official IPS/IDS in metarouter?

RouterOS General
1

Is there any community support for pushing to see an official metarouter image that would enable some IDS / IPS features? I would be interested in seeing something that can be integrated via the web proxy, and run 100% inside the router. I would like to see a supported metarouter image that contains, for example a small instance of SNORT and some sort of antivirus scanner, even if it requires a paid AV subscription key from a vendor.

I know it’s possible to do this now, but having an official release with support and pre-release testing done by MT would make this something we would offer as a genuine alternative to things like SonicWALL when IDS/IPS is required.

EDIT, Just wanted to add, Native support for a IDS / IPS package would be FAR better than a metarouter image since it would work across many more devices, but I was just trying to remain realistic with my expectations…

2

Well, IDS goes far further than just HTTP traffic, so it would need to tie in much tighter than just with web-proxy.

A bridge of some sort would more than likely be better, just my 2c :slight_smile:

3

+1 for this. Any kind of IPS will be highly appreciated and for sure a very stable sell point!

4

IPS/IDS aren’t much same thing.
but may/would converge in each others. or even implemented over. eg snort -alike fwsnort with directly-imported (snort-alike)rules into netfilter.

web-proxy actually had big brother in firewalls family, eg proxy firewalls actually older things than chain firewall.
not frequently use say Zorp or Microsoft things of such kind or several other(~free or commercial(now ~ mostly EoL/discontinued), but they had neat advantages.
i knew several Zorp fans so i guess they may had future. considering how Well its SCALE, i guess CCR’s would be neat platform for :=)