Topics

1

Zenarmor (Sensei) / Announcement: Zenarmor on OPNsense 24.7

« on: August 02, 2024, 08:11:11 pm »

Attention Zenarmor Users!

OPNsense 24.7 users may be experiencing the following issues. The Zenarmor team is currently working on resolving them, and they will be fixed with the upcoming release, 1.17.6. This release will be shipped at the beginning of next week. We advise users not to upgrade their OPNsense platform to the 24.7 version until we make our next announcement for safe operation.

Thank you for your understanding and patience.

1. WireGuard interface issue. Zenarmor engine can not report and apply policies to the WireGuard interface. There is a workaround solution for this issue by OPNsense. Please check the following forum link
https://forum.opnsense.org/index.php?topic=41762.msg205647#msg205647

2. User Enrichment and HA features have an issue with OPNsense 24.7

Best Regards
Zenarmor Team

2

Zenarmor (Sensei) / Announcement: Zenarmor WireGuard Filtering on OPNsense 24.7

« on: July 26, 2024, 03:51:11 pm »

Dear Zenarmor Users,

Some of our users have reported compatibility issues with filtering WireGuard VPN traffic on OPNsense 24.7. We are currently investigating the issue. If you are using Zenarmor to protect WireGuard VPN interfaces (kernel mode), we advise you not to upgrade your OPNsense platform to the latest version until we make our next announcement for safe operation.

Best Regards
Zenarmor Team

3

Zenarmor (Sensei) / Announcement: OPNsense 24.7 Upgrade

« on: July 25, 2024, 08:28:14 pm »

Dear Zenarmor Users,

The OPNsense upgrade process for major versions does not involve downloading third-party repositories or packages, such as Zenarmor. Instead, it updates the self-contained OPNsense ecosystem to prevent overlap errors and dependency mismatches between OPNsense and third-party repositories. 

Consequently, Zenarmor users who upgrade their OPNsense platforms to the latest version, 24.7, need to install Zenarmor packages that are compatible with the new operating system, FreeBSD 14.1, by running the update. 

In simpler terms, Zenarmor users should complete Zenarmor updates by immediately installing updates after the major OPNsense 24.7 upgrade is finished.

If you encounter any issues during the OPNsense 24.7 upgrade, feel free to contact the Zenarmor team for assistance.

Best Regards
Zenarmor Team

4

Zenarmor (Sensei) / Guide: What is SYN Flood Attack?

« on: July 23, 2024, 09:06:47 am »

Dear Beloved Zenarmor Users,
A SYN flood interrupts a web service using a TCP/IP handshake vulnerability. In the world of cyber threats, the TCP SYN Flood stands out as a particularly malicious type of denial-of-service (DoS) attack. By manipulating the protocols that govern internet communication, attackers can flood servers, rendering them unavailable to genuine queries.
This article covers the SYN flood attack. Explore the complexities of TCP SYN Flood, a common denial-of-service attack. Learn about its processes, the hazards it may bring to computer networks, and the tactics used to combat such attacks.
https://www.zenarmor.com/docs/network-security-tutorials/what-is-syn-flood-attack
Best Regards
Zenarmor Team

5

Zenarmor (Sensei) / Guide: Best Practices for Zenarmor Deployment

« on: July 02, 2024, 12:46:06 pm »

Dear Beloved Zenarmor Users,

This guide outlines the fundamental best practices that administrators must follow in order to optimize and effectively implement the Zenarmor® configuration settings. These procedures encompass critical components, including ease of policy configuration, device examination, and security rule enforcement. Furthermore, the article provides additional information regarding the protection of IoT devices, virtual environment considerations, and efficient reporting strategies.

By following the outlined best practices, you can ensure a secure, efficient, and reliable deployment of Zenarmor in your network.
https://www.zenarmor.com/docs/guides/best-practices-for-zenarmor-deployment

Best Regards
Zenarmor Team

6

Zenarmor (Sensei) / Guide: Adding Zenarmor Certificate to a Trust Store

« on: June 11, 2024, 03:56:54 pm »

Dear Zenarmor Users,

Zenarmor internal CA certificate must be installed on client devices as a trusted certificate to inspect TLS traffic or view the Zenarmor block notification page for TLS traffic.

In this guide, we will provide the steps for adding the Zenarmor CA certificate to the different operating systems and applications.

https://www.zenarmor.com/docs/guides/adding-zenarmor-certificate-to-a-trust-store

Best Regards
Zenarmor Team

7

Zenarmor (Sensei) / Attention: Zenarmor Fresh Installation with ECS on OPNsense 24.1.7

« on: May 16, 2024, 08:18:30 pm »

Dear Zenarmor Users,

We have identified an issue that prevents Zenarmor Elasticsearch database installation on the latest OPNsense version 24.1.7. We strongly advise holding off on upgrading to this version while our team works diligently to resolve the matter. We are committed to providing a swift solution and will update you as soon as the fix is available.

Thank you for your understanding and cooperation.
Best Regards

Zenarmor Team

8

Zenarmor (Sensei) / Attention Zenarmor Users Who Utilize MongoDB

« on: April 18, 2024, 03:01:46 pm »

Dear Zenarmor Users,

We have identified an issue with MongoDB on the latest OPNsense version 24.1.6 that affects its compatibility with Zenarmor. We strongly advise holding off on upgrading to this version while our team works diligently to resolve the matter. We are committed to providing a swift solution and will update you as soon as the fix is available.

Thank you for your understanding and cooperation.
Best Regards

Zenarmor Team

9

Zenarmor (Sensei) / The Ideal Duo: OPNsense and Zenarmor for Enterprises

« on: March 22, 2024, 09:51:15 am »

Dear Beloved Zenarmor Users,

Explore how OPNsense and Zenarmor work together to provide businesses with stronger network security and management.

This webinar will cover the benefits of combining OPNsense's firewall capabilities with Zenarmor's security features for enterprise networks.

Learn from experts about enhancing your network's defense and efficiency without the complex language or pushy sales pitches.

Join us to gain insights into simplifying and strengthening your cybersecurity strategy.

March 27, 2024 15.00 pm (CET)

https://streamyard.com/watch/7JnW45azTm57

Zenarmor Team

10

Zenarmor (Sensei) / Tutorial: How to Change a Self-Signed Certificate with a CA-Signed Certificate o

« on: March 19, 2024, 08:54:34 am »

Dear Beloved Zenarmor Users,

OPNsense allows you to create Let's Encrypt certificates using the ACME client, a plugin included in the repository. Let's Encrypt certificates are advantageous due to their cost-free nature and the ease with which they can be created for your domains.

The primary aim of Let's Encrypt and the ACME protocol is to facilitate the establishment of an HTTPS server that acquires a browser-trusted certificate autonomously, without requiring any human intervention. This is achieved through the implementation of a certificate management agent on the web server.

In this tutorial, we will explain how you can change a self-signed certificate with a Let's Encrypt certificate on your OPNsense firewall.

https://www.zenarmor.com/docs/network-security-tutorials/how-to-change-self-signed-certificates-with-ca-signed-certificate-on-opnsense

Best Regards,

Zenarmor Team

11

Zenarmor (Sensei) / Guide: How to Manage Certificates on OPNsense

« on: March 12, 2024, 01:19:38 pm »

Dear OPNsense Community,

Certificates on OPNsense are used to establish confidence between peers. OPNsense enables the creation of certificates directly from the front end to simplify their use. Furthermore, it enables the creation of certificates for many uses without using the "openssl" command line program.

In this guide, we outline OPNsense certificate management topics.
https://www.zenarmor.com/docs/network-security-tutorials/how-to-manage-certificates-on-opnsense

Best Regards,

Zenarmor Team

12

Zenarmor (Sensei) / How to Configure Dynamic DNS on OPNsense?

« on: March 05, 2024, 10:46:35 am »

Dear Beloved Zenarmor Users,

DDclient is a Perl client that is used to update dynamic DNS entries for accounts on a Dynamic DNS Network Service Provider. This software operates on a wide range of UNIX operating systems and has undergone testing on GNU/Linux and FreeBSD. The supported capabilities include functioning as a daemon, both manual and automated updates, static and dynamic updates, optimized updates for multiple addresses, MX records, wildcards, abuse avoidance, retrying unsuccessful updates, and transmitting update status to syslog and via e-mail.

In this tutorial, we will guide you through dynamic DNS configuration on the OPNsense firewall using ddclient plugin and Cloudflare.

https://www.zenarmor.com/docs/network-security-tutorials/how-to-configure-dynamic-dns-on-opnsense

Best Regards
Zenarmor Team

13

Zenarmor (Sensei) / Discover "The Beginner's Guide for OPNsense" - A Comprehensive Ebook to Master O

« on: February 29, 2024, 10:36:22 am »

Hello OPNsense enthusiasts and cybersecurity professionals,

We're thrilled to announce the release of "The Beginner's Guide for OPNsense", a comprehensive ebook designed to help both newcomers and seasoned users maximize the potential of their OPNsense setups. Brought to you by Zenarmor, this guide is a testament to our commitment to the OPNsense community and our belief in open-source security solutions.

What's Inside?

• Step-by-step instructions on configuring and optimizing OPNsense.
• Best practices for network security and performance.
• Insights into advanced features to elevate your OPNsense experience.

Whether you're setting up OPNsense for the first time or looking to deepen your understanding of its capabilities, this guide is packed with valuable information to enhance your cybersecurity strategy.

Download your free copy here:

https://www.zenarmor.com/opnsense-beginner-guide-form?utm_source=website&utm_medium=opnsenseforum&utm_campaign=beginnersguide

We're excited to contribute to the OPNsense community and look forward to your feedback. Dive into the ebook and let's strengthen our networks together!

Zenarmor Team

14

Zenarmor (Sensei) / Tutorial: How to Configure DoT on OPNsense Firewall?

« on: February 27, 2024, 10:06:06 am »

Dear beloved Zenarmor Users,

All DNS queries are routed in plaintext. Your ISP or a hacker can intercept transmissions via UDP and TCP protocol 53 in plaintext to compromise the site's DNS queries and responses. For this reason, we should encrypt our DNS queries for security purposes. DNS over TLS (DoT) is a security protocol that utilizes Transport Layer Security (TLS) to encrypt DNS traffic and is one of the most common DNS security solutions.

This tutorial will help you configure the OPNsense DNS resolver to encrypt all DNS queries in order to prevent surveillance and enhance your online privacy and security.

https://www.zenarmor.com/docs/network-security-tutorials/how-to-configure-dot-on-opnsense

Best Regards,

Zenarmor Team

15

Zenarmor (Sensei) / How to Configure IPSec Site-to-Site VPN Tunnel on OPNsense?

« on: February 20, 2024, 10:42:04 am »

Dear beloved Zenarmor Users,

IPSec is a collection of communication protocols that provide secure connections over a network. The phrase "IPsec" is an abbreviation where "IP" represents "Internet Protocol" and "sec" represents "secure."

OPNsense provides VPN connectivity for both branch offices and remote users (Road-Warrior). Setting up a single, secure private network that connects several branch offices to a central location is simply accomplished using the OPNsense web user interface.

This guide will explain the process of configuring an IPsec site-to-site VPN tunnel using an OPNsense firewall.

https://www.zenarmor.com/docs/network-security-tutorials/how-to-configure-ipsec-site-to-site-vpn-tunnel-on-opnsense

Best Regards,

Zenarmor Team