Custom Snort 3 Intrusion Policies for Access Control

Guidelines and limitations for network analysis and intrusion policies

Updated: February 4, 2026

Want to summarize with AI?

Consider the feature limitations of Snort 3 for Firewall Management Center-managed Firewall Threat Defense devices when planning your network security deployment.

Feature Limitations of Snort 3 for Firewall Management Center-Managed Firewall Threat Defense

The table lists the features that are supported on Snort 2 but not supported on Snort 3 for Firewall Management Center-managed Firewall Threat Defense devices.

Table 1. Feature Limitations of Snort 3
Policy/Area	Features not supported
Access Control Policy	The following application settings: Safe Search YouTube EDU
Intrusion Policy	Global rule thresholding Logging configuration: SNMP SRU rule updates as Snort 3 supports only LSP rule updates
Other features	Event logging with fully qualified domain name (FQDN).

Need help?

Open a support case

(Requires a Cisco Service Contract)

The documentation set for this product strives to use bias-free language. For the purposes of this documentation set, bias-free is defined as language that does not imply discrimination based on age, disability, gender, racial identity, ethnic identity, sexual orientation, socioeconomic status, and intersectionality. Exceptions may be present in the documentation due to language that is hardcoded in the user interfaces of the product software, language used based on RFP documentation, or language that is used by a referenced third-party product. Learn more about how Cisco is using Inclusive Language.