Posted by Grommish on Jun 13, 2020; 8:21pm
URL: https://itus.accessinnov.com/FIRMWARE-Itus-Shield-v2-tp2014p2052.html

Thanks for the input all!

My background is in InfoSec and Networking, so the Shield (iGuardian,damnit) caught my attention right away.  I used to build Android ROMs, which led me to OpenWrt :)

So, the consensus seems to be Ease of use and IDS/IPS.  The image I have basically covers that.. But, it's not readily updatable without wiping out everything.

Ok, so, does anyone have a preference in which to use?  snort is popular.. Suricata is popular..  I was even looking at OSSEC HIDS for a bit..

I'm not sure which would be easier to use.  I suspect snort+, but then we get into the issues of dealing with TLS/SSL/encrypted traffic..  In order for it to be effective, it'll need to do that.  This means setting the shield up as a reverse-proxie and making sure the Key is installed on every client machine (I think.. more research is needed).  It just is going to be one of those things that needs to be decided on the best way to go.

I'd really like to be able to solve this update issue regardless..