Thinking of going to zenarmor home, have an existing Opensense install, do I have to recreate existing rules in zenarmor or does it layer on top somehow?
Hi,
Zenarmor has its own policies and works independently of OPNsense's firewall rules. So, you don't need to recreate or modify your existing OPNsense rules after installing Zenarmor.
For the best setup, we recommend protecting the LAN side with Zenarmor. In this configuration, Zenarmor policies are applied first for outbound traffic, while OPNsense handles inbound traffic.
You can check the following documentation for best practices and policy configuration guidance:
https://www.zenarmor.com/docs/opnsense/policies/configuring-policy
https://www.zenarmor.com/docs/guides/best-practices-for-zenarmor-deployment
Best regards