Which open-source network intrusion detection system is described as requiring a subscription for up-to-date rulesets, with community rules available for non-subscribers?

Which open-source network intrusion detection system is described as requiring a subscription for up-to-date rulesets, with community rules available for non-subscribers?

• A. Intrusion detection system (IDS)
• B. Snort
• C. IPS
• D. NGFW

Answer: (B)

Snort is the open-source network intrusion detection system that matches this description. It operates with signature-based rules to detect malicious traffic, and while it’s available as an open-source product, there is a paid Snort Subscriber Ruleset that provides up-to-date rules. For those who don’t subscribe, free community rules are available, often via the Emerging Threats community feed. This combination—paid up-to-date rules for subscribers plus a free community rule set for non-subscribers—is what sets Snort apart in this context. The other options describe broader categories (an IDS in general, an IPS, or a next-generation firewall) rather than a specific open-source system with this rule-update model.

Snort is the open-source network intrusion detection system that matches this description. It operates with signature-based rules to detect malicious traffic, and while it’s available as an open-source product, there is a paid Snort Subscriber Ruleset that provides up-to-date rules. For those who don’t subscribe, free community rules are available, often via the Emerging Threats community feed. This combination—paid up-to-date rules for subscribers plus a free community rule set for non-subscribers—is what sets Snort apart in this context. The other options describe broader categories (an IDS in general, an IPS, or a next-generation firewall) rather than a specific open-source system with this rule-update model.