Monday, July 14, 2014

Snort Subscriber Rule Set Update

In the post about the new website, I had a section about our new rule packaging structure.  Let me expand on it a bit so that everyone understands.

The Rule Set is broken down like this:

  • Community
    • GPLv2
    • Built from your submissions, tested and approved, by us.
    • Published daily
    • Always free.
  • Registered
    • Snort Subscriber Rule Set License (No re-use without fee, and no distribution without fee)
    • 30-day delay on new content
    • Updated content (outside the 30 day window) is updated every release
    • Published at least twice a week, Tuesdays and Thursdays.  
    • Free, with license agreement on Snort.org
    • Contains the Community Ruleset
  • Subscriber
    • Snort Subscriber Rule Set License (No re-use without fee, and no distribution without fee)
    • Released at the same time as content for the Cisco NGIPS (Sourcefire NGIPS) is released to customers.
    • Three different license levels
      • Personal
        • 29.99 a year/sensor
      • Business
        • 399.99 a year/sensor
      • Integrator
        • Integrate the Snort Subscriber Rule Set into your platform.
        • Your logo on our site as an authorized reseller
        • Our logo on your site and offerings
    • Published at least twice a week, Tuesdays and Thursdays
    • Contains the Community Ruleset
If you are familiar with the way our rule set was structured, you'll see some beneficial changes:
  • Our price for business Subscribers is now 399.99 a year/sensor.  This will make calculations easier.
  • Registered users now get updated content. If the rule was authored outside of the 30-day "new content" window, all users now receive updates to that content.  
  • In addition, we have renamed the rule set to "Snort Subscriber Rule Set".  Still developed by the same great team here at Cisco.
This should make things much simpler for everyone, and we hope you enjoy the content.