<html><body><div style="font-family: Andale Mono; font-size: 12pt; color: #000000"><div>Hi,</div><div><br data-mce-bogus="1"></div><div>I did a master server with a web gui interface. So, is possible deploy rules updates (.tar.gz files) on this web gui. The engines have a shell script that download and deploy on each suricata instance. We chose do that way because some reasons:</div><div><br data-mce-bogus="1"></div><div>* We have some particulars rules and there are rules with "false positive" (i don't know with this is the better word). </div><div>* Make the deploy process user-friendly.</div><div>* We don't have control on suricata instances. Each admin have control (user-level) on your own instance.</div><div><br data-mce-bogus="1"></div><div>Sorry for my english mistakes.</div><div><br data-mce-bogus="1"></div><div>Best Regards,</div><div><br></div><div data-marker="__SIG_PRE__">-----------------------------------------------<br>Alan Santos<br>Analista de Segurança<br>Centro de Atendimento a Incidentes de Segurança (CAIS)<br>Rede Nacional de Ensino e Pesquisa (RNP)<br>(19) 3787-3314 | alan.santos@rnp.br</div><br><hr id="zwchr" data-marker="__DIVIDER__"><div data-marker="__HEADERS__"><b>De: </b>"Saxena, Samiksha" <samiksha.saxena@verizon.com><br><b>Para: </b>"oisf-users@lists.openinfosecfoundation.org" <oisf-users@lists.openinfosecfoundation.org><br><b>Enviadas: </b>Sexta-feira, 10 de julho de 2015 17:06:04<br><b>Assunto: </b>[Oisf-users] Suricata rule deployment<br></div><br><div data-marker="__QUOTED_TEXT__"><div>Hi, </div><br><div>I have a question about Suricata rules push. I am thinking to use Okinmaster to install rules. Is there a way to have a centrailzed server to install all the rules and distribute to all the suricata instances?</div><br><div>Thanks</div>
<br>_______________________________________________<br>Suricata IDS Users mailing list: oisf-users@openinfosecfoundation.org<br>Site: http://suricata-ids.org | Support: http://suricata-ids.org/support/<br>List: https://lists.openinfosecfoundation.org/mailman/listinfo/oisf-users<br>Suricata User Conference November 4 & 5 in Barcelona: http://oisfevents.net<br></div></div></body></html>