Update ips.rst (#151)

* Update ips.rst oinkcode and rule type specifications * Update ips.rst Co-authored-by: Giacomo Sanchietti <[email protected]> * Update ips.rst Co-authored-by: Giacomo Sanchietti <[email protected]> * Update ips.rst Co-authored-by: Giacomo Sanchietti <[email protected]> * Update ips.rst Co-authored-by: Giacomo Sanchietti <[email protected]> * Update ips.rst Co-authored-by: Giacomo Sanchietti <[email protected]> --------- Co-authored-by: Giacomo Sanchietti <[email protected]>
NethServer · Feb 21, 2025 · 7a27665 · 7a27665
1 parent 1757b53
commit 7a27665
Showing 1 changed file with 33 additions and 4 deletions.
diff --git a/ips.rst b/ips.rst
@@ -30,11 +30,40 @@ Once the policy is selected, click on the :guilabel:`Save` button to save the ch
 
 .. _oinkcode-section:
 
-Set the Oinkcode
-----------------
+Access to Snort rules via Oinkcode
+==================================
+
+NethSecurity supports the use of a Snort subscription to obtain ``Registered`` and ``Subscriber`` rules through the Oinkcode.
+The `Oinkcode` is a unique code assigned to registered users on Snort.org, this code is required to authenticate the download of Snort rules.
+
+
+Available rule categories
+-------------------------
+
+- **Community Rules (Free rules)**:
+  Available to all registered users without restrictions.
+  Maintained by the Snort community.
+  Provide basic protection but receive less frequent updates compared to official rules.
+  No Oinkcode is required to access these rules.
+
+- **Registered Rules (Free rules with delay)**:
+  Official rules updated by the Snort team.
+  Available for free to registered users, but with a 30-day delay compared to the latest version.
+  Oinkcode is required to access these rules.
+``
+
+- **Subscriber Rules (Paid rules, real-time updates)**
+  Immediate access to the most up-to-date rules without any delay.
+  Available only to users with a Snort Subscriber Rule Set subscription.
+  Oinkcode is required to access these rules.
+
+How to obtain and use the Oinkcode
+----------------------------------
+
+- Register on Snort.org
+- Retrieve your Oinkcode from the account profile section
+- On NethSecurity, paste your personal code into the `Oinkcode` field. You can verify if the code is valid by clicking on the :guilabel:`Test code` button
 
-NethSecurity supports the usage of the paid Snort subscription, to enable it, you need to add the licence code in the
-`Oinkcode` field. You can verify if the code is valid by clicking on the :guilabel:`Test code` button.
 
 Today event list
 ================