OPNsense Forum

English Forums => Intrusion Detection and Prevention => Topic started by: battle on September 30, 2024, 01:38:20 AM

Title: Zenarmor or Suricata
Post by: battle on September 30, 2024, 01:38:20 AM
I installed Zenarmor today and there is a conflict between both Zenarmor and Suricata with both trying to use the WAN.  Which system would by better to use?  Suricata on WAN or LAN, Zenarmor on the opposites, or Zenarmor (MngoDB) on both and disregard Suricata ?
Title: Re: Zenarmor or Suricata
Post by: Cljackhammer on September 30, 2024, 12:23:45 PM
It's more appropriate to configure Suricata for the WAN and have Zenarmor configured against the LAN.
Title: Re: Zenarmor or Suricata
Post by: battle on September 30, 2024, 04:51:15 PM
Thanks. That is how I have it set up.
Also, see this what seems to be a bug in Zenarmor:

https://forum.opnsense.org/index.php?topic=43141.0