OPNsense Forum

English Forums => General Discussion => Topic started by: katamadone [CH] on January 29, 2019, 10:43:12 am

Title: OPNids / OPNsense with suricata
Post by: katamadone [CH] on January 29, 2019, 10:43:12 am

May I ask something about OPNids / OPNsense here?
OPNids sounds interesting but how is it aligned with OPNsense?

• Is it a new prodcut based on opnsense, where opnsense & suricata is streamlined in one product? (With additional MLE).
• If I already use OPNsense now, is there a migration path. - do I need one?
• or will there be a package, if I'd like to use OPNids?
• will it replace the ids package on opnsense?
• is it intended to have a separated ids / suricata instance next to a firewall like opnsense? 

Title: Re: OPNids / OPNsense with suricata
Post by: franco on January 30, 2019, 12:28:19 pm

Hi,

OPNids is a single-purpose fork for building on top of the intrusion detection capabilities. It doesn't offer a full OPNsense feature set. It also does not follow our update schedule.

There is no migration between them. OPNids is tailored for environments where you use a single appliance for IDS capabilities.

There may come a day when OPNids improvements are brought to OPNsense, but that is up to the OPNids authors to decide.


Cheers,
Franco

Title: Re: OPNids / OPNsense with suricata
Post by: katamadone [CH] on January 31, 2019, 07:43:27 pm

Thanks for clarification. Tought so, but wasn't sure.
But because it looked so familiar I had to ask :)