Re: Windows Snort IPS Installation/Configuration Guide

[Peter Bates <peter.bates () ucl ac uk>]

-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA1


Dear all

On 29/11/2012 14:32, Cintron, Jose J. wrote:
> Yes it has to be Windows (not my choice)...  Does anyone know of any good guides on how to install/configure Snort in 
> IPS mode on a Windows platform (Win2k3 or 2k8)?

I would suggest the top guide at:
https://www.snort.org/docs
and also perhaps http://winsnort.com/

There are a variety of 'appliance' distributions of Snort:
Security-Onion: http://code.google.com/p/security-onion/ 
Smooth-Sec: http://bailey.st/blog/smooth-sec/
Redborder: http://redborder.net/

Call me a luddite and I did read the first line
but Windows is not the best platform 
on which to run Snort - if the intention is to protect a 
Windows-only network or SCADA systems then a different platform
like the above would probably be just as simple to configure and maintain.

- -- 
Peter Bates
Senior Information Security Officer   Phone: +44(0)2076792049
Information Services Division         Internal Ext: 32049
University College London
London WC1E 6BT
-----BEGIN PGP SIGNATURE-----
Version: GnuPG v2.0.17 (MingW32)
Comment: Using GnuPG with undefined - http://www.enigmail.net/

iQEcBAEBAgAGBQJQt3h5AAoJELhVoVpEMS6RywwIAIVz97g8V6oLVLrMB13cnR8+
+70eHkJPPj801jc0t3JkfLkYetMQhLnVOBmsvafqWEnh+97H0xmwfcykVV5WfbD0
YUgarSz1XIRe7x3zv7t2MGJplthGrYPuiJUANStVyZqU8NcwpY7rRf2fb7zVXM+4
PNBOdwAdDF7zhCJw0FmsOssU+GbEEJ5zvMCKxf94VPLAq1OOvLJzeowWP5bqmsmK
Y7Iimrmi7wlWW4C5HsyZQpXGWlrpgerRkDL5FBZMbVQaUchnFucMW3ZzpSuodhcA
K0WKTJnF3EKGziZp5KwpYw+Oel4JBn77ogH5QRNuIZXzrnczFoaSD/kFQKJ0UUk=
=GntQ
-----END PGP SIGNATURE-----


------------------------------------------------------------------------------
Keep yourself connected to Go Parallel: 
VERIFY Test and improve your parallel project with help from experts 
and peers. http://goparallel.sourceforge.net
_______________________________________________
Snort-users mailing list
Snort-users () lists sourceforge net
Go to this URL to change user options or unsubscribe:
https://lists.sourceforge.net/lists/listinfo/snort-users
Snort-users list archive:
http://sourceforge.net/mailarchive/forum.php?forum_name=snort-users

Please visit http://blog.snort.org to stay current on all the latest Snort news!