Ingesting PFSense Logs with Security Onion 2.4

[@cyberlabz]

This is exactly what I need! Thanks Matt!

[@security-onion]

Happy to help!

[@patricksilwimba]

I needed this. Thank you.

[@security-onion]

You're welcome!

[@kinghenryjames1327]

Awesome, great material great teacher.

[@security-onion]

Thanks, glad you liked it!

[@WatsonInfosec]

Thanks again, I just setup my SOC with these changes. This was very useful, can there be an updated video for Elastalerts setup for this version?

[@WatsonInfosec]

Thank you Matt!

[@andreantunes7310]

miss the suricata and logs of apps of pfsense, but great work, keep doing more, and integrations with flux

[@WatsonInfosec]

This is sooo dope!

[@security-onion]

Thanks, glad you like it!

[@olivertatzmann3038]

Thank you - Great tutorial. Unfortunately I failed to get it working neiger with pfSense nor with fortigate.
tcpdump shows the incoming packages, but they are not parsed.
Do you have any hint how to start toubleshooting?

[@security-onion]

If you have questions or problems, please start a new discussion at securityonion.com/discuss

[@Rabah_RAHLI]

can this functionality work with pfsense comunity edition ?

[@security-onion]

Yes! If you have further questions or problems, please start a new discussion at securityonion.com/discuss

[@swaterstsiafadray329]

Hi! how to do this with a Eval mode? Thank you!

[@security-onion]

It should work the same for Eval mode. If you have further questions or problems, please start a new discussion at securityonion.net/discuss. Thanks!