Page MenuHomeVyOS Platform
Create Task
Maniphest T751

IDS and IPS (suricata)
Closed, ResolvedPublicFEATURE REQUEST
Actions

Description

It would be really nice to have an intrusion detection system and/or intrusion prevention system.

Details

Difficulty level
Hard (possibly days)
Version
-
Why the issue appeared?
Will be filled on close
Is it a breaking change?
Unspecified (possibly destroys the router)
Issue type
Unspecified (please specify)

Related Objects

Event Timeline

marcello.lodi created this task.Jul 21 2018, 8:13 AM
syncer subscribed.Jul 21 2018, 1:46 PM

We also collecting vote here
https://forum.vyos.io/t/ids-ips-integration/2067

syncer triaged this task as Wishlist priority.Sep 1 2018, 3:03 PM
syncer edited projects, added VyOS 1.3 Equuleus; removed VyOS 2.0.x.
pasik subscribed.Mar 12 2019, 6:13 PM
Viacheslav subscribed.Oct 27 2019, 9:17 AM
dmbaturin edited projects, added VyOS 1.4 Sagitta; removed VyOS 1.3 Equuleus.Dec 10 2020, 12:09 PM
dmbaturin set Is it a breaking change? to Unspecified (possibly destroys the router).
jack9603301 subscribed.Dec 10 2020, 1:48 PM

Consider integrating Snort

Viacheslav changed Difficulty level from Unknown (require assessment) to Hard (possibly days).Feb 22 2021, 8:52 AM
CuBiC3D subscribed.May 14 2021, 7:18 AM
volga629-1 subscribed.Oct 6 2021, 5:19 PM

Suricata IPS with ipset

eronlloyd subscribed.Feb 21 2022, 11:28 AM

+1

jmbwell subscribed.Feb 22 2022, 1:16 AM
Unknown Object (User) awarded a token.May 25 2022, 1:51 PM
Unknown Object (User) subscribed.
indrajitr subscribed.Jun 6 2022, 7:09 AM
amirdeadline subscribed.Sep 10 2023, 1:36 PM
dmbaturin edited projects, added VyOS 1.5 Circinus; removed VyOS 1.4 Sagitta.Apr 12 2024, 3:29 PM
dmbaturin set Issue type to Unspecified (please specify).
0xThiebaut subscribed.May 2 2024, 11:55 AM

PR: https://github.com/vyos/vyos-1x/pull/3399

Embezzle subscribed.May 3 2024, 6:32 PM
Giggum subscribed.May 15 2024, 12:18 PM
Restricted Repository Identity mentioned this in rVYOSONEX9f9fb8d63f92: Merge pull request #3399 from 0xThiebaut/suricata.May 23 2024, 7:56 PM
c-po mentioned this in rVYOSONEX2af04a53a4c1: suricata: T751: remove implicit default dictionary.May 23 2024, 7:56 PM
c-po mentioned this in rVYOSONEX01464a6069fa: suricata: T751: use key_mangling in get_config_dict().
c-po mentioned this in rVYOSONEXcd32928e1856: suricata: T751: move CLI from "service ids suricata" -> "service suricata".
0xThiebaut mentioned this in rVYOSONEX549089a970e3: suricata: T751: Initial support for suricata.May 23 2024, 7:56 PM
c-po changed the task status from Open to Needs testing.May 23 2024, 7:57 PM
c-po assigned this task to 0xThiebaut.
c-po moved this task from Open to Finished on the VyOS 1.5 Circinus board.
c-po renamed this task from IDS and IPS to IDS and IPS (suricata).May 25 2024, 6:25 AM
Restricted Repository Identity mentioned this in rVYOSONEX9d069027b786: Merge pull request #3620 from sever-sever/T751.Jun 10 2024, 10:30 AM
Viacheslav mentioned this in rVYOSONEXae0ca9f5e54b: T751: Remove ids suricata.Jun 10 2024, 10:30 AM
Restricted Repository Identity mentioned this in rVYOSONEX7f08f1ff9b23: Merge pull request #3723 from sever-sever/T751.Jun 26 2024, 5:09 PM
dmbaturin closed this task as Resolved.Jul 2 2024, 7:05 PM
ruffy91 mentioned this in T6624: service suricata address-groups cannot be used in each other.Jul 30 2024, 7:56 PM