Practical procedure and troubleshooting notes for Configuring IPS in PfSense with Snort.

1. Login to pfSense
   
2. In the top navigation pane, select Services
   
3. From the Services drop-down, select Snort
   
4. This brings you to the Snort Configuration page
   
5. Click on Global Settings
   
6. Check Enable Snort VRT and enter your Snort Oinkmaster Code
   
7. Check Enable Snort GPLv2
   
8. Under Emerging Threats (ET) Rules, check Enable ET Open
   
9. Under Sourcefire OpenAPPID Detectors, check both checkboxes
   
10. Configure Rule Update Settings as desired
    
11. Configure General Settings as desired
    
12. Click Save at the bottom of the page
    
13. At the top of the page, select Snort Interfaces
    
14. On the Snort Interfaces page, click Add (bottom left corner)
    
15. On the Edit Interface page, check Enable Interface for your chosen interface
    
16. Configure Alert Settings as desired
    
17. Scroll to the bottom of the page and click Save
    
18. Back on the Interfaces page, click the Play button to start Snort on the interface