Security Onion 3.0 Coming Soon!

Last week, we released Security Onion 2.4.210:

https://blog.securityonion.net/2026/03/security-onion-24210-now-available-with.html

This is our last release in the 2.4 series! Our next release will be Security Onion 3.0!

Security Onion 2.4

Security Onion 2.4 reached General Availability on August 15, 2023:

https://blog.securityonion.net/2023/08/security-onion-24-has-reached-general.html

Over the last 2.5 years, we've made lots of innovative changes to the platform but we kept the version number at 2.4. The time has come to move to Security Onion 3 to represent the innovation that we've already done and the innovation that we're planning to do!

Security Onion 3.0

Security Onion 3.0 is very similar to 2.4.210 and uses the exact same underlying operating system (Oracle Linux 9) and all of the same components with one exception: 3.0 no longer includes Stenographer and so full packet capture is handled by Suricata.

Also note that 3.0 will not work with anything but Oracle Linux 9. We will not test or support Ubuntu, Debian or any other distro. These other distros were not officially supported in 2.4 but we're officially removing them altogether in 3.0.

Upgrading from 2.4 to 3.0

Once Security Onion 3.0 is released, there will be a simple command to update from 2.4.210 to 3.0. If you are on an older version of 2.4.x, you will have to update to 2.4.210 first.

If you are still using Stenographer for your full packet capture, go ahead and change pcap mode to TRANSITION now so that Suricata can start doing pcap and old Stenographer data can roll off:

https://docs.securityonion.net/en/2.4/suricata.html#switching-pcap-from-stenographer-to-suricata

from Security Onion https://ift.tt/KR0A2T5
via IFTTT