Home
Help
Search
Login
Register
OPNsense Forum
»
English Forums
»
Development and Code Review
(Moderator:
fabian
) »
Wazuh Agent integration - call for tests
« previous
next »
Print
Pages: [
1
]
Author
Topic: Wazuh Agent integration - call for tests (Read 10112 times)
juliocbc
Sr. Member
Posts: 304
Karma: 12
Wazuh Agent integration - call for tests
«
on:
May 21, 2019, 11:32:05 pm »
Hi!
I've created this small script to put wazuh-agent to work together with OPNsense. It's working well in one of our environments, till now ;-)
Script:
https://github.com/cloudfence/opnsense-wazuh/blob/master/opnsense-ban.sh
The main idea is to ban an offensor IP address that is often is catch by the wazuh's active response feature.
If you are using OPNsense with Wazuh, I invite you to make some tests and let me know if it will work well for you too!
Installation instructions here:
https://github.com/cloudfence/opnsense-wazuh/blob/master/README.md
«
Last Edit: May 22, 2019, 02:08:48 pm by juliocbc
»
Logged
Cloudfence Open Source Team
mimugmail
Hero Member
Posts: 6716
Karma: 476
Re: Wazuh Agent integration - call for testing
«
Reply #1 on:
May 22, 2019, 05:53:37 am »
Good addition! First I have to build an official port but the wazuh guys doing some unacceptable things in their install.sh
Logged
WWW:
www.routerperformance.net
Support plans:
https://www.max-it.de/en/it-services/opnsense/
Commercial Plugins (German):
https://opnsense.max-it.de/
juliocbc
Sr. Member
Posts: 304
Karma: 12
Re: Wazuh Agent integration - call for testing
«
Reply #2 on:
May 22, 2019, 01:04:21 pm »
Michael,
Great!!! Just waiting your wazuh port.
About the plugin, what about if we work together in it?
Logged
Cloudfence Open Source Team
lfirewall1243
Hero Member
Posts: 1379
Karma: 45
Re: Wazuh Agent integration - call for tests
«
Reply #3 on:
August 02, 2021, 11:05:06 am »
Any news for a Wazuh Port?
Would be an amazing plugin for OPNsense I think.
Logged
(Unoffial Community) OPNsense Telegram Group:
https://t.me/joinchat/0o9JuLUXRFpiNmJk
PM for paid support
peterwkc
Full Member
Posts: 104
Karma: 0
Re: Wazuh Agent integration - call for tests
«
Reply #4 on:
August 08, 2023, 08:55:23 am »
How to install?
Logged
franco
Administrator
Hero Member
Posts: 16070
Karma: 1421
Re: Wazuh Agent integration - call for tests
«
Reply #5 on:
August 08, 2023, 02:26:13 pm »
We may be working on a Wazuh plugin for the community.
Cheers,
Franco
Logged
thwien
Newbie
Posts: 3
Karma: 1
Re: Wazuh Agent integration - call for tests
«
Reply #6 on:
August 25, 2023, 10:53:31 am »
Thanks a lot for integrating Wazuh agent as an OPNsense plugin at version 23.7.2. I am using Wazuh as SIEM and installed wazuh-agent via CLI, configured Syslog-ng to produce the old standard log format and it works perfectly. Due to this plugin it will be easier to use Wazuh agent on new installed OPNsense firewalls. This saves time. Keep up your good work.
Logged
peterwkc
Full Member
Posts: 104
Karma: 0
Re: Wazuh Agent integration - call for tests
«
Reply #7 on:
March 17, 2024, 04:39:56 am »
How to install Wazuh plugin?
Logged
mimugmail
Hero Member
Posts: 6716
Karma: 476
Re: Wazuh Agent integration - call for tests
«
Reply #8 on:
March 18, 2024, 09:26:41 am »
You need to be on a later version and search for the plugin. Which version do you have installed?
Logged
WWW:
www.routerperformance.net
Support plans:
https://www.max-it.de/en/it-services/opnsense/
Commercial Plugins (German):
https://opnsense.max-it.de/
_tribal_
Newbie
Posts: 6
Karma: 0
Re: Wazuh Agent integration - call for tests
«
Reply #9 on:
March 21, 2024, 09:48:49 pm »
Is any sudgestions for this issue?
https://forum.opnsense.org/index.php?topic=39222.msg192088
On latests version all the same :'(
os-wazuh-agent 1.0_1
OPNsense 24.1.4-amd64
FreeBSD 13.2-RELEASE-p10
OpenSSL 3.0.13
Logged
mimugmail
Hero Member
Posts: 6716
Karma: 476
Re: Wazuh Agent integration - call for tests
«
Reply #10 on:
March 21, 2024, 10:21:45 pm »
See other post
Logged
WWW:
www.routerperformance.net
Support plans:
https://www.max-it.de/en/it-services/opnsense/
Commercial Plugins (German):
https://opnsense.max-it.de/
Print
Pages: [
1
]
« previous
next »
OPNsense Forum
»
English Forums
»
Development and Code Review
(Moderator:
fabian
) »
Wazuh Agent integration - call for tests