Snort with Endian

[Guest]

[pratik]

For quite some while, I have been wanting to try Endian firewall to pair it with my Snort set up, and have been looking for a few answers before I begin.

Endian provides Snort as the built-in IDS/IPS. Then does Snort function only as a binary or do I still have access to its source code and can do whatever changes I might want to do with the code? And do other 'Snort' products like PulledPork work here? And if not, how are their functions (like managing rules, enabling and disabling them as per need, and modifying signatures) replaced in Endian?

Thanks.