Security Onion Essentials 2.4 - Security Onion Installation, Part 1

In this session, Matt Gracie covers part 1 of the install, which includes downloading the ISO and installing the OS.
Security Onion Essentials 2.4 - Playlist: • Security Onion Essenti...
If you have questions or problems, please start a new discussion at securityonion.net/discuss

[@joy_81]

Great example of installation for beginners. I want to use 2 host. One with standalone installation and one with IDH. From first prompt says Desktop, IDH node etc, I'm confused which one is Standalone edition and install all manager components and sensor components except IDH. Thank you.

[@security-onion]

If you have questions or problems, please start a new discussion at securityonion.net/discuss

[@user-nb5mw3sq7f]

do i have to verify the iso because i didn't and after configuration there are some errors and i can't reach the website interface

[@security-onion]

We highly recommend verifying the ISO image. If you have further questions or problems, please start a new discussion at securityonion.net/discuss

[@DroisKargva]

first download was corrupted for me. Its always best to verify to avoid further issues

[@Vxrtzs_]

Did it work for you? I also didn’t verify it at first and ended up with errors and can’t reach the web interface

[@RanimHassine]

hello thank you for these amazing sessions
are cortex and theHive still integrated in SO 2.4?
if no does it tolerate it as external extension?

[@security-onion]

Cortex and TheHive are no longer included in Security Onion. We built our own case management interface and it's integrated directly into Security Onion Console. If you have further questions, please start a new discussion at securityonion.com/discuss. Thanks!

[@RanimHassine]

@@security-onion can i ask how does the forwarding of suricata logs to SO happen.
also i have been facing the same network error when i open the GUI (NB: ama using eval mode)

[@security-onion]

If you have further questions, please start a new discussion at securityonion.com/discuss.

[@GoogelDeepMind2024]

So this (ISO) is for a full install? Is their an app interface to add to my Linus OS system?

[@security-onion]

If you have questions or problems, please start a new discussion at securityonion.com/discuss

[@eliasinaciowilks6939]

👏👏

[@security-onion]

Thanks!

[@MariodeLeon-C-Security]

I'm attempting to install securityonion iso on a physical device with no success as there is an error during the installation process. I want to try the mentioned "Manual Installation via other ISO Image" option but it doesn't exist on SecurityOnion's website anymore. Is that option no longer available? Anyone else struggle to install the iso on a physical device that can share some tips/resources? Thank you for making and sharing this video!

[@security-onion]

If you have questions or problems, please start a new discussion at securityonion.com/discuss

[@TheChad17]

What are you trying to install on? Does it have any OS installed?

[@DroisKargva]

Thanks

[@security-onion]

You're welcome!

[@TheFahad457]

Followed the exact instructions. Stuck at Running post-installation scripts.

[@security-onion]

If you have questions or problems, please start a new discussion at securityonion.net/discuss

[@gnv3481]

me too, it can't connect to the repository of security onion. It is like my vm hasn't connectivity. Did you solve the problem?

[@security-onion]

If you have questions or problems, please start a new discussion at securityonion.net/discuss

[@DanBlabbers]

Same problem but can’t find help.

[@security-onion]

@DanBlabbers If you have questions or problems, please start a new discussion at securityonion.net/discuss

[@ceroandone]

Followed instructions and stuck installations with problems. It intended to reach some url

[@security-onion]

If you have questions or problems, please start a new discussion at securityonion.com/discuss

[@FlyGuys98]

How do you get gpg?

[@security-onion]

That depends on what operating system you're using. Google should be able to help you find gpg for your OS. If you have further questions or problems, please start a new discussion at securityonion.com/discuss. Thanks!