Snort inspection configuration overview

The configuration of Snort inspection consists of these general steps.

  1. Prepare Snort configuration files.
  2. Import Snort configuration files globally to configure default settings for Snort inspection for all Security Engines.
  3. (Optional) Import Snort configuration files for individual Security Engines to override settings in the global Snort configuration for specific Security Engines.

  4. Enable Snort inspection for Security Engines.
  5. Create Access rules to select traffic for Snort inspection.