Customizing for Your Environment

This section covers how to customize Security Onion for your environment.

• Cortex
  • Usage
  • More Information
• Proxy Configuration
  • Docker
  • sudo
• Firewall
  • Setup defaults to only allowing port 22 (ssh)
  • Nodes automatically add their own firewall rules to the manager
  • Managing
  • Advanced Firewall Customization
• Email Configuration
  • Operating System
  • Wazuh
  • Zeek
  • Elastalert
  • Lack of network traffic
• NTP
  • IDS Alerts