OPNsense Forum

English Forums => Zenarmor (Sensei) => Topic started by: WhiteTiger on January 20, 2024, 10:42:37 am

Title: Zenarmor NGFW and SWG
Post by: WhiteTiger on January 20, 2024, 10:42:37 am

I've already posted a message (https://forum.opnsense.org/index.php?topic=37400.0) about content filtering and malware protection using Squid with Zenarmor.
It would seem that the solution is instead in Secure Web Gateway, but I have not understood whether it can be activated on OPNSense and whether the Zenarmor NGFW Home Edition license also includes SWG.

Title: Re: Zenarmor NGFW and SWG
Post by: sy on January 20, 2024, 01:58:23 pm

Hi,

With the license you have Advanced Security features as selectable. So, the answer is yes, you can use Zenarmor for Web Security. Especially in bridge mode, it acts totally as SWG.

Title: Re: Zenarmor NGFW and SWG
Post by: WhiteTiger on January 20, 2024, 03:56:59 pm

Thanks for your answer.

What does "in bridge mode" mean?
Where can I find documentation?

If SWG is an independent product, how do you install it?
In OPNSense with a plugin, as an alternative to Zenarmor, or is it a product that can be installed as an alternative to OPNSense?

Title: Re: Zenarmor NGFW and SWG
Post by: almodovaris on January 21, 2024, 03:20:44 am

To be a little more explicit: Zenarmor + Home license works as a filter for internet (bad IPs, bad websites, porn, and so on). If that's what you mean by SWG, then it is a SWG, otherwise it isn't.

Title: Re: Zenarmor NGFW and SWG
Post by: WhiteTiger on January 21, 2024, 12:50:15 pm

SWG is a product from Zenarmor that I found on their site.
https://www.zenarmor.com/zenarmor-secure-web-gateway (https://www.zenarmor.com/zenarmor-secure-web-gateway)

It would appear to be a separate product from NGFW, with different features.
https://www.zenarmor.com/zenarmor-next-generation-firewall (https://www.zenarmor.com/zenarmor-next-generation-firewall)

The FAQ located on the same page as SWG lists the differences between NGFW and SWG
It is also written:

Quote

Is secure web gateway a firewall?
No, a Secure Web Gateway (SWG) is not the same as a firewall. While both security solutions play essential roles in an organization's cybersecurity strategy, they have different primary functions..

But then I see that there is a single license price and, above all, only one plugin to install in OPNsense.
This confuses me. Are they two different products or not?

Title: Re: Zenarmor NGFW and SWG
Post by: almodovaris on January 22, 2024, 12:02:28 am

Meaning Zenarmor is not a firewall. OPNsense is. Or you could use Debian or Ubuntu instead of OPNsense, still using Zenarmor.