Skip to main content

Installing Zenarmor® (Sensei) NGFW plugin on OPNsense Web UI

OPNsense is a great open-source firewall. Maintaining a regular updates policy, being very reliable and providing quite many features (VPN, Intrusion Prevention System, Open Source Threat Intelligence, etc), it's a super viable alternative to commercial firewalls out there.

Complementing this legacy, Sunny Valley Networks has created Zenarmor® (Sensei), to add Next-Generation Firewall features to the firewall.

The installation of Zenarmor is straightforward and speedy. The OPNsense web UI can be used to install Zenarmor.

Zenarmor installation via OPNsense web UI has 2 main steps.

For The Impatient

Experienced OPNsense firewall admininistrators or impatients may quickly start to use next-generation firewall features by following the steps given below.

1. Install the os-sunnyvalley Vendor Repository plugin.

2. Install the os-sensei Zenarmor Next Generation Firewall plugin.

For Meticuolus Administrators or Newcomers

Detailed Zenarmor installation is given below for meticuolus administrators or newcomers.

Vendor Repository plugin installation

To install the Vendor Repository plugin, follow the steps below:

  1. Login your OPNsense Web GUI using an account with administrative access such as root.

  2. Navigate to System -> Firmware -> Plugins.

  3. Type os-sunnyvalley in the search field to find the Vendor Repository for Zenarmor Next Generation Firewall Extensions.

    Installing Vendor Repository for Zenarmor Next Generation Firewall Extensions

    Figure 1: Installing Vendor Repository for Zenarmor Next Generation Firewall Extensions

  4. Click on the + icon next to os-sunnyvalley to install the Vendor Repository plugin. Then you will be redirected to the Update menu tab.

    os-sunnyvalley Vendor Repository for Zenarmor is installed

    Figure 2: os-sunnyvalley Vendor Repository for Zenarmor is installed

  5. Click on the Plugins tab. You should see that os-sunnyvalley Vendor Repository plugin is installed. If you cannot see the newly installed plugin, please refresh your web UI with the F5 button.

    installed and available OPNsense plugins

    Figure 3: Installed and available OPNsense plugins

Zenarmor Next Generation Firewall plugin installation

To install the Zenarmor Next Generation Firewall plugin , follow the steps below:

  1. Type os-sensei in the search field on Plugins tab to find the Zenarmor Next Generation Firewall plugin for OPNsense.

    Installing Zenarmor Next Generation Firewall Extensions for OPNsense

    Figure 4: Installing Zenarmor Next Generation Firewall Extensions for OPNsense

  2. Click the + icon next to os-sensei to install the plugin.

    Third Party Software notification message

    Figure 5: Third Party Software notification message

  3. Click Install to proceed to the plugin installation when Third Party Software notification message is displayed.

  4. After installing Zenarmor, you should see the Zenarmor-Sensei menu in the left sidebar of the OPNsense web interface.

    Initial Configuration Wizard for Zenarmor

    Figure 6: Initial Configuration Wizard for Zenarmor

  1. You will need to complete the Initial Configuration Wizard for Zenarmor to be fully operational. For more information about initial configuration of Zenarmor on OPNsense, please refer to the official documentation.

Although the preferred method of Zenarmor installation is the web interface, you can also install the plugin using the command line interface via SSH or direct system access. For more information, please refer to Installing Zenarmor on OPNsense via Command Line.

Here is a video that will guide you through the steps of the Zenarmor® installation and initial configuration process on OPNsense: