Results 1 to 8 of 8
  1. #1
    Master Untangler cblaise's Avatar
    Join Date
    Jul 2014
    Location
    Burlington, VT
    Posts
    138

    Default Intrusion Prevention Ruleset Change

    We're changing to the Emerging Threats ruleset. This will affect all systems that have IPS enabled as part of the daily ruleset synchronization process. You can expect these changes within the day.

    For more information, please see the Intrusion Prevention FAQs.

  2. #2
    Untangler
    Join Date
    Feb 2016
    Posts
    83

    Default

    Any way to tell if we are updated to that ruleset offhand?

  3. #3
    Master Untangler cblaise's Avatar
    Join Date
    Jul 2014
    Location
    Burlington, VT
    Posts
    138

    Default

    The total number of rules on the rules will change to around 28104 rules.

  4. #4
    Untanglit
    Join Date
    May 2016
    Posts
    26

    Default

    How do I get this update? Everytime I go into my IPS 'app' page, both the 'check for updates' statuses say "never".

  5. #5
    Untangle Ninja
    Join Date
    Jan 2009
    Posts
    1,187

    Default

    Yesterday I removed the intrusion prevention module, rebooted the server and then reinstalled the intrusion prevention module, accepted the defaults in the wizard and let it run. This morning it updated at 1am, it has 40k rules... (39062 available rules, 8151 logging or blocking) but after spending a few minutes browsing through the rules I don't see any from ET.
    Is there any update on the push status of this new ruleset? I wouldn't mind removing my dedicated ids node from this network.

  6. #6
    Master Untangler cblaise's Avatar
    Join Date
    Jul 2014
    Location
    Burlington, VT
    Posts
    138

    Default

    The new ruleset was pushed out this morning so you'll see the update on your units starting tonight.

    Sorry it look a little longer than we expected.

  7. #7
    Untangle Ninja
    Join Date
    Jan 2009
    Posts
    1,187

    Default

    Quote Originally Posted by cblaise View Post
    The new ruleset was pushed out this morning so you'll see the update on your units starting tonight.
    Look forward to it, thanks for the update.

  8. #8
    Newbie
    Join Date
    Aug 2016
    Posts
    12

    Default

    Is there anyway to pull info in from criticalstack?
    https://intel.criticalstack.com/

Posting Permissions

  • You may not post new threads
  • You may not post replies
  • You may not post attachments
  • You may not edit your posts
  •  

SEO by vBSEO 3.6.0 PL2