Re: Using Snort in your business

[Peter Bates <peter.bates () ucl ac uk>]

-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA1


Hello all

On 27/05/2013 20:34, Josh Bitto wrote:
> My scope would be more directed at other schools. The thing and big debate that we're running into is the P2P stuff 
> and file sharing.

We're using Snort very happily at the perimeter - mostly 
for identifying inbound attacks and malware C&C outbound.

We run a few P2P rules to log .torrent file accesses but we don't
limit the traffic in any way.

There are plenty of commercial P2P squashing/rate limiting solutions
out there if that's a concern - personally we just deal with the
copyright violations when they come in.

- -- 
Peter Bates
Senior Information Security Officer   Phone: +44(0)2076792049
Information Services Division         Internal Ext: 32049
University College London
London WC1E 6BT
-----BEGIN PGP SIGNATURE-----
Version: GnuPG v1.4.13 (MingW32)
Comment: Using GnuPG with Thunderbird - http://www.enigmail.net/

iQEcBAEBAgAGBQJRpGdaAAoJELhVoVpEMS6RQOYH/jQYJ2fky+/BOmpUR3Ha/VDY
T8JoLBcTPldM2CCOMhdP7O7eTVptam2jMXO8Yjb52t5wflD03OuOC5M3Qce7LJ96
z4ct3bnWeJTe9eQpfc9FePE/9E8suMiL2lTcIBL5KF/JDTkthetGe19u2LsgozLT
dpJNHEacW62Itu0ukNWkB3w9WjhWmAVaiJ0hjGGojVQdr+3bxbAwxZzrqxK0/goI
IFgdWtVB1gsVS0O4SCiECY3yaxUS54lmS9Q2A2LzNSHbF9ivuBUAk1+LSwnNpBwt
kkJM4g9uwWoui59vn8bjTkog+cN4iXm/k6wUndDGLmLehEkWM4WD4yhAQnf8asI=
=D5CI
-----END PGP SIGNATURE-----


------------------------------------------------------------------------------
Try New Relic Now & We'll Send You this Cool Shirt
New Relic is the only SaaS-based application performance monitoring service 
that delivers powerful full stack analytics. Optimize and monitor your
browser, app, & servers with just a few lines of code. Try New Relic
and get this awesome Nerd Life shirt! http://p.sf.net/sfu/newrelic_d2d_may
_______________________________________________
Snort-users mailing list
Snort-users () lists sourceforge net
Go to this URL to change user options or unsubscribe:
https://lists.sourceforge.net/lists/listinfo/snort-users
Snort-users list archive:
http://sourceforge.net/mailarchive/forum.php?forum_name=snort-users

Please visit http://blog.snort.org to stay current on all the latest Snort news!