We’ve been using Snort for about a year now and recently updated to 2.4.
We’ve been looking for a front-end but haven’t decided which to buy. Suggestions? We’ve of course seen and demoed some of the basics, like BASE and Snorby, and found particular interest in Aanval. Has anyone used Aanval or could give some feedback? We’re looking for a solution pretty quickly. Aanval says they can get deployments out right away, but we want to make sure we get the right thing.