Snort on a Home Router

[Chicog]

This seems like a nifty idea.

$139 if you back them now, goes up to $179 if they hit their target, which looks highly likely. I've ordered a couple to stick between my modems and routers at home and the office.

What is the iGuardian?

The iGuardian is an embedded Linux system based on OpenWRT and runs Snort as an in-line intrusion prevention system. It has been designed and optimized for easy installation and provides advanced threat prevention against a wide variety of attacks. The iGuardian protects your connected devices from Internet threats with a reliable, simple and affordable solution.

The iGuardian protects you against a wide range of threats, including viruses, phishing scams, malicious websites, java, browser, and file exploits, drive-by-downloads, watering-hole attacks, botnets, data-theft, remote access Trojans and key-loggers.

https://www.kickstarter.com/projects/itus/iguardian-the-home-internet-security-system?ref=nav_search

[DogNo1]

As I read the website, it now appears to be $149 for one appliance and $280 for two. Plus $25 for shipping outside of the USA. It seems like a great idea if it doesn't slow you down. I'm hesitant though as there might be bugs to be worked out. Have you submitted your backing already?

[howto]

Interesting...

Have you seen/read this...

Dated 2011, but likely better now,

http://www.smallnetbuilder.com/security/security-howto/31433-build-your-own-utm-with-pfsense-part-1

[dddave]

Watering hole attacks?? What??

[worgeordie]

Seems a lot of money for whats inside it,maybe worth it if

it works,ill let someone else be the Guinea pig,until any problems

are worked out.

regards Worgeordie

[worgeordie]

Watering hole attacks?? What??

Its them bloody lions !

regards Worgeordie

[vento]

@Chicog

Due to the other post, this post and my finding about open wrt.. seems i will be on router shopping soon

Funny stuff

[Chicog]

As I read the website, it now appears to be $149 for one appliance and $280 for two. Plus $25 for shipping outside of the USA. It seems like a great idea if it doesn't slow you down. I'm hesitant though as there might be bugs to be worked out. Have you submitted your backing already?

"I've ordered a couple to stick between my modems and routers at home and the office."

That assumes they hit the target. They were at $63K when I signed up yesterday, now at $74K with 21 days to go to hit $125K. Should be doable.

Ironically I've got a load of Sourcefire appliances arriving at work in the next few weeks. Probably overkill for the house though.

Edited August 22, 2014 by Chicog

[Chicog]

Over $80K now.

[rhythmworx]

Thanks for advertising your product but I'm not daft enough to buy one.

[Chicog]

Thanks for advertising your product but I'm not daft enough to buy one.

Not my product, and no-one said you had to.

But then again you probably don't know what SNORT is, so it's just as well.

[Chicog]

Over $90K now so hopefully will meet their target comfortably.

[DogNo1]

I suppose that you will post on the device's effectiveness after you install yours. Please do.

[Chicog]

I'm sure it will be effective, SNORT is a brilliant tool. As I said, we've just purchased a load of Sourcefire appliances - this is the commercial version of SNORT.

But SNORT itself is open source and Linux-based, and is not for the faint-hearted or the novice.

I like the idea of a simple, small appliance that I can drop in between modem and router.

They're up to $106/125K now, so I assume it will be a goer.

It's not going to be out until 1Q15 anyway, but if I remember of course I'll be happy to report back.

[Chicog]

$119K now looks like they'll make it comfortably.

[DogNo1]

I hope they make it. I'd be happy to ditch my antivirus and anti-malware applications and their yearly renewal costs for this device.

[Chicog]

Well it's a goer.

$125,428

[muratremix]

I bought an atom d2550 mini pc (mini itx, very small) for 194 usd + shipping (total: 220 usd, from china), including 1gb ddr3 ram and 8gb 2.5" sata ssd.

It has 4 lan ports and can be used with pfsense or whatever you like.

Although it uses more power (atom cpu 10watt, dual core), it is also much faster than embedded systems.

Cpu power is important if you want higher throughtput from openvpn client.

139 / 179 usd is too much for an embedded system.

[Chicog]

Yet ironically on your other thread you openly admit you don't have a clue what to do with it and can't make it work.

Since you're talking about running a full-blown Linux build on your new toy, you also have no way to make a comparison, either in performance or in the effort required to maintain it.

Perhaps you are missing the point of a "drop in" SNORT appliance?

Also, you may have underestimated the spec, which appears to be dual processor and compares favourably with commercial appliances.

Just sayin' like.

Edited August 31, 2014 by Chicog

[RandomSand]

Does the iGuardian support inspection of SSL encrypted traffic?

At this time SSL inspection is considered to be outside the scope of the project.

oops

[Chicog]

Does the iGuardian support inspection of SSL encrypted traffic?

At this time SSL inspection is considered to be outside the scope of the project.

oops

The rest of the quote you omitted:

At this time SSL inspection is considered to be outside the scope of the project. In order to deliver a high quality product to our backers we are trying to be very careful about limiting scope creep in order to maximize our QA and Beta testing abilities.

SSL decryption and inspection is on the long term product roadmap however in our experience implementing this capability is not trivial. There are often serious performance impacts and many incompatibilities requiring a very long exclusion list which can be quite difficult for home users to manage.

I think they made the right decision. Even the commercial (SourceFire) SSL inspector runs on dedicated appliances like the 1500 and the 2000.

[metisdead]

Inflammatory posts and replies have been removed:

7) You will respect fellow members and post in a civil manner. No personal attacks, hateful or insulting towards other members, (flaming) Stalking of members on either the forum or via PM will not be allowed.

[Chicog]

Getting good updates from Itus Networks, they've renamed the product Shield and they are now confident enough to accept orders for it, $179.

www.itusnetworks.com

[phazey]

Or, build your own

http://networkfilter.blogspot.de/2012/08/building-your-piwall-gateway-firewall.html