Hello there,
we have recently upgraded to Snort3 and have enabled portscan detection. I wanted to check what are the recommendations for whitelisting to reduce noise (considering the whitelisting options are very basic). Also how do you guys manage the alerts? is there a way for direct email alerts from FMC? if not, how do you guys manage those alerts?
Thanks again
