Re: VRT rules policy question

["Joel Esler (jesler)" <jesler () cisco com>]

I would imagine, because ET doesn’t use the policy features.

Sounds like you need to submit an issue to pulledpork:  https://github.com/shirkdog/pulledpork/issues


--
Joel Esler | Talos: Manager | jesler () cisco com<mailto:jesler () cisco com>






On Apr 4, 2017, at 12:42 PM, Stanford Prescott <stan.prescott () gmail com<mailto:stan.prescott () gmail com>> wrote:

When using pulledpork and setting a VRT rules policy like connectivity,
balanced or security why are emerging threats rules disabled?

After selecting a security policy, if one were to want to return to no
security policy and re-enable the emerging threats rules, is there a quick
way to do that using pulledpork?
------------------------------------------------------------------------------
Check out the vibrant tech community on one of the world's most
engaging tech sites, Slashdot.org<http://Slashdot.org>! http://sdm.link/slashdot
_______________________________________________
Snort-users mailing list
Snort-users () lists sourceforge net<mailto:Snort-users () lists sourceforge net>
Go to this URL to change user options or unsubscribe:
https://lists.sourceforge.net/lists/listinfo/snort-users
Snort-users list archive:
http://sourceforge.net/mailarchive/forum.php?forum_name=snort-users

Please visit http://blog.snort.org to stay current on all the latest Snort news!

------------------------------------------------------------------------------
Check out the vibrant tech community on one of the world's most
engaging tech sites, Slashdot.org! http://sdm.link/slashdot
_______________________________________________
Snort-users mailing list
Snort-users () lists sourceforge net
Go to this URL to change user options or unsubscribe:
https://lists.sourceforge.net/lists/listinfo/snort-users
Snort-users list archive:
http://sourceforge.net/mailarchive/forum.php?forum_name=snort-users

Please visit http://blog.snort.org to stay current on all the latest Snort news!