English Forums > Zenarmor (Sensei)
Sensei on OPNsense - Application based filtering
mb:
@Mundan101, thank you for testing and giving feedback.
@marjohn56, thank you for pointing it out. It's been FAQ'd now :)
To better support the software and help people who are having issues, we've created a Gitlab project.
Please feel free to send any bug-reports & enhancement requests there:
https://gitlab.com/svn-community/opnsense-sensei-plugin
mimugmail:
@mb https://www.sunnyvalley.io/eastpect
What about TLS 1.3?
svn:
Hi @mimugmail,
I am Hayati from SVN team.
As you probably know that TLS 1.3 has been finalized in this month after 28 drafts. TLS 1.3 will obviously dominate over other versions and most of the Linux/Unix distros and libraries should be giving support for it, sooner or later. This is no different for us.
We've been closely watching its progress and discussions on the TLS working group during our whole product development. So we expected and prepared for it, and Sensei's TLS inspection has been designed by taking TLS 1.3 into account. We'll be able to provide TLS 1.3 inspection without downgrading TLS version.
We expect the transition to TLS 1.3 in the field will start with the popular tls libraries following with the applications that are dependent on them. This will take some time. We target to be among the first network security providers to support TLS 1.3 with its most potential.
I've uploaded a video to SVN youtube channel illustrating TLS Inspection in action: https://www.youtube.com/watch?v=krG_VKt2_qk
samsonmcnulty:
Thanks you guys! I don't have a large userbase but I'll definitely report anything I come across. So far I really like it. My main goal at the moment is to see how it plays with squid and caching. I'm also using suricata and clamAV. I noticed a mention of some issues with suricata but that you were aware and working on a fix.
Edit I've seen a few people on 200Mb connections but I haven't seen many at 1Gb. Are you planning to add traffic shaping abilities? based on category?
mb:
Hi @samsonmcnulty,
Thank you for testing & feedback. I'd very much appreciate if you can report any problems and/or issues you encounter.
Just like filtering based on application, shaping will also be there ;) Tentative plans is that we expect it to arrive in 2019.
Navigation
[0] Message Index
[#] Next page
[*] Previous page
Go to full version