Ingesting PFSense Logs with Security Onion 2.4

Learn how to ingest logs from your PFSense and OPNsense firewalls in just a few minutes!
For more information, please see our documentation:
docs.securityonion.net/en/2.4...
If you have questions or problems, please start a new discussion at securityonion.com/discuss

[@andreantunes7310]

miss the suricata and logs of apps of pfsense, but great work, keep doing more, and integrations with flux

[@cyberlabz]

This is exactly what I need! Thanks Matt!

[@security-onion]

Happy to help!

[@WatsonInfosec]

Thank you Matt!

[@patricksilwimba]

I needed this. Thank you.

[@security-onion]

You're welcome!

[@kinghenryjames1327]

Awesome, great material great teacher.

[@security-onion]

Thanks, glad you liked it!

[@WatsonInfosec]

Thanks again, I just setup my SOC with these changes. This was very useful, can there be an updated video for Elastalerts setup for this version?

[@WatsonInfosec]

This is sooo dope!

[@security-onion]

Thanks, glad you like it!

[@olivertatzmann3038]

Thank you - Great tutorial. Unfortunately I failed to get it working neiger with pfSense nor with fortigate. tcpdump shows the incoming packages, but they are not parsed. Do you have any hint how to start toubleshooting?

[@security-onion]

If you have questions or problems, please start a new discussion at securityonion.com/discuss

[@Rabah_RAHLI]

can this functionality work with pfsense comunity edition ?

[@security-onion]

Yes! If you have further questions or problems, please start a new discussion at securityonion.com/discuss