Yes, but you can make snort fiddle with your firewall in real time, or nearly so.