Netgate Discussion Forum
    • Categories
    • Recent
    • Tags
    • Popular
    • Users
    • Search
    • Register
    • Login

    Setting up SPAN Port for Security Analytics

    Scheduled Pinned Locked Moved General pfSense Questions
    2 Posts 2 Posters 751 Views
    Loading More Posts
    • Oldest to Newest
    • Newest to Oldest
    • Most Votes
    Reply
    • Reply as topic
    Log in to reply
    This topic has been deleted. Only users with topic management privileges can see it.
    • J
      John6
      last edited by

      Good Afternoon,

      I have gone through a lot of the different threads on this, and still trying to figure out the best eway to do this, any help is greatly appreciated.

      I have a Security Analytic box (VM) in Workstation (I know my 1st challenge), I also have my PFSense router and many other systems. I might be missing something simple, but I need to create a span port, that one of my VM sees. I have created the Bridge, added members, created a separate OPT interface with virtual NIC, copied the mac addr, everything to somehow get this mirror port seen by the Virtual Analytic system. Its just seeing a trickle of packets over the network so far.

      Is there something I'm missing, should i stand up another PFsense router, and place the Analytic system in the middle, if so, any advice for doing this…

      Thanks,

      1 Reply Last reply Reply Quote 0
      • johnpozJ
        johnpoz LAYER 8 Global Moderator
        last edited by

        A span port would be done on your switch.. Not on pfsense with a bridge.

        An intelligent man is sometimes forced to be drunk to spend time with his fools
        If you get confused: Listen to the Music Play
        Please don't Chat/PM me for help, unless mod related
        SG-4860 24.11 | Lab VMs 2.8, 24.11

        1 Reply Last reply Reply Quote 0
        • First post
          Last post
        Copyright 2025 Rubicon Communications LLC (Netgate). All rights reserved.