The Signature Update tool in the NDR appliance Web UI simplifies how you manage and deploy Suricata rule sets from your NDR appliance to your PX appliance.
Access the Signature Update page from the Manage menu to upload a new rule set to your NDR appliance. New and existing rule sets are stored on the NDR Director and all connected data nodes. Deploy a rule set directly from your NDR Director to connected PX appliances or groups of PX appliances.
You can now upload signature rule files in a tarball format. Supported file extensions include .tar, .tar.gz, .tgz, .tar.bz2, .tbz2, .tar.xz, and .txz.
The NDR appliance Web UI provides alerts and threat details for signature matches on the Alerts page. See Working with alerts for more information.