Cybersecurity Analyst - Configure Snort IDS/IPS
Executive Summary
System Configuration
Connect pfsense Router to Internet
Add New Interface
Assign New Interface
Update pfsense to latest version
Install and Configure Snort (IDS/IPS)
pfsense Package Manager
Oinkmaster Code & Snort Configuration
Update Snort Rules
Configure and Enable Snort Interface
Enable Snort Rules
Inspect Snort logs:
Suspicious activity on the Untrusted Interface
Suspicious activity on the DMZ Interface
Alerts Resulting from Exploits
Firewall Rules to Block FTP Traffic
Firewall Rules and Snort Demonstration
Recommendations and closing remarks