Sourcefire VRT Certified Rules Lifecycle Policy

February 2008

Key Terms:

Major Release Change in the first or second decimal of the version number. Examples: Version 2.0 to 3.0, Version 2.8 to 2.9
Minor Release Change in the third decimal of the version number. Example: Version 2.8 to 2.8.1
Patch Release Change in the fourth decimal of the version number. Example: Version 2.8 to 2.8.0.1
Current Version The most recent "major" production release with the highest minor and patch releases
Prior Version The major release previous to the current production release with the highest minor and patch releases
Legacy Version Major releases prior to the Current and Prior Versions

The Sourcefire Vulnerability Research Team (VRT) provides updated rule sets for the Current Version and Prior Version of open source Snort available at www.snort.org. The following table depicts the versions of Snort supported by the VRT under this Life Cycle Policy:

Snort Version VRT Certified Rules
Current Version Updates Provided
Prior Version Updates Provided*
Legacy Versions Updates cease 90 days following
release date of the Current Version*

**Rule updates for Prior Versions of Snort may not be identical to updates for the Current Version. VRT Certified Rules are developed to take advantages of the latest features in Snort. However the VRT makes every effort to convert rules updates for supported Prior and Legacy Versions.

Once a new major production (stable) release of Snort is available at www.snort.org, that version now becomes the Current Version.

The following table illustrates the current VRT Certified Rules Lifecycle Policy as of December 2007.

Snort Version VRT Certified Rules
Snort 2.8.0.1 Current Version
Snort 2.7.0 Previous Version
Previous Versions Legacy Versions

Sourcefire reserves the right to amend this lifecycle policy at any time with or without notice.