[Snort-users] Best practices for setting HOME_NET

Craig Merchant cmerchant at ...16022...
Thu Jan 10 23:02:28 EST 2013


What are the best practices for setting the HOME_NET variable in an environment where multiple sensors exist at different sites or datacenters?  Is it considered best to set it to a network range that encompasses all of the sites, or generally is it considered best to treat intra-site traffic as external?

Thx.

Craig
-------------- next part --------------
An HTML attachment was scrubbed...
URL: <https://lists.snort.org/pipermail/snort-users/attachments/20130111/00dd0975/attachment.html>


More information about the Snort-users mailing list