Installing Zenarmor® (Sensei) NGFW plugin on OPNsense Web UI
OPNsense is a great open-source firewall. Maintaining a regular updates policy, being very reliable and providing quite many features (VPN, Intrusion Prevention System, Open Source Threat Intelligence, etc), it's a super viable alternative to commercial firewalls out there.
Complementing this legacy, Sunny Valley Networks has created Zenarmor® (Sensei), to add Next-Generation Firewall features to the firewall.
The installation of Zenarmor is straightforward and speedy. The OPNsense web UI can be used to install Zenarmor.
Zenarmor installation via OPNsense web UI has 2 main steps.
For The Impatient
Experienced OPNsense firewall admininistrators or impatients may quickly start to use next-generation firewall features by following the steps given below.
1. Install the
os-sunnyvalley Vendor Repository plugin.
2. Install the
os-sensei Zenarmor Next Generation Firewall plugin.
For Meticuolus Administrators or Newcomers
Detailed Zenarmor installation is given below for meticuolus administrators or newcomers.
Vendor Repository plugin installation
To install the Vendor Repository plugin, follow the steps below:
Login your OPNsense Web GUI using an account with administrative access such as
os-sunnyvalleyin the search field to find the Vendor Repository for Zenarmor Next Generation Firewall Extensions.
Figure 1: Installing Vendor Repository for Zenarmor Next Generation Firewall Extensions
Click on the
+icon next to
os-sunnyvalleyto install the Vendor Repository plugin. Then you will be redirected to the Update menu tab.
os-sunnyvalleyVendor Repository for Zenarmor is installed
Click on the
Pluginstab. You should see that
os-sunnyvalleyVendor Repository plugin is installed. If you cannot see the newly installed plugin, please refresh your web UI with the F5 button.
Figure 3: Installed and available OPNsense plugins
Zenarmor Next Generation Firewall plugin installation
To install the Zenarmor Next Generation Firewall plugin , follow the steps below:
os-senseiin the search field on
Pluginstab to find the Zenarmor Next Generation Firewall plugin for OPNsense.
Figure 4: Installing Zenarmor Next Generation Firewall Extensions for OPNsense
+icon next to
os-senseito install the plugin.
Figure 5: Third Party Software notification message
Installto proceed to the plugin installation when Third Party Software notification message is displayed.
Zenarmor, you should see the
Zenarmor-Senseimenu in the left sidebar of the OPNsense web interface.
Figure 6: Initial Configuration Wizard for Zenarmor
- You will need to complete the
Initial Configuration Wizardfor Zenarmor to be fully operational. For more information about initial configuration of Zenarmor on OPNsense, please refer to the official documentation.
Although the preferred method of Zenarmor installation is the web interface, you can also install the plugin using the command line interface via SSH or direct system access. For more information, please refer to Installing Zenarmor on OPNsense via Command Line.
Here is a video that will guide you through the steps of the Zenarmor® installation and initial configuration process on OPNsense: