topic Re: Snort Rule Update in Network Security

Snort Rule Update

Ricky Sandhu — Fri, 03 Jun 2022 15:00:06 GMT

Good morning, I notice each time I log into my FMC, I have a deployment task pending. Upon checking the task details, it's always the rule updates that have been downloaded but not applied to my FTD appliances. I have to manually deploy this each time. I am still new to FMC and was wondering if I check the below setting under Rule Updates, would this automatically apply the rules when they are downloaded?

Re: Snort Rule Update

Marvin Rhoads — Fri, 03 Jun 2022 15:16:20 GMT

Yes it will do exactly that.

Some users choose not to tick that box since the deployment will include any other changes that are pending. Depending on your environment, that may include other changes that are a work in progress and not ready or approved for deployment.

However if you are the only admin then it's usually not a problem to just allow the deployment.

Re: Snort Rule Update

Ricky Sandhu — Sat, 04 Jun 2022 17:08:18 GMT

Thank you Marvin

Re: Snort Rule Update

Eric R. Jones — Sun, 05 Jun 2022 20:44:19 GMT

If you check that box then when you manually download the new updates they
will deploy.

If you check the box below that and setup a schedule it will download and
deploy without you having to interact.

After a year of using the FMC I finally decided to use this function.

Reason why is to be able to form a trust with the versions that get posted
won't regularly fail on me.