Security Onion can be made easier to set up initially, as it is somewhat difficult at the start, but once configured, it becomes a great tool to use. I assigned a rating of eight out of ten because the initial setup requires documentation reading and planning, which could be improved to make it easier for first-time users. I do not think of any other improvements for Security Onion.
For Security Onion, setting up and configuring the system can be quite challenging for newcomers due to the need for a grasp of networking and security concepts. The specific challenges that make the setup and configuration difficult include the system demanding resources to function, which might be a challenge for smaller companies. Although there is support from the very proactive open-source community, tackling intricate problems usually requires technical knowledge.
Scientist at a educational organization with 10,001+ employees
Real User
Jan 15, 2024
The product takes time to learn, it's not that easy. In the beginning we had a lot of questions. If you want to use such a tool in an real (industrial) environment, you have to ask how to get the network data. Can we do a full packet capture? Can we provide agents to our end systems? There are no simple solutions to these questions. It's a general problem when running such systems in an industrial environment.
Security Onion's user interface could be improved. The solution's general reporting should be made simple and better-looking in terms of graphics so that we can update our senior management.
Security Onion is an open-source Linux distribution for intrusion detection, network security monitoring, and log management. It offers comprehensive solutions for enterprises seeking to enhance their cybersecurity infrastructure.
Security Onion provides a full suite of tools to detect and respond to cybersecurity threats efficiently. As a robust and versatile distribution, it includes capabilities for real-time analysis, network visibility, and threat detection, making it indispensable for...
Security Onion can be made easier to set up initially, as it is somewhat difficult at the start, but once configured, it becomes a great tool to use. I assigned a rating of eight out of ten because the initial setup requires documentation reading and planning, which could be improved to make it easier for first-time users. I do not think of any other improvements for Security Onion.
For Security Onion, setting up and configuring the system can be quite challenging for newcomers due to the need for a grasp of networking and security concepts. The specific challenges that make the setup and configuration difficult include the system demanding resources to function, which might be a challenge for smaller companies. Although there is support from the very proactive open-source community, tackling intricate problems usually requires technical knowledge.
The initial setup of the solution is a little bit difficult.
The product takes time to learn, it's not that easy. In the beginning we had a lot of questions. If you want to use such a tool in an real (industrial) environment, you have to ask how to get the network data. Can we do a full packet capture? Can we provide agents to our end systems? There are no simple solutions to these questions. It's a general problem when running such systems in an industrial environment.
Security Onion's user interface could be improved. The solution's general reporting should be made simple and better-looking in terms of graphics so that we can update our senior management.