IDS Policy Manager

215

  The SCP method uses SSH server running on the sensor. User name and

password are used to log in to the Snort sensor to upload and download files. The

 Upload Directory  shows the location of the 

snort.conf

 file on the Snort

sensor. Since the location of other rule files is mentioned in the 

snort.conf

file, you don't need to specify names and locations of other rule files.

After entering this information, you can click  OK  to add the sensor. After add 

ing the sensor, the first task is to download policy from the sensor you added in the pre 

vious step. For this purpose, you can use the  Download Policy from Sensor  option in

the  Sensor  menu. After downloading the policy, you can click on the  Policy Man 

ager  tab at the bottom of the screen to edit the policy. When you click here, you will

see the screen with a list of currently available policies. Since you used  Official  as the

name of the policy while adding the sensor, this policy must be present in the list.

To edit the policy, double click the policy name and a Policy Editor window will

appear, as shown in Figure 7 5. 

Figure 7 5 

The Policy Editor window with list of rules.