[Snort-users] Centralized reporting server and Sensors - Possible mis-match
paty.hillary at ...131...
Wed Jun 29 20:17:01 EDT 2016
We run Snort as an IDS with one centralized reporting server that is used to push the VRT updates to multiple sensors sitting in promiscuous mode. All the servers including the reporting server and sensors run with very old versions of Snort - 220.127.116.11 on RHEL 5.3. Needless to say the Rules also haven't been updated for a long time.
Now if we were to upgrade some sensors to RHEL 7.2 with Snort 18.104.22.168, what issues will we be looking at w.r.t- VRT updates and conflict with the central reporting server (Snort - 22.214.171.124 on RHEL 5.3).
Will the Central reporting server still be able to download new rules(seeing that VRT updates have been EOL for 126.96.36.199)?
-------------- next part --------------
An HTML attachment was scrubbed...
More information about the Snort-users