Last October, we released Security Onion 2.3:
https://blog.securityonion.net/2020/10/security-onion-2-has-reached-general.html
Today, we are releasing Security Onion 2.3.90, which adds new features and resolves a few issues:
https://docs.securityonion.net/en/2.3/release-notes.html#changes
Holiday Closure
Security Onion Solutions offices will be closed 11/25/2021 and 11/26/2021 for Thanksgiving in the US. You may want to wait until the following week before upgrading your production deployments just in case you run into any issues.
Highlights
Security Onion 2.3.90 now supports Ubuntu 20.04 but for new installations only. We will add support for in-place upgrades from Ubuntu 18.04 to 20.04 in a later release.
This release updates many components including Elastic 7.15.2, FleetDM 4.5.1, Grafana 8.2.3, and Suricata 6.0.4!
Finally, this release includes Security Onion Console improvements and better support for both Kibana customization and Endgame integration!
Documentation
You can find our documentation here:
https://docs.securityonion.net/en/2.3/
Documentation is always a work in progress and some documentation may be missing or incorrect. Please let us know if you notice any issues.
New Installations
If you want to perform a new installation, please review the documentation and then you can find instructions here:
https://docs.securityonion.net/en/2.3/download.html
Existing 2.3 Installations
If you have an existing Security Onion 2.3 installation, please see:
https://docs.securityonion.net/en/2.3/soup.html
AWS Marketplace
For new Security Onion 2 installations, version 2.3.90 will soon be available on AWS Marketplace via the official Security Onion 2 AMI:
https://securityonion.net/aws/?ref=_ptnr_soc_blog_211122
AMI Documentation:
https://securityonion.net/docs/cloud-ami
Existing Security Onion 2 AMI users should use the "soup" command to upgrade:
https://docs.securityonion.net/en/2.3/soup.html
Azure Marketplace
Security Onion 2.3.90 will soon be available on Azure!
https://securityonion.net/azure
Azure Documentation:
https://docs.securityonion.net/en/2.3/cloud-azure.html
Security Onion 16.04 EOL
As a reminder, Security Onion 16.04 has reached End Of Life (EOL):
https://blog.securityonion.net/2021/04/security-onion-1604-has-reached-end-of.html
If you're still running Security Onion 16.04, please see the following for upgrade options:
https://docs.securityonion.net/en/2.3/appendix.html
Questions or Problems
If you have questions or problems, please see our community support forum guidelines:
https://docs.securityonion.net/en/2.3/community-support.html
You can then find the community support forum at:
https://securityonion.net/discuss
Thanks
Lots of love went into this release!
Special thanks to all our folks working so hard to make this release happen!
- Josh Brower
- Jason Ertel
- Wes Lambert
- Josh Patterson
- Mike Reeves
- William Wernert
Training
Need training? Start with our free Security Onion Essentials training and then take a look at some of our other official Security Onion training!
https://securityonion.net/training
Hardware Appliances
We know Security Onion's hardware needs, and our appliances are the perfect match for the platform. Leave the hardware research, testing, and support to us, so you can focus on what's important for your organization. Not only will you have confidence that your Security Onion deployment is running on the best-suited hardware, you will also be supporting future development and maintenance of the Security Onion project!
https://securityonionsolutions.com/hardware
Screenshot Tour
If you want the quickest and easiest way to try out Security Onion 2, just follow the screenshots below to install an Import node and then optionally enable the Analyst Workstation. This can be done in a minimal VM with only 4GB RAM!
