Conversation

End of an era, folks.

The Emerging Threats team has officially dropped support for the ETOPEN and ETPRO 4.x rulesets.

https://community.emergingthreats.net/t/suricata-4-x-support-ends-friday-september-13-2024/1968

As you all know, when a new door opens (support for the 7.0.3 rule syntax), that another door must close (support for the 4.0.x syntax), due to limited resources.

As a reminder, the Suricata 4.1.x branch was EOL'd by OISF at the end of 2020, and that the ET team kept supporting rules for it out of community need.

If this is a choice that affects your network security posture, the best advice I can offer you is to focus on transitioning to Suricata 5, Suricata 6, or the latest current 7.x release.

and if I'm really being truthful with you, moving to the current Suricata 7.x release is the best choice you can make right now.

There are detailed guidelines for installing Suricata on the OISF's Suricata "read the docs", there are pre-built packages available for most distributions, and if none of that satisfies you, I can wholeheartedly recommend security onion for your evaluation needs as it comes with Suricata pre-installed, rule downloading/management tools, and an ELK stack pre-installed for rule review.

Good luck, and if you have questions, join us on https://community.emergingthreats.net