O'Reilly logo

Intrusion Detection with Snort by Jack Koziol

Stay ahead with the world's most comprehensive technology and business learning platform.

With Safari, you learn the way you learn best. Get unlimited access to videos, live online training, learning paths, books, tutorials, and more.

Start Free Trial

No credit card required

IDS Policy Manager

IDS Policy Manager is a Windows 2000/XP application that is used to remotely manage Snort sensors. It is used to change settings to the Snort configuration and rules files. IDS Policy Manager can access most of the Snort configuration parameters, including the following:

  • Network variables

  • Rule classifications

  • Preprocessors

  • Output plugins

  • Snort command-line switches

  • Ruleset settings

These setting can be stored in what is known as a “policy.” Different policies can be created for different types of sensors. You can create one policy for internal sensors and one for external. You can create a policy to be used in incident response. Policies are a great way to test new features and rules because you can easily roll back to a working ...

With Safari, you learn the way you learn best. Get unlimited access to videos, live online training, learning paths, books, interactive tutorials, and more.

Start Free Trial

No credit card required