Mastering Linux Security and Hardening - Second Edition

Using Security Onion

Snort itself isn't terribly difficult to set up. However, if you're doing everything manually, it can be a bit tedious by the time you've set up the control console, the sensors, and your choice of graphical frontends. So – and imagine me peering at you over my dark glasses as I say this – what if I told you that you can get your Snort set up as part of a ready-to-go appliance? What if I told you that setting up such an appliance is an absolute breeze? I imagine that you'd probably say, So, show me already!

If you feel bad about cheating by making Snort deployment so easy, there's really no need to. An official Snort representative once told me that most people deploy Snort in this manner.

Security Onion is a free-of-charge ...