MX Advanced Security & SolarWinds breach

[GrahamG]

Have the FireEye Snort rules to detect SunBurst IOCs been incorporated into MX Advanced Security IDS/IPS?

[DarrenOC · Accepted solution]

Hi Graham, look into your Event log on the MX and do a search for update.  You’ll see that the snort rules have been updated quite a few times recently 

[GrahamG]

Thanks, Darren. I do see daily snort rule updates.

[ChesterX]

What "event type" do you search for to see this?

[DarrenOC]

Hi @ChesterX , see screenshot

 

[ChesterX]

Thank you!