[prev in list] [next in list] [prev in thread] [next in thread] 

List:       snort-users
Subject:    Re: [Snort-users] Mapping rules to policies
From:       wkitty42 () windstream ! net
Date:       2017-09-28 16:28:46
Message-ID: 24b1c995-6d8b-3884-3a97-c8f6c2722f27 () windstream ! net
[Download RAW message or body]

On 09/28/2017 10:19 AM, Joseph Roscioli via Snort-users wrote:
> "There are five states that we place rules in when we create them, four of the 
> states are assigned to policies. - Connectivity over Security (Connectivity) - 
> Either in "alert" or "drop" - Balanced (Balanced) - Either in "alert" or "drop" 
> - Security over Connectivity (Security) - Either in "alert" or "drop""
> 
> My question is : How do I know which policy a given rule is in? The FAQ answer 
> contains "when you aren't using the policies".
> I did not see any mention  of policies in the User Manual.


look at the rules and you'll see a "meta" keyword... it will list the policies a 
rule is assigned to... not all rules will carry this information, though...


-- 
  NOTE: No off-list assistance is given without prior approval.
        *Please keep mailing list traffic on the list unless*
        *a signed and pre-paid contract is in effect with us.*
_______________________________________________
Snort-users mailing list
Snort-users@lists.snort.org
Go to this URL to change user options or unsubscribe:
https://lists.snort.org/mailman/listinfo/snort-users

Please visit http://blog.snort.org to stay current on all the latest Snort news!

[prev in list] [next in list] [prev in thread] [next in thread]