OPNids / OPNsense with suricata

[katamadone [CH]]

May I ask something about OPNids / OPNsense here?
OPNids sounds interesting but how is it aligned with OPNsense?

• Is it a new prodcut based on opnsense, where opnsense & suricata is streamlined in one product? (With additional MLE).
• If I already use OPNsense now, is there a migration path. - do I need one?
• or will there be a package, if I'd like to use OPNids?
• will it replace the ids package on opnsense?
• is it intended to have a separated ids / suricata instance next to a firewall like opnsense? 

[franco]

Hi,

OPNids is a single-purpose fork for building on top of the intrusion detection capabilities. It doesn't offer a full OPNsense feature set. It also does not follow our update schedule.

There is no migration between them. OPNids is tailored for environments where you use a single appliance for IDS capabilities.

There may come a day when OPNids improvements are brought to OPNsense, but that is up to the OPNids authors to decide.


Cheers,
Franco

[katamadone [CH]]

Thanks for clarification. Tought so, but wasn't sure.
But because it looked so familiar I had to ask :)