How to add Snort Rules

  • 1
  • Question
  • Updated 8 years ago
  • Answered
How do I add my own snort rule to the LANGuardian Box?
Photo of NetFort

NetFort

  • 182 Posts
  • 2 Reply Likes

Posted 8 years ago

  • 1
Photo of NetFort

NetFort

  • 182 Posts
  • 2 Reply Likes
Official Response
You can add your own rules to the IDS ruleset by accessing the Add Signature page which can be found under

Administration -> Configuration -> Create New Alerts -> Create a new IDS Signature

You will find a template in the Text area which you can alter as you require.

Please use the sid value found in the template, the LANGuardian will automatically increment this value for each custom signature generated as multiple rules with the same sid will result in errors with the IDS system.