106
Zenarmor (Sensei) / Re: Extreme reduction of bandwidth on 100Mbit line
« on: April 17, 2024, 06:17:38 pm »
Hi,
Are you sure it is the same even if Zenarmor is stopped?
Are you sure it is the same even if Zenarmor is stopped?
Show Posts
This section allows you to view all posts made by this member. Note that you can only see posts made in areas you currently have access to.
107
Zenarmor (Sensei) / Re: Zenarmor throughput with N100 / i226v
« on: March 26, 2024, 02:40:26 pm »
Hi,
Please do same test in bypass mode (Dashboard - Engine - Enter Bypass Mode) as well.
Please do same test in bypass mode (Dashboard - Engine - Enter Bypass Mode) as well.
108
Zenarmor (Sensei) / Re: Zenarmor External Elastic Database (Permission and TLS Issue)
« on: March 04, 2024, 07:36:02 pm »
Hi,
Normally Zenarmor handles self-signed cetificate. Please share a report by using Have Feedback option in UI by selecting Zenarmor logs and configuration checkboxes.
Normally Zenarmor handles self-signed cetificate. Please share a report by using Have Feedback option in UI by selecting Zenarmor logs and configuration checkboxes.
109
Zenarmor (Sensei) / Re: why is eastpect locked to a single core
« on: March 04, 2024, 07:33:56 pm »
Hi All,
We needed to make a bit of differences in our roadmap due to SSE and SASE features. It is kept in roadmap but it seems at the end of this year or at the first quarter of next year.
We needed to make a bit of differences in our roadmap due to SSE and SASE features. It is kept in roadmap but it seems at the end of this year or at the first quarter of next year.
110
Zenarmor (Sensei) / Re: Integrating Zenarmor with Wazuh - A guide to SIEM integration using Syslog
« on: February 29, 2024, 04:07:37 pm »
Hi @athurdent,
It is in our roadmap that sending a notification for the threats.
It is in our roadmap that sending a notification for the threats.
111
Zenarmor (Sensei) / Re: Block Generic TCPIP
« on: February 25, 2024, 12:04:37 pm »
Hi Rodrigo,
You can define custom app according to port number for it in Policy - App Controls then block it.
You can define custom app according to port number for it in Policy - App Controls then block it.
112
Zenarmor (Sensei) / Re: Is Port25 blocked?
« on: February 25, 2024, 12:03:14 pm »
Hi,
What about Zenarmor block reports? Do you see any block record in Live sessions - Blocks?
What about Zenarmor block reports? Do you see any block record in Live sessions - Blocks?
113
Zenarmor (Sensei) / Re: Block Generic TCPIP
« on: February 24, 2024, 04:29:40 am »
Hi Rodrigo,
There is a known issue here. It should be classified as Generic TCP or Generic UDP instead of Generic TCPIP. It will be fixed with version 1.17 a the end of March.
There is a known issue here. It should be classified as Generic TCP or Generic UDP instead of Generic TCPIP. It will be fixed with version 1.17 a the end of March.
114
Zenarmor (Sensei) / Re: Devices detecting the same devices over and over.
« on: February 11, 2024, 10:21:09 pm »
Hi,
Is it a mobile device or?
Is it a mobile device or?
115
Zenarmor (Sensei) / Re: High ram consumption Zenarmor 1.16.1
« on: February 11, 2024, 10:20:19 pm »
Hi,
What is your reporting DB? And Howmany days do you keep the reporting data?
What is your reporting DB? And Howmany days do you keep the reporting data?
116
Zenarmor (Sensei) / Re: Zemarmor Scheduled Reports Email Not Working
« on: February 11, 2024, 10:17:51 pm »
Hello,
Actually not. Gmail and Hotmail doesn't allow to third party apps to send email for free users. But you could be able to use your own server. Can you share /usr/local/opnsense/scripts/OPNsense/Zenarmor/report-gen/send.sh command output?
Actually not. Gmail and Hotmail doesn't allow to third party apps to send email for free users. But you could be able to use your own server. Can you share /usr/local/opnsense/scripts/OPNsense/Zenarmor/report-gen/send.sh command output?
117
Zenarmor (Sensei) / Re: Upgrade 24_1_1 Sensei Health missing File .placeholder
« on: February 11, 2024, 10:14:18 pm »
Hi,
You don't need to do anything. It will be fixed with the upcoming release.
You don't need to do anything. It will be fixed with the upcoming release.
118
Zenarmor (Sensei) / Re: AGH & Zenarmor Why cant you install local ES db?
« on: February 11, 2024, 10:12:44 pm »
Hi,
Zenarmor shouldn't warn if you didn't install mimugmail plugin. Can you share a report via Have Feedback option in UI. We need to check the configuration and logs.
Zenarmor shouldn't warn if you didn't install mimugmail plugin. Can you share a report via Have Feedback option in UI. We need to check the configuration and logs.
119
Zenarmor (Sensei) / Re: I need some advice for a first installation of Zenarmor
« on: February 11, 2024, 10:11:02 pm »
Hi,
1- The best practice is to protect the LAN physical interface(s) on Zenarmor. But if you would like to protect only specific VLAN(s) on the interface, you can protect individual VLAN(s) as well. If you protect all inner interface(s) on Zenarmor, The WAN interface protection is optional.
2- Zenarmor applies only one policy to a session. So, if you configure a custom policy that matches to your VLAN traffic, only the custom policy will apply for your VLAN traffic. The Default policy only will be applied for the sessions that don't match to your custom policy(ies). If you don't add any custom policy, the default policy will be applied to all sessions. Or, for example, you added a policy for VLAN 100, this policy will be applied to VLAN 100 and all other traffic will match to default policy. Please visit the following link for further detail.
https://www.zenarmor.com/docs/opnsense/policies/configuring-policy
3- Yes, that's correct.
CPU and Ram usage seems pretty high. Can you share top -ao res command?
1- The best practice is to protect the LAN physical interface(s) on Zenarmor. But if you would like to protect only specific VLAN(s) on the interface, you can protect individual VLAN(s) as well. If you protect all inner interface(s) on Zenarmor, The WAN interface protection is optional.
2- Zenarmor applies only one policy to a session. So, if you configure a custom policy that matches to your VLAN traffic, only the custom policy will apply for your VLAN traffic. The Default policy only will be applied for the sessions that don't match to your custom policy(ies). If you don't add any custom policy, the default policy will be applied to all sessions. Or, for example, you added a policy for VLAN 100, this policy will be applied to VLAN 100 and all other traffic will match to default policy. Please visit the following link for further detail.
https://www.zenarmor.com/docs/opnsense/policies/configuring-policy
3- Yes, that's correct.
CPU and Ram usage seems pretty high. Can you share top -ao res command?
120
Zenarmor (Sensei) / Re: Sensei db related error in backend log
« on: February 11, 2024, 09:35:29 pm »
Hi,
Please run the following commands
rm -fr /usr/local/opnsense/version/sensei-db
rm -fr /usr/local/sensei-db
Click in System - Firmware - Resolve Plugin Conflicts - Reset All Local Conflicts
Please run the following commands
rm -fr /usr/local/opnsense/version/sensei-db
rm -fr /usr/local/sensei-db
Click in System - Firmware - Resolve Plugin Conflicts - Reset All Local Conflicts