search

Snorby / snorby

Ruby On Rails Application For Network Security Monitoring
Other
1k stars 225 forks source link

Can we setup Security Onion in Amazon AWS to monitor AWS instances? #444

Open jeewanthasas opened 8 years ago

jeewanthasas commented 8 years ago

Can we setup Security Onion in Amazon AWS to monitor AWS instances?

shadowbq commented 8 years ago

AWS does not a have a layer 2. You can not, you would need to route traffic through snort.. which is not what snort does.

shadowbq commented 8 years ago

You could use suricate inline.. https://redmine.openinfosecfoundation.org/projects/suricata/wiki/Setting_up_IPSinline_for_Linux

mihail-velikov commented 7 years ago

Yes, it is possible to setup Security Onion in AWS although it is in experimental state: https://github.com/Security-Onion-Solutions/security-onion/wiki/CloudClient