Yes red zone is externat_net. I found out that there is a configuration problem with expert mode.
Snort will not start because there are some rules which need the config setting preprocessor ssl
I fixed it, but till now no alert. I will check this the next days
↧
IPS really working?
↧