Important Notice: Our web hosting provider recently started charging us for additional visits, which was unexpected. In response, we're seeking donations. Depending on the situation, we may explore different monetization options for our Community and Expert Contributors. It's crucial to provide more returns for their expertise and offer more Expert Validated Answers or AI Validated Answers. Learn more about our hosting issue here.

Are we allowed to use “active” response mechanisms like automatic TCP resets in Snort?

April 26, 2017allowed automatic mechanisms resets Response SNORT TCP

0

Posted

Are we allowed to use “active” response mechanisms like automatic TCP resets in Snort?

1 Answer

0

Posted

Absolutely – that’s up to your team. But bear in mind any issues related to the scoring engine and your team’s use of automatic response mechanisms are your responsibility. In other words, if your response mechanism blocks the activity of the scoring engine you will lose points.