New Snort 3 IPS policy update and best practice vs. Snort 2

[MS-JK]

Recently migrated from snort 2 to snort 3 and looking for best practice to maintain and review IPS policy. For example, in new snort 3 policy I no longer have the POLICY LAYER where I would go to view any NEW or MODIFIED rules from previous update. How does one maintain snort 3 rules now? Looking for simple quick how-to (not entire book), what you do on weekly basis to maintain and validate new updated policies and changes.

Thanks!

[manabans]

A Snort 3 intrusion rule update is called an LSP (Lightweight Security Package) rather than an SRU. The system still uses SRUs for Snort 2; downloads from Cisco contain both the latest LSP and SRU. The system automatically uses the appropriate rule set for your configurations.
You can check and update the LSP on System > Updates > Rule Updates.

Reference: https://www.cisco.com/c/en/us/td/docs/security/firepower/70/configuration/guide/fpmc-config-guide-v70/system_software_updates.html#ID-2259-00000356