OPNsense
  • Home
  • Help
  • Search
  • Login
  • Register

  • OPNsense Forum »
  • English Forums »
  • Intrusion Detection and Prevention »
  • In transparent bridge mode, can IPS be enabled on bridge interface
« previous next »
  • Print
Pages: [1]

Author Topic: In transparent bridge mode, can IPS be enabled on bridge interface  (Read 3618 times)

umar

  • Newbie
  • *
  • Posts: 2
  • Karma: 0
    • View Profile
In transparent bridge mode, can IPS be enabled on bridge interface
« on: December 08, 2018, 07:37:51 am »
Dear friends
I want to configure OPNsense in Transparent Bridge mode for not changing my other network related settings in my information systems. i want to ask if i can use intrusion protection in it, as i saw " use physical interface only" but in transparent mode, i think there is no filtering being performed on physical interface.

Clarification in this regard is required.
Regards
Logged

sdnavarro

  • Newbie
  • *
  • Posts: 9
  • Karma: 0
    • View Profile
Re: In transparent bridge mode, can IPS be enabled on bridge interface
« Reply #1 on: December 11, 2018, 01:08:51 pm »
Hello
I have a computer with a transparent bridge configured, the ids filters the LAN and WAN gate, the Pattern matcher is aho-Corasick

Logged

umar

  • Newbie
  • *
  • Posts: 2
  • Karma: 0
    • View Profile
Re: In transparent bridge mode, can IPS be enabled on bridge interface
« Reply #2 on: January 08, 2019, 08:01:40 am »
Thank you for your reply, i m a bit confused here, if i follow the transparent bridge document it says that filteration will ONLY be performed on bridge interface. I have also tunned sysctl.conf perimeters in system/tunnable like wise. If i go to configure IDS, it says use physical interface......

==============
Should i keep/choose the bridge interface for IDS ( or later IPS) implementation?   
Logged

  • Print
Pages: [1]
« previous next »
  • OPNsense Forum »
  • English Forums »
  • Intrusion Detection and Prevention »
  • In transparent bridge mode, can IPS be enabled on bridge interface
 

OPNsense is an OSS project © Deciso B.V. 2015 - 2024 All rights reserved
  • SMF 2.0.19 | SMF © 2021, Simple Machines
    Privacy Policy
    | XHTML | RSS | WAP2