Wiki

This page is read only. You can view the source, but not change it. Ask your administrator if you think this is wrong.
====== PFSense - My Configuration - Services - Suricata - Interfaces - WAN - WAN Categories ======

===== Automatic flowbit resolution =====

{{:pfsense:my_configuration:services:suricata:interfaces:wan:pfsense_-_my_configuration_-_services_-_suricata_-_interfaces_-_wan_-_wan_categories_-_automatic_flowbit_resolution.png?800|}}

----

===== Snort IPS Policy selection =====

{{:pfsense:my_configuration:services:suricata:interfaces:wan:pfsense_-_my_configuration_-_services_-_suricata_-_interfaces_-_wan_-_wan_categories_-_snort_ips_policy_selection.png?800|}}

----

===== Select the rulesets (Categories) Suricata will load at startup =====

  * Ruleset: ET Open Rules:
    * emerging-attack_response.rules
    * emerging-botcc.portgrouped.rules
    * emerging-botcc.rules
    * emerging-ciarmy.rules
    * emerging-coinminer.rules
    * emerging-compromised.rules
    * emerging-current_events.rules
    * emerging-dos.rules
    * emerging-dshield.rules
    * emerging-exploit.rules
    * emerging-malware.rules
    * emerging-mobile_malware.rules
    * emerging-phishing.rules
    * emerging-scan.rules
    * emerging-worm.rules
  * Ruleset: Snort Text Rules:
    * snort_attack-responses.rules
    * snort_backdoor.rules
    * snort_bad-traffic.rules
    * snort_blacklist.rules
    * snort_botnet-cnc.rules
    * snort_ddos.rules
    * snort_dos.rules
    * snort_exploit-kit.rules
    * snort_exploit.rules
    * snort_malware-backdoor.rules
    * snort_malware-cnc.rules
    * snort_malware-other.rules
    * snort_malware-tools.rules
    * snort_phishing-spam.rules
    * snort_policy-spam.rules
    * snort_scan.rules
    * snort_specific-threats.rules
    * snort_spyware-put.rules
    * snort_virus.rules
    * snort_web-attacks.rules

{{:pfsense:my_configuration:services:suricata:interfaces:wan:pfsense_-_my_configuration_-_services_-_suricata_-_interfaces_-_wan_-_wan_categories_-_select_the_rulesets_categories_suricata_will_load_at_startup.png?800|}}

----