OPNsense Forum

English Forums => Zenarmor (Sensei) => Topic started by: Tenn-it on February 23, 2025, 07:52:09 PM

Title: Zenarmor block google
Post by: Tenn-it on February 23, 2025, 07:52:09 PM
I'm testing Zenarmor. AD DNS forwards dns requests to Opnsense which is running Zenarmor. As soon as Zenarmor starts, it will no machines can resolve google.com (or www.google.com); you can't go there with a browser nor can you ping it. If I stop Zenarmor, google.com starts working again.

If I log into Zenarmor and go to live sessions, there is nothing under threats or blocks that shows it being blocked.
Title: Re: Zenarmor block google
Post by: sy on February 25, 2025, 11:52:31 AM
Hi,

Zenarmor only monitors TCP and UDP sessions. Therefore, if ICMP is also being blocked, and you don't see any block records in the reports, it's likely a netmap issue. Did you attempt to access google.com while Zenarmor Engine is in bypass mode?

Please provide the following details:
What is the interface type and name protected by Zenarmor?
Which deployment mode did you choose in Settings - Configuration - Deployment Mode?

Alternatively, you can create a support ticket via "Have Feedback" located in the bottom left corner of the Zenarmor UI.