IPS UI

[gsanchietti]

Create a UI for Snort IPS.

Settings page:

• Enable/disable service
• Select rule policy: "connectivity", "balanced", "security"
• Manage oinkcode (subscription key)
• List of disabled rules

Bypass IPS page:

• Add local IPv4/IPv6 addresses to bypass IPS
• Options: direction (source/destination), type (IPv4/IPv6), address

Event list page:

• Display current day's events
• Disable or suppress rule by clicking:
  • Disable: add to disabled list (SID, optional description)
  • Suppress: add to suppression list (SID, direction, IP/CIDR, optional description)

Monitoring:

• Add charts to local monitoring page and controller monitoring page
• Show: number of rules, last download time
• Dashboard: show IPS status

References:

• CLI implementation
• Mockup details