Wazuh Reviews

BIRD Reviews

Wazuh mentions (49)

• Greenbone

  I use Wazuh instead. Greenbone CE is severely limited and requires payment for anything beyond the very basic. Super simple installation more features. Source: 6 months ago

• Risks of hosting a website out of my house

  Monitoring & Active Measures - Exporting firewall events to an external time-series database like I describe above is good to see who is touching your firewall or accessing your web site. Using an Intrusion Detection System / Intrusion Prevention System (IDS/IPS) such as open-source Suricata, which is a free package on pfSense, and deploying file system integrity monitoring, such as the open-source Wazuh on the... Source: 7 months ago

• DevOps and Security: DevSecOps

  Wazuh: An open source security monitoring platform that integrates with popular tools like Elasticsearch and Kibana to provide comprehensive security event analysis and response capabilities. - Source: dev.to / about 1 year ago

• Vulnerability overview

  On another note, as mentioned in my response to the question of this post, we are working on a complete rework of the Vulnerability Detection engine. This rework will provide a sanitized CVEs feed from wazuh.com and a completely new scanner engine. It will also include a new UI for global queries. Source: about 1 year ago

• Homelab security advice

  Nessus essentials (https://www.tenable.com/products/nessus/nessus-essentials) might do the trick. It can help to check what kind of services you are running are vulnerable to exploits. Also, the general recommendation here would be not to use default ports for all the services you are exposing. Also, you can check something like Wazuh - https://wazuh.com/. Source: about 1 year ago

BIRD mentions (13)

• Automatic BGP traffic engineering

  At one of my previous employers we wrote some custom software to interface with Quagga. Seems like Quagga has fallen out of favor for things like BIRD. We use our software to monitor for various things and dynamically adjust the path prepends to "shape" the traffic and cause the multihomed traffic to push to different datacenters around the globe. Source: about 1 year ago

• Reasons a Raspberry Pi Belongs in Your Network Lab

  * [1] https://bird.network.cz/ I'd actually love "enterprise raspberry", some small machine that we could shove 3-6 of them in 1RU, but once you add enterprise tax and all of the doodas to make it manageable (OOB management), it gets expensive enough to rival "just an old server". - Source: Hacker News / over 1 year ago

• I can't decide on my router/firewall platform. Which one do you think is the most stable and future proof?

  Currently Wireguard handles all of my VPN connections, but I used OpenVPN and IPsec in the past. I run multiple paths through my VPN network and use BGP to handle the preference and failover between them. I am using BIRD instead of the included OpenBGPD, because I also have some Ubuntu machines that also run it and wanted consistent configs between them but OpenBGPD should also work well. I have not done... Source: over 1 year ago

• Identity Management for WireGuard

  You can run dynamic routing protocols such as OSPF or iBGP over Wireguard. It's not built in, but that's a feature, not a bug—do one thing and do it well. I have a full mesh of Wireguard tunnels configured between home/office/datacenters/laptop, and run bird[0] on the VPN endpoints to direct traffic between them. [0] https://bird.network.cz/. - Source: Hacker News / over 1 year ago

• How deeply are you able to understand your work?

  I've spent a lot of hours these past few weeks in the docs and codebases for Cilium, Calico, BIRD, MetalLB, PureLB, Longhorn, CephFS, and Rook. Do I understand 100% top-to-bottom how those systems work? No. Do I understand "enough" of how those systems work to produce a good solution to the core business problem we're trying to address? Yes. Source: over 1 year ago