Messages

106

Zenarmor (Sensei) / Re: Additional platforms - how does that work?

« on: June 10, 2021, 06:20:21 pm »

What about the "Session Details"? Is that coming in some form?

107

Zenarmor (Sensei) / Re: Additional platforms - how does that work?

« on: June 10, 2021, 05:44:11 pm »

Yes, tats fantastic! Thanks. Im going to be using this headless on BSD separate from opnsense installation.

108

Zenarmor (Sensei) / Re: Additional platforms - how does that work?

« on: June 10, 2021, 03:32:48 pm »

Hi @jclendineng,

Thanks for this question. I guess "Centralized Policy Management" and "Cloud Management" terms are close and maybe prone to mis-understanding.

With the Cloud Management capability (available in the Free) you are able to manage the sensei functionality on individual firewalls. Means you can view their reports, create/delete/manage policies etc) on an individual firewall basis.

A Centralized Policy is that you have a single centralized policy which gets applied to many firewalls at once.  So instead of configuring the individual policies on the individual firewalls one by one, you create a single policy and push it to all / a group of firewalls.

Centralized Reporting is similar to Centralized Policy, where you can view the reports of all / a group of firewalls from a single pane.

Cloud Management is available for Free Edition; where as Centralized Policy/Reporting is available in their respective paid plans.

Hope this makes this more clear.

PS: We'll shortly roll-out an improved product documentation, which will also include Cloud Management.

What is the timeline for this? Reporting is basically a graph that tells me something happened somewhere...no real information. You mentioned drill down and live block is coming in .10? Is that still on track? Thanks!

109

Zenarmor (Sensei) / Re: Duplicate Dependency listing

« on: May 26, 2021, 06:26:33 pm »

Hmm...released notes...



Mind sharing?? 

110

Zenarmor (Sensei) / Re: Bug report: localhost cannot be used for reverse lookups

« on: May 07, 2021, 02:51:04 pm »

https://help.sunnyvalley.io/hc/en-us/articles/360045745053-Reporting-a-bug

111

Zenarmor (Sensei) / Re: Bug report: localhost cannot be used for reverse lookups

« on: May 06, 2021, 10:12:59 pm »

Just use your gateway IP (192.168.1.1) or whatever it is

112

21.1 Legacy Series / Re: 21.1.5 Suricata broken (NIC issue)

« on: May 05, 2021, 01:54:19 pm »

Aw it IS proxmox.  Yes that is 100% the issue.  Try either a different driver OR pass through the entire NIC port.  Everything else would work as most other things are generic, netmap/suricata needs specific driver support, HyperScan doubly so.

Edit: SR-IOV is the best driver for this card and will allow full pass-through as you stated, try that and report back on any improvements...

113

Zenarmor (Sensei) / Re: Additional platforms - how does that work?

« on: May 05, 2021, 01:51:56 pm »

Thank you for that.  I assumed that was the case but wanted to double check. 

114

21.1 Legacy Series / Re: 21.1.5 Suricata broken

« on: May 04, 2021, 11:21:12 pm »

vtnet1 does not support NS_MOREFRAG

This is a NIC reply NOT a suricata/OS reply.....Unfortunately this means its most likely a FreeBSD driver issue with your particular NIC.  What are you using? Bare metal or virtual? vtnet1 means you have it virtualized? In any case its a driver issue.  If this is virtualized you could try a different driver to pass thru.

115

21.1 Legacy Series / Re: 21.1.5 Suricata broken

« on: May 04, 2021, 08:07:20 pm »

1. No suricata works fine
2. HyperScan is limited to certain NIC's, AFAIK realtek/whatever will not work, Intel nics work well

I am using HyperScan and it works fine (quite an improvement actually).  Do you have sensei installed? 2 apps cant use the same interface with netmap...if something else is bound to that int suricata will fail to start...any other logs?

116

Zenarmor (Sensei) / Re: Additional platforms - how does that work?

« on: May 04, 2021, 08:03:36 pm »

The plans are a bit confusing on this front, are we able to manage unix/bsd installs with the home plan or is that blocked? Central Policy is listed as not for paid home use BUT how then are we able to manage the firewall?

117

Zenarmor (Sensei) / Re: Cloud Management

« on: May 04, 2021, 07:59:20 pm »

Basically, how do I manage a bare metal installation? I assume its possible since its listed as a "feature", to be able to install on BSD/Linux etc.  Would I need to run 2 boxes with opnsense, 1 box as a firewall and 1 box with firewall disabled running sensei if I wanted a dedicated sensei box?

118

Zenarmor (Sensei) / Re: Cloud Management

« on: May 03, 2021, 08:35:39 pm »

So if I want to install this on Debian/CentOS in bridge between OPNSense and my network on a dedicated server, it will not not work, is that correct? Linux install requires Cloud Portal to function? How do I manage it? Thanks!

119

Zenarmor (Sensei) / Cloud Management

« on: May 03, 2021, 02:01:49 pm »

I am unclear on the cloud management.  How am I able to unblock blocked sites in reports? I am not able to find it.  Also I am not able to drill down, I see graphs but am not able to interact with them at all.  Is this expected, or is the cloud portal still not ready for prime time?

Thanks!!

120

Zenarmor (Sensei) / Re: Sensei ongoing unresolved bugs and service not as claimed

« on: April 23, 2021, 11:52:31 pm »

Bump

Block pages are still not working, Im assuming it is a known issue?