IDSPM should work fine with Snort v2.7. There is a new stream 5 Preprocessor which was added back in January to IDSPM. however, I haven't gone through and tested the final yet.
as for rules update, I am going to add an update in the next build which will be out later this week to add Snort 2.7 rules location and change the Snort 2.6 location since both have changed on Snort.org. I haven't played with Snort v2.7 final, but from the release notes it looks like there is no difference in the rules and there will be no problem.
Cheers,
Jeff |
|