i suggest you to configure it according to your organization needs. snort configuration file can me modified according to needs more signature means more alerts so u have to fine tune your IDS before deployin into your organization.
since high number of false postitives or alerts may let u miss out potential intrusions. ------------------------------------------------------------------------ Test Your IDS Is your IDS deployed correctly? Find out quickly and easily by testing it with real-world attacks from CORE IMPACT. Go to http://www.securityfocus.com/sponsor/CoreSecurity_focus-ids_040708 to learn more. ------------------------------------------------------------------------
