https://
rules.emergingthreats.net/
open/suricata/rules/emerging-
worm.rules
These rules describe signs of network worm activity.
13.6.4 IPS/IDS configuration example with auto-update rules
Objective:
Organize LAN protection with auto-update rules from open sources.
192.168.1.0/24 – LAN
Solution:
Create a profile of addresses of LAN which we will protect:
esr(config)# object-group network LAN
esr(config-object-group-network)# ip prefix 192.168.1.0/24
esr(config-object-group-network)# exit