OPNsense
  • Home
  • Help
  • Search
  • Login
  • Register

  • OPNsense Forum »
  • English Forums »
  • Zenarmor (Sensei) »
  • Sensei on OPNsense - Application based filtering
« previous next »
  • Print
Pages: 1 ... 44 45 [46] 47 48 ... 79

Author Topic: Sensei on OPNsense - Application based filtering  (Read 360707 times)

yeraycito

  • Full Member
  • ***
  • Posts: 202
  • Karma: 12
    • View Profile
Re: Sensei on OPNsense - Application based filtering
« Reply #675 on: December 16, 2019, 06:58:13 pm »
Other
Fix: Increase netmap buf_num value to accommodate both Suricata and Sensei on high-end servers

compatibility sensei - suricata low-end devices?
CPU Type Intel(R) Celeron(R) CPU J3160 @ 1.60GHz (4 cores)
Memory: 8GB
Logged

mb

  • Hero Member
  • *****
  • Posts: 911
  • Karma: 97
    • View Profile
    • Sunny Valley Networks
Re: Sensei on OPNsense - Application based filtering
« Reply #676 on: December 16, 2019, 07:01:03 pm »
Hi @yeraycito,

dev.netmap.buf_num value was low if both Sensei and Suricata was run on -even- different interfaces. This was due to some high-end network adapters having multiple Rx/Tx queues, and thus requiring more kernel memory.

Work on Suricata+Sensei running on the same interface is underway.
Logged

marcri

  • Jr. Member
  • **
  • Posts: 59
  • Karma: 5
    • View Profile
    • https://www.risse-it.services/
Re: Sensei on OPNsense - Application based filtering
« Reply #677 on: December 16, 2019, 07:07:19 pm »
I can't deactivate "US-East" Cloud-Node
Machine Version:    1.2.3
UI Version:    19.12.14
Database Version:    1.2.0
Logged

mb

  • Hero Member
  • *****
  • Posts: 911
  • Karma: 97
    • View Profile
    • Sunny Valley Networks
Re: Sensei on OPNsense - Application based filtering
« Reply #678 on: December 16, 2019, 07:16:19 pm »
Hi @marcri, sensei needs at least two cloud nodes. You should be able to select any other node as the second one. Can you confirm that this is the case? If not let's check it out.
Logged

marcri

  • Jr. Member
  • **
  • Posts: 59
  • Karma: 5
    • View Profile
    • https://www.risse-it.services/
Re: Sensei on OPNsense - Application based filtering
« Reply #679 on: December 16, 2019, 07:36:25 pm »
Quote from: mb on December 16, 2019, 07:16:19 pm
Hi @marcri, sensei needs at least two cloud nodes. You should be able to select any other node as the second one. Can you confirm that this is the case? If not let's check it out.
Hi @mb,  selecting an other second node works.
Thanks
Logged

mb

  • Hero Member
  • *****
  • Posts: 911
  • Karma: 97
    • View Profile
    • Sunny Valley Networks
Re: Sensei on OPNsense - Application based filtering
« Reply #680 on: December 16, 2019, 07:37:54 pm »
@marcri, that's good to hear. A side note: we'll launch another Europe node in the coming year.
Logged

Kruemel

  • Newbie
  • *
  • Posts: 33
  • Karma: 1
    • View Profile
Re: Sensei on OPNsense - Application based filtering
« Reply #681 on: December 17, 2019, 11:50:01 pm »
Hi,

just wondering: I setup sensei to block advertisments. Sometimes I get the page:

#################
The page you are trying to access is restricted by your organization.

Reason:   Advertisements site access
Client IP:   192.168.1.30
Remote IP:   91.215.103.xxx
Application:   Web Browsing
Application Category:   Web Browsing
Web Category:   Advertisements
#################

And sometimes the connection is just reset: ERR_CONNECTION_CLOSED

Why is this?

Thanks and best regards
Marco
Logged

mb

  • Hero Member
  • *****
  • Posts: 911
  • Karma: 97
    • View Profile
    • Sunny Valley Networks
Re: Sensei on OPNsense - Application based filtering
« Reply #682 on: December 18, 2019, 01:26:07 am »
Hi Marco, many thanks for trying sensei.

This happens if the blocked connection is not speaking HTTP. Sensei displays Landing Page only if it is an HTTP connection.

For HTTPS connections, since TLS comes early and client and server does not yet speak HTTP, we cannot display the landing page (behavior to change with TLS inspection feature, see below)

3. For Application control, we do not display since it might be a connection which does not speak HTTP.

For HTTPS connections, block pages will be available along with TLS inspection feature.

For more FAQ, see: https://help.sunnyvalley.io/hc/en-us/articles/360025100613-FAQ
Logged

opnsenseuser

  • Sr. Member
  • ****
  • Posts: 381
  • Karma: 25
    • View Profile
Re: Sensei on OPNsense - Application based filtering
« Reply #683 on: December 18, 2019, 04:36:33 pm »
@mb

Today i did a opnsense firmware update to 19.7.8

After this update i can´t start monogdb anymore.

I deleted the report data and even reinstalled the sensei package and did a restart of opnsense but had no luck!

What can i do?

See my screenshot!!

thx
regards rené

Logged
Supermicro A2SDi-4C-HLN4F
Team Rebellion Member (sidebar / themes: tukan, cicada & vicuna)

opnsenseuser

  • Sr. Member
  • ****
  • Posts: 381
  • Karma: 25
    • View Profile
Re: Sensei on OPNsense - Application based filtering
« Reply #684 on: December 18, 2019, 08:18:52 pm »
Quote from: opnsenseuser on December 18, 2019, 04:36:33 pm
@mb

Today i did a opnsense firmware update to 19.7.8

After this update i can´t start monogdb anymore.

I deleted the report data and even reinstalled the sensei package and did a restart of opnsense but had no luck!

What can i do?

See my screenshot!!

thx
regards rené

don´t know where the problem is!

« Last Edit: December 18, 2019, 08:22:30 pm by opnsenseuser »
Logged
Supermicro A2SDi-4C-HLN4F
Team Rebellion Member (sidebar / themes: tukan, cicada & vicuna)

mayo

  • Jr. Member
  • **
  • Posts: 72
  • Karma: 4
    • View Profile
Re: Sensei on OPNsense - Application based filtering
« Reply #685 on: December 18, 2019, 08:32:01 pm »
Same for me. Decided to uninstall and not install anymore.

Quote from: opnsenseuser on December 18, 2019, 08:18:52 pm
Quote from: opnsenseuser on December 18, 2019, 04:36:33 pm
@mb

Today i did a opnsense firmware update to 19.7.8

After this update i can´t start monogdb anymore.

I deleted the report data and even reinstalled the sensei package and did a restart of opnsense but had no luck!

What can i do?

See my screenshot!!

thx
regards rené

don´t know where the problem is!
« Last Edit: December 18, 2019, 08:33:43 pm by mayo »
Logged

Antaris

  • Full Member
  • ***
  • Posts: 145
  • Karma: 13
    • View Profile
    • EVOTEK ltd.
Re: Sensei on OPNsense - Application based filtering
« Reply #686 on: December 18, 2019, 08:54:58 pm »
Quote from: mayo on December 18, 2019, 08:32:01 pm
Same for me. Decided to uninstall and not install anymore.

Quote from: opnsenseuser on December 18, 2019, 08:18:52 pm
Quote from: opnsenseuser on December 18, 2019, 04:36:33 pm
@mb

Today i did a opnsense firmware update to 19.7.8

After this update i can´t start monogdb anymore.

I deleted the report data and even reinstalled the sensei package and did a restart of opnsense but had no luck!

What can i do?

See my screenshot!!

thx
regards rené

don´t know where the problem is!
And the relation to the problem of this thred is??
Can you be more specific why you abandone Sensei?
Logged
Proxmox enthusiast @home, bare metal @work.

mayo

  • Jr. Member
  • **
  • Posts: 72
  • Karma: 4
    • View Profile
Re: Sensei on OPNsense - Application based filtering
« Reply #687 on: December 18, 2019, 09:00:06 pm »
Simple: every Opnsense update Sensei stops working.
Quote from: Antaris on December 18, 2019, 08:54:58 pm
Quote from: mayo on December 18, 2019, 08:32:01 pm
Same for me. Decided to uninstall and not install anymore.

Quote from: opnsenseuser on December 18, 2019, 08:18:52 pm
Quote from: opnsenseuser on December 18, 2019, 04:36:33 pm
@mb

Today i did a opnsense firmware update to 19.7.8

After this update i can´t start monogdb anymore.

I deleted the report data and even reinstalled the sensei package and did a restart of opnsense but had no luck!

What can i do?

See my screenshot!!

thx
regards rené

don´t know where the problem is!
And the relation to the problem of this thred is??
Can you be more specific why you abandone Sensei?
Logged

Antaris

  • Full Member
  • ***
  • Posts: 145
  • Karma: 13
    • View Profile
    • EVOTEK ltd.
Re: Sensei on OPNsense - Application based filtering
« Reply #688 on: December 18, 2019, 09:28:31 pm »
Quote from: mayo on December 18, 2019, 09:00:06 pm
Simple: every Opnsense update Sensei stops working.
Sensei is relatively new addon to OPNsense. Monogdb in it is even newer. I think we need more patience here...
Logged
Proxmox enthusiast @home, bare metal @work.

mb

  • Hero Member
  • *****
  • Posts: 911
  • Karma: 97
    • View Profile
    • Sunny Valley Networks
Re: Sensei on OPNsense - Application based filtering
« Reply #689 on: December 18, 2019, 09:35:33 pm »
Ok, I think I have an idea about what's going on:

19.7.8 update seems to remove mongodb40 and dependencies.

Code: [Select]
=====
Message from opnsense-19.7.8:

--
Roar!
Checking integrity... done (0 conflicting)
Deinstallation has been requested for the following 3 packages:

Installed packages to be REMOVED:
boost-libs-1.72.0
icu-65.1,1
snappy-1.1.6_1

Number of packages to be removed: 3

Update: Problems is related to mongodb package. Elasticsearch is fine. We're shipping new mongodb40 packages momentarily. Will update the thread.
« Last Edit: December 18, 2019, 10:20:59 pm by mb »
Logged

  • Print
Pages: 1 ... 44 45 [46] 47 48 ... 79
« previous next »
  • OPNsense Forum »
  • English Forums »
  • Zenarmor (Sensei) »
  • Sensei on OPNsense - Application based filtering
 

OPNsense is an OSS project © Deciso B.V. 2015 - 2023 All rights reserved
  • SMF 2.0.19 | SMF © 2021, Simple Machines
    Privacy Policy
    | XHTML | RSS | WAP2