Webinar - OPNsense and Suricata, a great combination!
HTML-код
- Опубликовано: 14 окт 2020
- Originally recorded on 10/15/2020.
OPNsense is an open source, easy-to-use and easy-to-build HardenedBSD based firewall and routing platform. It brings the rich feature set of commercial offerings with the benefits of open and verifiable sources. The inline IPS system of OPNsense is based on Suricata and utilizes Netmap to enhance performance and minimize CPU utilization. This deep packet inspection system is very powerful and can be used to mitigate security threats at wire speed. This webinar will take you through basic OPNSense setup before getting into Suricata installation and configuration. You will learn about different modes of operation, IDS versus IPS, and how to utilize the ET Pro Telemetry ruleset. By the end of this webinar you will be ready to run the latest version of Suricata in OPNSense to maximize visibility into your networks! 
Наука
Thank you guys that was very nice. Are there meeting minutes or highlights I can reference?
Would be nice to see an update on this topic as the config has been changed a bit with the policies.
100%
I hope we will see an new version witz suricata 6 on OPNsense. Current It looks, it dosn`t work.
I have installed OPNsense 22.7.8-amd64 on Nov 19 2022. I have tried to install as presented in the video. However, the detection of allowed and drop for the Ricardo test file did not appear in the Alert section. In my Intrusion Detection - Download - Rulesets, there are only Orange Colored Buttons for Enable selected and Disable selected. Enable (drop filter) and Enable (clear filter) buttons are not there, thus I am not able to enable the Drop Filter. Appreciate help!! Thanks!!
Hi team. Thanks for this cool introduction. One question about. Can we combine suricata and clamav on one box? Is it was good or bad solution?
They are not related to each other, so mixing should be fine. We don't anticipate either program getting in the other's way.
How do I setup opnsense when I need ppoe credentials? Does opnsense take advantage of a quad core processor? When I run untangle on my system I can get approximately 1 full gig speed even with antivirus, and intrusion prevention on do you think I can get about the same speed with it on? If I want those features I’d it hard to setup?
Excellent Video. But as of today that is Aug 30, 2022 I can confirm you that Suricata is not working on OpnSense.
it works great !?