Messages

1

Hardware and Performance / Re: OPNsense and CPUs with P- and E-cores

« on: January 17, 2024, 10:47:18 am »

Hello,

I am also very interested about this. Is there any way to select which of the P/E cores are being used, or the preference order?

Thank you

2

Intrusion Detection and Prevention / Re: IPS not working: Enable Drop Filter not visible

« on: May 09, 2021, 12:45:36 pm »

hi Ad,

not sure if you were referring to my first post, but this wasn't an upgrade or migration, those problems occurred during a clean install.

3

Intrusion Detection and Prevention / Re: IPS not working: Enable Drop Filter not visible

« on: May 09, 2021, 12:09:42 am »

nope, i switched to pfsense instead, that was a no-go

4

Intrusion Detection and Prevention / Re: IPS not working: Enable Drop Filter not visible

« on: April 22, 2021, 12:22:54 pm »

Hi, sorry I'm not sure how your message is related to my question/s. Thank you

5

Intrusion Detection and Prevention / Re: IPS not working: Enable Drop Filter not visible

« on: April 10, 2021, 02:11:45 am »

I just could capture the dropbox "alert"

6

Intrusion Detection and Prevention / IPS not working: Enable Drop Filter not visible

« on: April 10, 2021, 02:09:05 am »

Hi,

I am new to OPNsense, using OPNsense 21.1.4-amd64, and I think I have read all the relevant IPS documentation. Using the IDS, IPS, Promiscuous checks on, selected LAN interface. 

The main problem is the Enable (Drop filter) is not shown, so all rules remain as Alert, which goes against the P in the IPS. See attach 1.

Also relevant, if I edit one ruleset, I no longer see the Input filter dropdown (thus, no way to select "Change all alerts to drop actions"). See attach 2.

To make this all even more bizarre, when disabling IDS/IPS and enabling them again (and re-enabling rules, then Apply), we found that:
- some tests are not even detected (i.e. test eicar.com.txt can be downloaded and nothing shows on Alerts tab). See attach 3. or
- something is detected and shown in the Alerts tab but... Accepted (i.e. "ET POLICY Dropbox.com Offsite File Backup in Use"). I don't have a screen capture of this right now.

Am I missing something very obvious? Thank you