PFSense Suricata Intrusion Detection and Prevention, Installation Guide

Video Description

Today we're going to talk about intrusion detection and intrusion prevention systems, commonly referred to as IDS/IPS. We'll be doing so under pfSense using Suricata. We will walk through the entire installation and configuration process and talk about some things you'll need to consider when setting up your own Suricata. Chapters: 00:00 Introduction to IDS/IPS 01:18 Preparing to Install 02:16 Install Suricata Package 02:39 Global Config & Rules 05:08 Adding an Interface 08:00 Rule Set Configuration 11:27 Starting Suricata 12:06 Inter-VLAN Overhead 13:24 Reviewing & Testing Alerts 16:05 Using SID Management 20:08 Enabling Blocking/Dropping 20:40 Inline vs Legacy Modes 25:30 VLAN Hardware Offloading 27:37 Inline Alerts & Drops 31:50 Thoughts & Conclusions Contact Info: Business email is [email protected]. I am not available for personal project questions or consultation. Disclaimers and Statements: ► I receive a small commission on purchases made using my affiliated links shared the video description and comments section. The views and opinions expressed here are my own, unbiased, and not influenced by this commission in any way.