Hi there

I manage an IPS with centos + snort + base, the most usual setup. But with BASE there is no differentiate treatment between a simple alert on the .rules file from a drop.

Assuming that snort is the best solution for an IPS (please let me know if you have a different opinion) I'm seeking for your advices and experience with other GUI (web-based or not, free or not) that runs on top of snort.