Snort Engines

Trellix IPS NS-series Sensors support either of the following Snort engines:

Note

• A Sensor can run only one of the above engines at a time.

• The Suricata Snort engine is not available on NS9600, NS7600 and NS3600 Sensors.

You can select a Snort engine at the global level and override the selection per admin domain and/or Sensor, as necessary. The Advanced Device Settings page at the global and device levels allows you to select the engine you prefer to use.

Note

The default selection is Trellix IPS Snort.