{"id":8110,"date":"2026-03-14T19:21:18","date_gmt":"2026-03-14T17:21:18","guid":{"rendered":"https:\/\/scalemedia.co.za\/cybermedia\/?post_type=docs&p=8110"},"modified":"2026-03-14T21:44:04","modified_gmt":"2026-03-14T19:44:04","password":"","slug":"lab-building-series-ep3","status":"publish","type":"docs","link":"https:\/\/scalemedia.co.za\/cybermedia\/docs\/lab-building-series-ep3\/","title":{"rendered":"\u00a0Lab Building Series: Ep3"},"content":{"rendered":"\n

This section focus on configuring Opnsense firewall by installing and setting up the intrusion detection system (IDS) and intrusion prevention system (IPS) features.<\/p>\n\n\n\n

IDS and IPS Explanation<\/h2>\n\n\n\n

IDS is a system that detects potential triggers or anomalies in network traffic based on signatures and patterns. IPS is a system tha has the same detection capabilities as IDS, with the added ability to block or deny anomalous traffic.<\/p>\n\n\n\n

Initial Configuration<\/h2>\n\n\n\n

Now start the Opnsense machine and kali to get access to the web GUI.<\/p>\n\n\n\n

\"\"<\/figure>\n\n\n\n
\"\"<\/figure>\n\n\n\n

What we need to do is go to the interfaces and setting, We need to disable Hardware CRC,TSO,LRO for our IPS to work correctly and click save.<\/p>\n\n\n\n

<\/p>\n\n\n\n

\"\"<\/figure>\n\n\n\n

<\/p>\n\n\n\n

\"\"<\/figure>\n\n\n\n

<\/p>\n\n\n\n

Next we gonna go to services, Intrusion Dection and then to Administration.<\/p>\n\n\n\n

<\/p>\n\n\n\n

\"\"<\/figure>\n\n\n\n

Before making any change you need to click the advanced mode button to view all settings, Next check the Enabled box, IPS mode, Promiscuous mode and the interfaces you can keep it to LAN only if you want but for this lab we’ll use LAN and WAN. Under Detection the pattern matcher should be “Hyperscan<\/a>“, The Dectect Profile we will leave it to “Medium” because we do not want to have a massive amount of false possitives, on the Home networks we need to specify the subnet on our home network (LAN Subnet) is using, After everything is set click on Apply.<\/p>\n\n\n\n

<\/p>\n\n\n\n

<\/p>\n\n\n\n

\"\"<\/figure>\n\n\n\n

<\/p>\n\n\n\n

Next go to the download tab inside we’ll create our custom rules, By default opnsense gives us some rules that we can utilise but we’ll create our custom rules. <\/p>\n\n\n\n

<\/p>\n\n\n\n

<\/p>\n\n\n\n

<\/p>\n\n\n\n

\"\"<\/figure>\n\n\n\n

<\/p>\n\n\n\n

We going to use Suricata<\/a> it allows us to write custom rules<\/p>\n\n\n\n

\n\n
\n
\n
\n <\/span>\n <\/span>\n <\/span>\n <\/div>\n \n
\n
\n \ud83d\udcd8<\/span>\n <\/div>\n \n
\n filename.js<\/span>\n <\/div>\n <\/div>\n <\/div>\n\n
\n
\n