[Snort-users] Centralized reporting server and Sensors - Possible mis-match
paty.hillary at ...131...
Wed Jun 29 14:41:56 EDT 2016
We run Snort as an IDS with one centralized reporting server that is used to push the VRT updates to multiple sensors sitting in promiscuous mode. All the servers including the reporting server and sensors run with very old versions of Snort - 184.108.40.206 on RHEL 5.3. Needless to say the Rules also haven't been updated for a long time.
Now if we were to upgrade some sensors to RHEL 7.2 with Snort 220.127.116.11, what issues will we be looking at w.r.t- VRT updates and conflict with the central reporting server (Snort - 18.104.22.168 on RHEL 5.3).
Will the Central reporting server still be able to download new rules(seeing that VRT updates have been EOL for 22.214.171.124)?
-------------- next part --------------
An HTML attachment was scrubbed...
More information about the Snort-users