simple
two firewalls.  The second firewall is for high-availibilty. 

Of course, Snort is running in both firewalls.  ;-)

However, BASE only shows one sensor (with alerts from frw1). Is this acceptable? Is the the correct
behavior? 

I think that the answer is 'yes'. Since that firewall2 is sleeping
and will wake up just if firewall1 is in trouble. 		 	   		  
-------------- next part --------------
An HTML attachment was scrubbed...
URL: <https://lists.snort.org/pipermail/snort-users/attachments/20120925/83ae0481/attachment.html>


More information about the Snort-users mailing list