Re: [Snort-inline-users] Does Sourcefire's IPS use snort-inline?

[Nick R. <ni...@ro...>]

> Sourcefire maintains and uses the inline capabilities of snort proper
>
> EG:
>
> $ wget http://www.snort.org/dl/current/snort-2.4.3.tar.gz
> $ tar -xvzf snort-2.4.3.tar.gz
> $ cd snort-2.4.3
> $ ./configure --enable-inline && make && make install
>

  I would be very surprised if SourceFire is using snort_inline for their
production branch.  More likely, it is a modified version of
snort+flexresponse.  Is anyone at SourceFire on this list that could
comment?


>
> Richard Compton wrote:
>> Sourcefire has their own line of IPSs that sit inline and block
>> traffic.  Do these devices just use snort-inline or do they have some
>> proprietary code that they use for their IPS?  Anybody have any
>> experience w/ these IPSs?
>>
>> --
>> Thanks,
>> Rich Compton
>
>




Nick Rogness <ni...@ro...>