OPNsense Forum

English Forums => Intrusion Detection and Prevention => Topic started by: hsing on March 10, 2023, 02:27:45 am

Title: Question about ET Pro plugin and ETPRO Telemetry Free License
Post by: hsing on March 10, 2023, 02:27:45 am

Hi everyone,

I am writing to inquire about an issue I encountered while using the ETPRO Telemetry edition Free License. Recently, I purchased this product from your store and was able to successfully obtain a sensor token.

Following this, I proceeded to install three plugins - os-intrusion-detection-content-et-open(1.0.1), os-intrusion-detection-content-et-pro(1.0.2_1), os-intrusion-detection-content-pt-open(1.0_1) - and was able to install the necessary Rulesets ET open in the Intrusion Detection System. However, I encountered an issue with the ET Pro plugin and was unable to install the required rulesets.

I would like to know if this is due to the fact that I am using the free version of the sensor token. For your reference, my current system version is 23.1.2.

Best regards,
Hsing

Title: Re: Question about ET Pro plugin and ETPRO Telemetry Free License
Post by: TimmiORG on March 31, 2023, 04:32:52 pm

Hi,
did you follow the following instruction?
https://docs.opnsense.org/manual/etpro_telemetry.html

Best regards
Christoph

Title: Re: Question about ET Pro plugin and ETPRO Telemetry Free License
Post by: hsing on April 06, 2023, 04:30:26 am

Hi Christoph,

Thank you for your reply. Yes, I have reviewed the document you mentioned. However, my question is that currently, I am only using the "os-intrusion-detection-content-et-open" plugin. After installation, I can download the rules in the Download section, but in the OPNsense shop (https://shop.opnsense.com/), I see two versions of rules for purchase. They are "Proofpoint ET Pro Ruleset 1yr subscription" and "ETPRO Telemetry edition". I am wondering if the two versions in the shop are using different plugins? Is "ETPRO Telemetry edition" using "os-intrusion-detection-content-et-open", and "Proofpoint ET Pro Ruleset 1yr subscription" using "os-intrusion-detection-content-et-pro"? Is that correct?

Thank you for your help.

Best regards,
Hsing

Title: Re: Question about ET Pro plugin and ETPRO Telemetry Free License
Post by: hsing on April 07, 2023, 04:20:24 am

Update new message:
I found that there were several rules available for download without downloading any plugins, but after installing the "os-etpro-telemetry" plugin and obtaining a free token for "ETPRO Telemetry edition" from "https://shop.opnsense.com/", and saving it as et_telemetry.token, the Telemetry status in the Dashboard was indeed ACTIVE. However, there were no rules available for download. I tried to download the "ET Telemetry_emerging-scada" rules, but was unsuccessful. After removing "os-etpro-telemetry" and using the original "ET open_emerging-scada" rules, I was able to download the rules successfully. Can anyone tell me what could be causing this issue?

Hsing

Title: Re: Question about ET Pro plugin and ETPRO Telemetry Free License
Post by: gctwnl on April 21, 2023, 04:35:02 pm

[removed as potentially wrong]

Title: Re: Question about ET Pro plugin and ETPRO Telemetry Free License
Post by: featheredfifth on October 18, 2023, 04:12:42 am

Quote from: hsing on April 07, 2023, 04:20:24 am

Update new message:
I found that there were several rules available for download without downloading any plugins, but after installing the "os-etpro-telemetry" plugin and obtaining a free token for "ETPRO Telemetry edition" from "https://shop.opnsense.com/", and saving it as et_telemetry.token, the Telemetry status in the Dashboard was indeed ACTIVE. However, there were no rules available for download. I tried to download the "ET Telemetry_emerging-scada" rules, but was unsuccessful. After removing "os-etpro-telemetry" and using the original "ET open_emerging-scada" rules, I was able to download the rules successfully. Can anyone tell me what could be causing this issue?

doodle cricket (https://doodlecricket.io)

Hsing

I can download it but get an error while installing. Any solution?