61
Zenarmor (Sensei) / Re: Zenarmor only blocking some destinations - config
« on: April 14, 2023, 03:15:16 pm »
You may try to disable QUIC UDP Connection under Application Control / Media Streaming
Show Posts
This section allows you to view all posts made by this member. Note that you can only see posts made in areas you currently have access to.
62
Zenarmor (Sensei) / Announcement: Zenconsole is Moving to its New Domain - dash.zenarmor.com
« on: April 13, 2023, 08:07:59 pm »
Dear valued Zenarmor users,
We're excited to announce that our Zenconsole firewall management console has a new domain, https://dash.zenarmor.com/. Plus, for a limited time, you can still access and manage your Zenarmor nodes via the old domain, https://sunnyvalley.cloud/. In the future, all access requests to the former domain will be redirected to the new domain, https://dash.zenarmor.com/. Rest assured that all user accounts, data, and settings have been smoothly transferred to the new site, so you can keep using our services without any interruptions.
We understand that change can sometimes be daunting, but we're here to make this transition as seamless as possible for you. Additionally, we've made significant improvements to the Zenconsole, including enhanced security features and an improved user interface, to ensure that your experience with our platform is better than ever before. If you have any questions or concerns, our support team is available to assist you at https://help.sunnyvalley.io/hc/en-us or via support -at- sunnyvalley.io email.
Thank you for your continued trust and support. We couldn't have done this without you!
Best regards, Your friends at Zenarmor
We're excited to announce that our Zenconsole firewall management console has a new domain, https://dash.zenarmor.com/. Plus, for a limited time, you can still access and manage your Zenarmor nodes via the old domain, https://sunnyvalley.cloud/. In the future, all access requests to the former domain will be redirected to the new domain, https://dash.zenarmor.com/. Rest assured that all user accounts, data, and settings have been smoothly transferred to the new site, so you can keep using our services without any interruptions.
We understand that change can sometimes be daunting, but we're here to make this transition as seamless as possible for you. Additionally, we've made significant improvements to the Zenconsole, including enhanced security features and an improved user interface, to ensure that your experience with our platform is better than ever before. If you have any questions or concerns, our support team is available to assist you at https://help.sunnyvalley.io/hc/en-us or via support -at- sunnyvalley.io email.
Thank you for your continued trust and support. We couldn't have done this without you!
Best regards, Your friends at Zenarmor
63
Zenarmor (Sensei) / Re: Repeated "Ethernet detached" events / Flapping caused by Sensei Zenarmor?
« on: March 30, 2023, 11:09:56 am »
Hi evanrich,
netmap fix will be shipped soon by the OPNsense team.
https://forum.opnsense.org/index.php?topic=32114.60
netmap fix will be shipped soon by the OPNsense team.
https://forum.opnsense.org/index.php?topic=32114.60
64
Zenarmor (Sensei) / Re: My server always shows cloud intel down
« on: March 27, 2023, 08:27:35 am »
Hi allebone,
Is there any firewall rule which blocks ICMP packets? Zenarmor checks CTI servers connection via ping.
Is there any firewall rule which blocks ICMP packets? Zenarmor checks CTI servers connection via ping.
65
Zenarmor (Sensei) / Re: TLS/SSL Inspection is now going to be business license only?
« on: March 22, 2023, 02:00:20 pm »
Could you try using another browser, such as Chrome?
Is there any proxy setting on Safari, like icloud private relay?
Is there any proxy setting on Safari, like icloud private relay?
66
Zenarmor (Sensei) / Re: TLS/SSL Inspection is now going to be business license only?
« on: March 21, 2023, 01:54:55 pm »
Thanks for your feedback.
Snapchat looks under the IM app category. We will move it to the social media category.
Tiktok should be blocked. Are you using TikTok mobile app or trying to access it via a web browser on a desktop?
Snapchat looks under the IM app category. We will move it to the social media category.
Tiktok should be blocked. Are you using TikTok mobile app or trying to access it via a web browser on a desktop?
67
Zenarmor (Sensei) / Re: TLS/SSL Inspection is now going to be business license only?
« on: March 20, 2023, 02:03:42 pm »
There is no special configuration for free TLS inspection.
After defining the default policy, it will automatically apply tls inspection.
After defining the default policy, it will automatically apply tls inspection.
68
Zenarmor (Sensei) / Re: TLS/SSL Inspection is now going to be business license only?
« on: March 17, 2023, 02:51:06 pm »
Hi NW4FUN,
Free/Certificate TLS inspection can block/allow according to the domain name.
But, Full TLS inspection can screen all data packets. For example, it can block/allow traffic by checking not only the domain name but also the URL. Malicious file protection and antivirus protection will work based on Full TLS inspection capability as well.
Best
Free/Certificate TLS inspection can block/allow according to the domain name.
But, Full TLS inspection can screen all data packets. For example, it can block/allow traffic by checking not only the domain name but also the URL. Malicious file protection and antivirus protection will work based on Full TLS inspection capability as well.
Best
69
Zenarmor (Sensei) / Re: TLS/SSL Inspection is now going to be business license only?
« on: March 16, 2023, 02:28:54 pm »
Hi all!
Just wanted to let you know that Zenarmor offers free Domain and IP-based Certificate TLS inspection for every packet, whether you're using Free, Home, SOHO, or Business edition.
If you're using the Business edition, you will also take advantage of the Full TLS inspection feature.
Let us know if you have any questions or need further assistance.
Best
Just wanted to let you know that Zenarmor offers free Domain and IP-based Certificate TLS inspection for every packet, whether you're using Free, Home, SOHO, or Business edition.
If you're using the Business edition, you will also take advantage of the Full TLS inspection feature.
Let us know if you have any questions or need further assistance.
Best
70
Zenarmor (Sensei) / [Call For Testing] Netmap PPPoE/Tun/Tap Support
« on: March 14, 2023, 01:28:05 pm »
Dear Zenarmor users,
As we informed you before, Zenarmor and OPNsense have been working with Klara to bring netmap improvements to FreeBSD, some of which have already landed in the development branch for the upcoming FreeBSD 14.
One of the goals of the project is to increase the number of supported interfaces, like PPPoE. The project team shipped a test kernel for netmap PPPoE support.
We would hope some of you could try this one out and share your experience if you have any issues. You can easily install the test kernel and start testing PPPoE/Tun/Tap interface protection with Zenarmor by running the next command:
opnsense-update -zkr 23.1.2-tuntap
Please test and provide feedback, as your feedback is very important for us to confirm what we're doing is actually working in the field and solving your issues. And please do not hesitate to reach out to Zenarmor support if you suspect you're having issues in the context of netmap test kernels. Again, it'll help us confirm what's working and what's not.
We'll continue to keep you posted on this.
Thanks!
Your Zenarmor team
As we informed you before, Zenarmor and OPNsense have been working with Klara to bring netmap improvements to FreeBSD, some of which have already landed in the development branch for the upcoming FreeBSD 14.
One of the goals of the project is to increase the number of supported interfaces, like PPPoE. The project team shipped a test kernel for netmap PPPoE support.
We would hope some of you could try this one out and share your experience if you have any issues. You can easily install the test kernel and start testing PPPoE/Tun/Tap interface protection with Zenarmor by running the next command:
opnsense-update -zkr 23.1.2-tuntap
Please test and provide feedback, as your feedback is very important for us to confirm what we're doing is actually working in the field and solving your issues. And please do not hesitate to reach out to Zenarmor support if you suspect you're having issues in the context of netmap test kernels. Again, it'll help us confirm what's working and what's not.
We'll continue to keep you posted on this.
Thanks!
Your Zenarmor team
71
Zenarmor (Sensei) / Re: Is Zenarmor looking into the NETMAP bug?
« on: March 02, 2023, 02:07:04 pm »
Hi SpinningRust,
Could you confirm that this issue occurs in emulated mode?
Best
Could you confirm that this issue occurs in emulated mode?
Best
72
Zenarmor (Sensei) / Re: HBOMax on Roku Devices
« on: March 01, 2023, 12:49:55 pm »
Hi Senorfluff,
Yes, Defining a whitelist for "youidomain2.com" should solve your issue.
https://www.zenarmor.com/docs/opnsense/policies/exclusions#defining-blacklists-and-whitelists
Yes, Defining a whitelist for "youidomain2.com" should solve your issue.
https://www.zenarmor.com/docs/opnsense/policies/exclusions#defining-blacklists-and-whitelists
73
Zenarmor (Sensei) / Re: Local Unbound DNS queries blocked by Zenarmor
« on: February 27, 2023, 09:29:32 am »
Hi Grenen,
Did you have a chance for a fresh installation of Zenarmor and re-check the local DNS issue? If you still see the case, you may send a bug report by selecting all options to the Zenarmor team for further investigation.
https://www.zenarmor.com/docs/support/reporting-bug
Did you have a chance for a fresh installation of Zenarmor and re-check the local DNS issue? If you still see the case, you may send a bug report by selecting all options to the Zenarmor team for further investigation.
https://www.zenarmor.com/docs/support/reporting-bug
74
Zenarmor (Sensei) / Re: zenarmor / anti virus
« on: February 27, 2023, 09:23:57 am »
Hi greeno,
Enhanced DPI including the AV scanning is at the mid-term goals of the Zenarmor team:
https://www.sunnyvalley.io/roadmap
Enhanced DPI including the AV scanning is at the mid-term goals of the Zenarmor team:
https://www.sunnyvalley.io/roadmap
75
Zenarmor (Sensei) / Re: Is Zenarmor looking into the NETMAP bug?
« on: February 23, 2023, 06:37:28 pm »Hi DoBoY,
Firstly, thanks for your cooperation and all feedback you provided about the netmap case in Forum.
As Franco said in his post (https://forum.opnsense.org/index.php?topic=32114.msg157612#msg157612), igc driver is not compatible with netmap yet.
Did you try to use the emulated netmap mode? Also, please, ensure that vlan hw filtering is disabled.
Zenarmor, FreeBSD, and OPNsense teams have collaborated with Klara Systems to solve the VLAN/LAGG issues related to netmap.
They all have been actively working on it for several weeks and releasing patch kernels after completing their internal tests.
However, driver incompatibility problems, like igc, are not in the scope of this project.
After the current project is accomplished successfully, they are going to start a new project to improve emulated netmap mode.
The main aim of the second project is to solve incompatibility problems for all drivers. It is intended to be able to provide quick support to the new NICs as well.
Lastly, it is needless to say that the success of these projects mostly depends on community support, and feedback from community members, like you, is priceless.
Best