Messages

1

General Discussion / Re: Web-based SSL VPN

« on: March 04, 2021, 03:14:29 pm »

I mean something that fortinet does
Like this: https://docs.fortinet.com/document/fortigate/6.0.0/handbook/429248/ssl-vpn-web-portal

2

General Discussion / Web-based SSL VPN

« on: March 03, 2021, 03:55:29 pm »

Hi!

I'm wondering if there is any VPN in OPNsense that can provide web-based access.
I mean, the clients will have to use just web browsers and no other apps. Is there something to achieve this?

Thanks!

3

General Discussion / Re: configuring opnsense with l2tp/ipsec

« on: February 27, 2021, 10:38:59 am »

Looks great!

What version of OPNsense do you use? As I know, OPNsense doesn't support L2TP since 20.7, does it?

4

General Discussion / SMTP scan files with clamAV

« on: February 23, 2021, 03:27:21 pm »

Hi!

I have mail server in my network and I use OPNsense as firewall
So I'd like to scan transmitted files in SMTP messages with clamAV.
Is it possible without configuring OPNsense as mail gateway? I mean just flow-based scanning.

Please, share your experience!

5

General Discussion / Re: ntopng traffic shaping

« on: February 18, 2021, 02:56:11 pm »

Thank you for your answer!

But is there any plugin on OPNsense that can do application-aware traffic shaping?

6

General Discussion / ntopng traffic shaping

« on: February 18, 2021, 10:28:14 am »

Hi!

I what to configure application-aware traffic shaping.
But I've found out that it's possible only with ntopng pro/enterprise (according this video https://youtu.be/NT5WHWUBQN4)
The problem is that I don't see this feature in ntopng Web GUI with enterprise-l license (10-min free trial)

Maybe, there is someone who has already tried application-aware traffic shaping.
Is it possible with ntopng on OPNsense? If it's not, can other engines shape traffic by application (L7)?

I would be very grateful for your answers!

7

Intrusion Detection and Prevention / Re: Suricata and pf

« on: January 31, 2021, 02:14:38 pm »

Thank you for your answers

As I know, both Sensei and Suricata use netmap. So does suricata or sensei process packet first?

8

Intrusion Detection and Prevention / Suricata and pf

« on: January 25, 2021, 01:42:50 pm »

Hello

Please, tell me, when an OPNsense firewall receives a packet on the interface, what engine will process it first?
Will it be suricata or pf?
And how does the firewall process the packet if suricata, sensei and pf are running?

Please, share your knowledge!

BR

9

Hardware and Performance / DPDK support

« on: January 20, 2021, 03:39:05 pm »

Hi,

I'm testing the performance of OPNsense and I wonder if there is DPDK support.

I know that DPDK supports FreeBSD and it's necessary to unload any other drivers
attaching to the NIC to be able to use it with DPDK drivers. But will OPNsenes use this NIC?

Please, share your experience.

10

Hardware and Performance / Re: OPNsense AMD support

« on: January 18, 2021, 09:49:56 am »

Thank you for your answer!

The problem is that there are OPNsense firewalls with AMD G-Series CPUs on the marker
(just for example: https://store.clemanis.com/en/opnsense/781-firewall-opnsense-amd-gx-412tc-quad-core-1-ghz-3-giga-ethernet-ports-intel.html).
But I can't find these CPUs in hardware notes

11

Hardware and Performance / OPNsense AMD support

« on: January 16, 2021, 10:31:51 am »

Hello,

I'm interested in AMD processors that are supported by OPNsense.
Please, share your knowledge and provide a list of such AMD CPUs

Thanks in advance!

12

Hardware and Performance / Re: OPNsense on Atom Processor and encryption

« on: January 11, 2021, 12:02:27 pm »

Thank you for your replies!

I have one follow-up question
How to enable hardware encryption on OPNsense? And also, can OPNsense use, for instance, Intel QAT API for cryptographic hw acceleration?
Please, share your knowledge

BR
Nadzya

13

Hardware and Performance / OPNsense on Atom Processor and encryption

« on: January 11, 2021, 10:54:30 am »

Hi

I need a bit of your experience and help
Q1: Does OPNsense support Intel Atom processors?
Q2: Is it possible to use hardware-based encryption with OPNsense?

Nadzya