Import Snort configuration files globally for all Security Engines

Import Snort configuration files globally to configure default settings for Snort inspection for all Security Engines.

Note: Security Engines do not receive automatic updates for Snort rule sets. When new Snort rule sets are available, you must import new Snort configuration files and refresh the policy on the Security Engine to start using the new Snort rule sets.

For more details about the product and how to configure features, click Help or press F1.

Steps

Select Settings > Global System Properties.
Click the Global Options tab.
Click Browse next to the Snort Configuration field, then select the Snort configuration file.
Click OK.

Next steps

Enable Snort inspection for each Security Engine where you want to use Snort inspection.

Global System Properties dialog box — Global Options tab

Use this tab to configure general settings for the SMC and Security Engines.

You can also use this tab to:

Authorize McAfee® Global Threat Intelligence™ (McAfee GTI). Only administrators with unrestricted permissions (superusers) can enable McAfee GTI.
Set the expiration time for one-time passwords that are generated when you save the initial configuration for an Security Engine.
Import Snort configuration files globally to configure default settings for Snort inspection for all Security Engines.

All settings are optional.

Option	Definition
Enable McAfee Global Threat Intelligence (GTI) and McAfee Threat Intelligence Exchange (TIE) usage	When selected, enables McAfee GTI usage. Note: McAfee Threat Intelligence Exchange (TIE) is no longer supported in Security Engine 6.10 and higher.
One-Time Passwords Expire After	Defines the expiration time for one-time passwords that are generated when you save the initial configuration for an Security Engine. If the one-time password is not used, it automatically expires after the expiration time has elapsed. By default, one-time passwords expire after 30 days.
Snort Configuration	The externally created Snort configuration .zip file that contains the Snort configuration files and rules for Snort inspection. Click Browse to select a file. Click None to remove a previously imported file. Click Export to export the Snort configuration file. All Security Engines for which Snort inspection is enabled use the global Snort configuration by default. Settings in the Snort configuration .zip file for an individual Security Engine are combined with the settings in the global Snort configuration .zip file. If any configuration files in a Snort configuration .zip file for an individual Security Engine have the same files name and paths as configuration files in the global Snort configuration .zip file, the overlapping files in the global Snort configuration .zip file are ignored.
Distribution Points	Specify the URLs of the distribution points to prefetch CRLs and store them in the CRL Cache in advance. This allows for certificate validation to occur even if the network connection to the CRL Server is unavailable during the validation process. Note: The URLs specified here are shared with all Management Servers and Log Servers of the SMC.