Configuring the Built-In Packages repository#

IDSTower offers a built-in packages repository that can be used to deploy Suricata & a Logshipper to Suricata Hosts with no internet connectivity (offline).

By default the IDSTower installation package dose not include this repository files and they have to be downloaded separately, This is both to reduce the standard installation package size and to let users be able to update the Built-In Packages repository (eg:to deploy a newer version of Suricata) without having to update IDSTower.

To Enable the Built-In Packages Repository, please follow the below steps:-

  1. Download the appropriate Built-In Packages Repository from https://download.idstower.com/packages/built-in-repos/ , in this example we will download Suricata 6.0.5 packages & Filebeat 7.9.0 packages.

$ sudo curl https://download.idstower.com/packages/built-in-repos/suricata/suricata-6.0.5-linux-x86_64.tar.gz --output suricata-6.0.5-linux-x86_64.tar.gz
$ sudo tar -xzf suricata-6.0.5-linux-x86_64.tar.gz --directory /opt/idstower/resources/playbooks/files/Suricata/packages/
$ sudo curl https://download.idstower.com/packages/built-in-repos/filebeat/filebeat-7.9.0-linux-x86_64.tar.gz --output filebeat-7.9.0-linux-x86_64.tar.gz
$ sudo tar -xzf filebeat-7.9.0-linux-x86_64.tar.gz --directory /opt/idstower/resources/playbooks/files/Filebeat/packages/

  1. Now you will find the downloaded versions available at the cluster installation wizard when you Built-in Packages Repository as shown below.

../_images/built-in-repo-options.png