| ACID provided us with a powerful tool to manage the alerts generated by the Snort sensors. Managing the sensors themselves the configurations, preprocessors, rule sets can all be accomplished from the command line. However, when you have to manage multiple sensors in several different locations, it's easier to manage all the systems from one location. SnortCenter provides this capability through a web interface. Many administrators use the same web server to run SnortCenter and the ACID console. If you prefer a standalone system, refer to the installation directions for Apache and PHP in Chapter 10. Then move to the installation section for SnortCenter, below. |