The aggressiveness of rule matching can be configured globally for the appliance as per SNORT priority level.

  • Low = Only logging with no rejection
  • Default = Priority 1 (high) rules are block all else is logged
  • High = Priority 1 (high) and 2 (medium) rules are block all else is logged
  • Paranoid = All priority levels are blocked and logged