Proper setup for a home network?

[Aaron Katz]

I am trying to find the best solution for me to configure security onion to see ALL traffic on my network, both wired and wireless. I want it also to be able to identify the systems generating the alerts.

I currently have a modem, router, and a managed switch. I am debating buying a network TAP if needed.

I want to be able to see everything from my chromecast, roku, playstation, etc.

Any and all advice is appreciated!

[Doug Burks]

Hi Aaron,

Here's what I have at home that works quite well:

modem
|
firewall
|
tap --> Security Onion sniffing interface
|
switch and wireless access point

If you need to buy a tap, there are a few inexpensive models here:
https://github.com/Security-Onion-Solutions/security-onion/wiki/Hardware#packets

> --
> You received this message because you are subscribed to the Google Groups "security-onion" group.
> To unsubscribe from this group and stop receiving emails from it, send an email to security-onio...@googlegroups.com.
> To post to this group, send email to securit...@googlegroups.com.
> Visit this group at http://groups.google.com/group/security-onion.
> For more options, visit https://groups.google.com/d/optout.



--
Doug Burks
Need Security Onion Training or Commercial Support?
http://securityonionsolutions.com

[Nick Whittome]

Here's a diag of my home setup. Works like a charm and I see all traffic in SO.

good luck!

Nick