Omada IDS/IPS

Omada IDS/IPS

Omada IDS/IPS
Omada IDS/IPS
2024-10-01 08:55:13 - last edited 2024-10-16 02:05:22
Tags: #IPS

Hello,

 

I am looking for any information on what the source is for IDS/IPS rule sets, and how frequently the rule sets are downloaded to the IDS/IPS capable routers. It appears that they are Suricata rules, can we load our own rule sets, or can we point it to something such as the Proofpoint Emerging Threats Rules.

  1      
  1      
#1
Options
1 Accepted Solution
Re:Omada IDS/IPS-Solution
2024-10-02 02:48:39 - last edited 2024-10-16 02:05:22

 Hi @SkywalkerIsNull 

 

As for the frequency of downloading the rule sets to the IDS/IPS capable routers, TP-Link typically releases updates periodically to ensure that the routers can effectively detect and prevent the latest threats. However, the specific update frequency may vary depending on different product models and security situations. Generally, users can check for updates through the router's management interface or the official TP-Link support website.

 

Regarding loading your own rule sets or pointing the router to other rule sources such as the Proofpoint Emerging Threats Rules, TP-Link routers are designed to use the rule sets provided by TP-Link. Loading third-party rule sets or pointing to external rule sources may not be supported to ensure the stability, compatibility, and security of the router. It is recommended that users use the official rule sets provided by TP-Link for the best security protection.

Recommended Solution
  0  
  0  
#2
Options
3 Reply
Re:Omada IDS/IPS-Solution
2024-10-02 02:48:39 - last edited 2024-10-16 02:05:22

 Hi @SkywalkerIsNull 

 

As for the frequency of downloading the rule sets to the IDS/IPS capable routers, TP-Link typically releases updates periodically to ensure that the routers can effectively detect and prevent the latest threats. However, the specific update frequency may vary depending on different product models and security situations. Generally, users can check for updates through the router's management interface or the official TP-Link support website.

 

Regarding loading your own rule sets or pointing the router to other rule sources such as the Proofpoint Emerging Threats Rules, TP-Link routers are designed to use the rule sets provided by TP-Link. Loading third-party rule sets or pointing to external rule sources may not be supported to ensure the stability, compatibility, and security of the router. It is recommended that users use the official rule sets provided by TP-Link for the best security protection.

Recommended Solution
  0  
  0  
#2
Options
Re:Omada IDS/IPS
2024-10-04 05:28:19

Hello @Vincent-TP,

 

Thank you for the response. Does TP-Link have a white paper, or any other details about the methodology, processes etc. that they are using to generate the rules?

  0  
  0  
#3
Options
Re:Omada IDS/IPS
2024-10-04 05:43:20
Unfortunately, no.
  0  
  0  
#4
Options

Information

Helpful: 1

Views: 343

Replies: 3

Tags

IPS
Related Articles