106
Zenarmor (Sensei) / Re: Sensei stuck on initializing
« on: October 21, 2021, 02:21:45 am »
@lignumaqua, this is not expected. Shoot a Bug Report and the team will have a look.
Show Posts
This section allows you to view all posts made by this member. Note that you can only see posts made in areas you currently have access to.
107
Zenarmor (Sensei) / Re: Zenarmor 1.10 MAC address exemption?
« on: October 19, 2021, 02:11:06 am »
@athurdent, thanks, all noted.
Instant Notifications (UI/Email) for Important Threat Alerts are on our agenda. 1.10 laid a great deal of the groundwork for us.
Instant Notifications (UI/Email) for Important Threat Alerts are on our agenda. 1.10 laid a great deal of the groundwork for us.
108
Zenarmor (Sensei) / Re: Zenarmor 1.10 MAC address for policy apply
« on: October 18, 2021, 02:48:56 am »
@opnip, great to hear that!
109
Zenarmor (Sensei) / Re: Zenarmor 1.10 MAC address exemption?
« on: October 18, 2021, 02:48:33 am »
@athurdent, @jasonjoel thanks for the feedback and suggestions.
I've informed the team about them. Quick question:
What would be the top 3 functionalities you'd like to see in a mobile-friendly cloud portal?
As for the home subscription & number of policies. All noted. We've done a user survey and attempted to create a solution to be able to offer an extended home subscription. So far, it turned out to be a bit difficult to differentiate the SOHO and Home version. This is likely to change later in the coming year; and we hope to get back with good news.
I've informed the team about them. Quick question:
What would be the top 3 functionalities you'd like to see in a mobile-friendly cloud portal?
As for the home subscription & number of policies. All noted. We've done a user survey and attempted to create a solution to be able to offer an extended home subscription. So far, it turned out to be a bit difficult to differentiate the SOHO and Home version. This is likely to change later in the coming year; and we hope to get back with good news.
110
Zenarmor (Sensei) / Re: Sensei not starting
« on: October 16, 2021, 05:34:09 pm »
Hi Marco,
Got it. Yep, it looks like it's on their table. Always a pleasure, have a great weekend.
Got it. Yep, it looks like it's on their table. Always a pleasure, have a great weekend.
111
Zenarmor (Sensei) / Re: Sensei not starting
« on: October 16, 2021, 05:27:32 pm »
Got it.
No worries at all. Find the "Report Bug" link on the upper right corner of the zenarmor UI. Make sure to send zenarmor logs. You'll be assigned a ticket and the team will follow up from there.
No worries at all. Find the "Report Bug" link on the upper right corner of the zenarmor UI. Make sure to send zenarmor logs. You'll be assigned a ticket and the team will follow up from there.
112
Zenarmor (Sensei) / Re: Sensei not starting
« on: October 16, 2021, 05:10:39 pm »
@Defender110, this seemed to be related to a UI glitch. Maybe a theme incompatibility. If you're not using the default theme, can you try switching to it and try again?
If it's not the case, send us a report and the team will have a look.
If it's not the case, send us a report and the team will have a look.
113
Zenarmor (Sensei) / Re: Country Blocks
« on: October 16, 2021, 02:36:43 am »
A feedback request here:
Are you getting value from Geo-IP blocks? We had lowered the priority of GeoIP blocking a bit since we were thinking that attackers are utilizing infrastructure in the western world to bypass this technique.
What is your experience?
Are you getting value from Geo-IP blocks? We had lowered the priority of GeoIP blocking a bit since we were thinking that attackers are utilizing infrastructure in the western world to bypass this technique.
What is your experience?
114
Zenarmor (Sensei) / Re: Zenarmor 1.10 MAC address for policy apply
« on: October 16, 2021, 02:26:16 am »
Hi @opnip,
Policy criteria are evaluated with the AND logical operator. It's not either IP addresses or MAC addresses, rather, if you specify both an IP address or MAC address they should both match. [1]
@athurdent, if you only enter MAC addresses that warning should not be displayed. We'll have a look at it. But you can ignore it, for now, its' a misleading warning message.
[1] https://www.sunnyvalley.io/docs/troubleshooting/policy-and-filtering#policy-does-not-seem-to-get-applied
Policy criteria are evaluated with the AND logical operator. It's not either IP addresses or MAC addresses, rather, if you specify both an IP address or MAC address they should both match. [1]
@athurdent, if you only enter MAC addresses that warning should not be displayed. We'll have a look at it. But you can ignore it, for now, its' a misleading warning message.
[1] https://www.sunnyvalley.io/docs/troubleshooting/policy-and-filtering#policy-does-not-seem-to-get-applied
115
Zenarmor (Sensei) / Re: Zenarmor 1.10 MAC address exemption?
« on: October 16, 2021, 02:19:57 am »
Hi @athurdent,
It's our pleasure. I hope you are liking it so far.
Yes, MAC addresses have been introduced to Policies and Reporting. Not yet for bypassing the traffic. A bit of information there:
The reason you're still seeing CPU activity even though you've bypassed an IP address is that it still hits the packet engine.
Although the engine does not apply packet inspection and/or filtering etc, netmap still has to process it, deliver it to the zenarmor engine and re-transmit it to the network stack. This sometimes might be another bottleneck.
It's our pleasure. I hope you are liking it so far.
Yes, MAC addresses have been introduced to Policies and Reporting. Not yet for bypassing the traffic. A bit of information there:
The reason you're still seeing CPU activity even though you've bypassed an IP address is that it still hits the packet engine.
Although the engine does not apply packet inspection and/or filtering etc, netmap still has to process it, deliver it to the zenarmor engine and re-transmit it to the network stack. This sometimes might be another bottleneck.
116
Zenarmor (Sensei) / Re: SENSEI NOT BLOCKING ANYTHING AT ALL
« on: September 17, 2021, 07:50:43 pm »
Very interesting.
@annoniempjuh, @OPNBOI212
Can you both send bug reports? Make sure to include both opnsense and sensei logs.
Let's check if there's something in common and find out the real cause.
@annoniempjuh, @OPNBOI212
Can you both send bug reports? Make sure to include both opnsense and sensei logs.
Let's check if there's something in common and find out the real cause.
117
Zenarmor (Sensei) / Re: SENSEI NOT BLOCKING ANYTHING AT ALL
« on: September 17, 2021, 05:24:10 pm »
Hi @OPNBOI212,
My first guess will be that you're on Passive Deployment Mode. Can you check if this is the case?
For details:
https://www.sunnyvalley.io/docs/opnsense/configuring/general#deployment-mode-configuration
My first guess will be that you're on Passive Deployment Mode. Can you check if this is the case?
For details:
https://www.sunnyvalley.io/docs/opnsense/configuring/general#deployment-mode-configuration
118
Zenarmor (Sensei) / Re: Exciting news today: Sensei is now Zenarmor
« on: September 16, 2021, 03:18:36 am »
@athurdent, @sorano
Thanks for the feedback. Great to hear that you loved the new name. 1.10 is under beta testing currently. We're targeting the end of this month for the release.
Nothing will change other than the cosmetic changes in the UI, Web site, and other marketing documents.
Other than that, product roadmaps and features are all the same. We'll continue to ship what we had been planning for Sensei under the new name.
Specifically for MAC address-based filtering, whitelisting, it'll appear in 1.10. You'll also start seeing MAC addresses in the reports. With that, Zenarmor will match IPv6 addresses with the IPv4-based DNS hostnames if they share the same MAC address.
This is evolving towards Device Identification and device-based policy enforcement.
For the RSS multi-core support, I think OPNsense has landed some developments in the latest release. Did not have a chance to check it out yet. We'll post an update once we get a hold of it.
Thanks for the feedback. Great to hear that you loved the new name. 1.10 is under beta testing currently. We're targeting the end of this month for the release.
Nothing will change other than the cosmetic changes in the UI, Web site, and other marketing documents.
Other than that, product roadmaps and features are all the same. We'll continue to ship what we had been planning for Sensei under the new name.
Specifically for MAC address-based filtering, whitelisting, it'll appear in 1.10. You'll also start seeing MAC addresses in the reports. With that, Zenarmor will match IPv6 addresses with the IPv4-based DNS hostnames if they share the same MAC address.
This is evolving towards Device Identification and device-based policy enforcement.
For the RSS multi-core support, I think OPNsense has landed some developments in the latest release. Did not have a chance to check it out yet. We'll post an update once we get a hold of it.
119
Zenarmor (Sensei) / Exciting news today: Sensei is now Zenarmor
« on: September 14, 2021, 06:18:57 pm »
Dear friends,
As of today, we're thrilled to announce that we'll be rebranding Sensei as ZENARMOR.
Sensei will be getting a new logo with a new brand name, but our beloved next-generation firewall plug-in will remain the same if not better.
Read more here:
https://www.sunnyvalley.io/post/sensei-is-now-zenarmor
As of today, we're thrilled to announce that we'll be rebranding Sensei as ZENARMOR.
Sensei will be getting a new logo with a new brand name, but our beloved next-generation firewall plug-in will remain the same if not better.
Read more here:
https://www.sunnyvalley.io/post/sensei-is-now-zenarmor
120
Zenarmor (Sensei) / Re: FreeBSD Install
« on: September 13, 2021, 10:47:39 pm »
Hi @jclendineng, we'll test it this week. Still hopeful that it will make 1.10 