A video on how to use SID management in SNORT

Networking & Firewalls
1

Hi Lawrence,

I wonder if you can do a deep dive on the new Inline policy (blocking) + SID management of Snort. Currently, I am unable to enable blocks as some of my services like Google access to services are blocked etc. I wish to know how to enable and disable using SID effectively. Hope you can consider this request. Thanks !

2

I use Suricata and I have a video on tuning the rules here:

3

Hi Lawrence, unfortunately, the video does not go into details on how to use inline policy blocking and advanced usage of SID management

4

That is not something that we currently use.