This discussion has been locked.

You can no longer post new replies to this discussion. If you have a question you can start a new discussion

Sophos UTM IPS rules

Hello,

I would like to get more information about Sophos UTM IPS (Snort) rules.. Are they developed/maintained by Sophos itself or is it freeware/paid snort.org rules?

If it's Sophos own rules how are they compared to Snort.org paid rules and is it possible to use paid snort.org rules in Sophos UTM (manual configuration over ssh)?

Good luck

This thread was automatically locked due to age.

0 TheDrew over 9 years ago

AFAIK Sophos uses the Paid Snort ruleset.

Even if they didn't/don't, there's no way to change out the ruleset as (1) doing so would require a dive under the hood voiding the license agreement and (2) would get overwritten by the next AV/IPS pattern update anyways.
Cancel
Vote Up 0 Vote Down

Cancel
0 Scott_Klassen over 9 years ago

@Andrew: Unless things have changed recently, UTM uses the free ruleset for Snort as it does with most other rulesets/3rd party data (WAF and GEOIP as examples).

__________________
ACE v8/SCA v9.3

...still have a v5 install disk in a box somewhere.

http://xkcd.com
http://www.tedgoff.com/mb
http://www.projectcartoon.com/cartoon/1
Cancel
Vote Up 0 Vote Down

Cancel
0 InfinityPro over 9 years ago

I think this is what you want; I cant remember where I found this on the forms.

https://www.astaro.com/lists/
https://www.astaro.com/lists/ASGV9-IPS-rules-2970.html
Cancel
Vote Up 0 Vote Down

Cancel
0 BAlfson over 6 years ago in reply to InfinityPro

The correct link is: https://lists.astaro.com/ASGV9-IPS-rules.html

Cheers - Bob

Sophos UTM Community Moderator
Sophos Certified Architect - UTM
Sophos Certified Engineer - XG
Gold Solution Partner since 2005

MediaSoft, Inc. USA
Cancel
Vote Up 0 Vote Down

Cancel
0 JoergRiether over 4 years ago in reply to BAlfson

Hi guys, seems to me they somehow stopped updating at the end of November. Can anyone at Sophos comment? Thanks Joerg
Cancel
Vote Up 0 Vote Down

Cancel
0 BAlfson over 4 years ago in reply to JoergRiether

Hallo Jörg, Jaydeep just PM'd me that the document has been updated.

Cheers - Bob

Sophos UTM Community Moderator
Sophos Certified Architect - UTM
Sophos Certified Engineer - XG
Gold Solution Partner since 2005

MediaSoft, Inc. USA
Cancel
Vote Up 0 Vote Down

Cancel
0 JoergRiether over 4 years ago in reply to BAlfson

Hello Bob,

indeed. Thanks.

Cheers Jörg
Cancel
Vote Up 0 Vote Down

Cancel