[Snort-users] Switching snort from IDS to IPS mode

wkitty42 at windstream.net wkitty42 at windstream.net
Fri Feb 2 22:13:19 EST 2018

On 02/02/2018 06:56 PM, bobby via Snort-users wrote:
> I would like to switch Snort from IDS to IPS mode.  Is this done only by 
> modifying the rules, from alert, to drop status, or is there an easier,
> better way of accomplishing this?

IIUC, modifying the rules to drop as well as running inline... you have to be 
inline for snort to be able to control the connections and drop the ones you 
don't want...

  NOTE: No off-list assistance is given without prior approval.
        *Please keep mailing list traffic on the list unless*
        *a signed and pre-paid contract is in effect with us.*

More information about the Snort-users mailing list