Web UI Initial Configuration
Regardless of the installation method you chose, you will need to go through the initial configuration wizard before you may start using Zenarmor (Sensei).
To start your Initial Configuration Wizard
:
- Log in to your OPNsense web interface
- Click
Zenarmor
from the left menu
- Click on the
Dashboard
sub-menu to open the configuration wizard
1- Welcome
- Accept the
Terms of Service
andPrivacy Policy
by clicking on the checkbox.
Figure 1: Accepting Zenarmor Terms of Service on Initial Configuration Wizard
- Click the
Proceed
button to continue to theHardware Check
section.
2- Hardware Check
Your hardware will be analyzed to ensure it meets the minimum requirements. You will receive one of the following responses: compatible hardware, low-end hardware, incompatible hardware. The setup will not continue if you have incompatible hardware.
Figure 2: Compatible hardware
Figure 3: Low-end hardware
Figure 4: Incompatible hardware
- Click the
Next
button to continue to theReporting Database
section.
3- Reporting Database
- Select the database you wish to use for reporting. High-end systems will have 4 options, while low-end systems only have 3 options.
info
Zenarmor offers the following Database deployment options:
- Local ElasticSearch DB
- Remote ElasticSearch DB
- MongoDB Database
- SQLite Database
If you wish to use a remote ElasticSearch database, you must choose it now since you cannot change this after the initial configuration wizard has been completed.
Figure 5: High-end reporting database
Figure 6: Low-end reporting database
If you select Use a Remote Elasticsearch Database
, you will be prompted to enter the URL
, username
, and password
.
If you have SOHO or higher Zenarmor paid subscription, we recommend that you install your license key before proceeding with the initial configuration wizard since this will activate a feature that will enable you to have central reporting for many firewalls from a single Elasticsearch instance. Otherwise, only a single remote ES instance can be used with a single firewall.
Figure 7: Remote Elasticsearch reporting database
- Click the
Install Database & Proceed
button to install the local database if one is chosen and to continue to theInterface Selection
section.
4- Interface Selection
Figure 8: Interface Selection-1
- Select the Ethernet Interface(s) to protect. To do so, click on an interface and use the right/left arrow buttons to move it to the protected/unprotected interfaces combo box.
For detailed information on Deployment Modes
, see here.
Figure 9: Interface Selection-2
- Click
Next
to continue to theCloud Reputation
section.
5- Cloud Reputation
The Cloud Threat Intelligence data is queried in real-time when any connections are made through your network. This capability enables Zenarmor to respond to malware and wireless outbreaks in real-time and very quickly.
The engine processes the request, queries the Sunny Valley Network (SVN) Cloud
in real-time, and decides whether it will be blocked or allowed.
info
Zenarmor checks against 140+ million websites under 120+ categories in milliseconds.
Cloud Threat Intel settings let you:
- Enable/Disable the
Cloud Reputation & Web Categorization
engine
- Set local domain name you wish to be excluded from cloud queries
- Select the fastest Cloud Reputation Servers which are used for queries
Figure 10: Cloud Reputation
- Click
Next
to continue to theZenarmor CLI
section.
6- Updates & Health Check
Zenarmor uses the OPNsense package system to deliver its updates. You may configure how you prefer to receive your Zenarmor updates.
- Check for Updates Automatically: Checks automatically for the updates and creates a notification on the Zenarmor
Status
page.
- Automatically Update Databases and Threat Intelligence Data: Checks automatically for the updates and creates a notification on the Zenarmor
Status
page.
- Enable Generation of Support Data: If enabled, Zenarmor collects supporting data during unusual events and crashes. You can share this data while opening a ticket with us.
- Max Swap Utilization: You may specify how much swap space Zenarmor may utilize when the system is low on memory. It is recommended that you do not set this value too high. Otherwise, system performance may suffer.
- Health Check: If enabled,
Health Check
monitors the system's memory, CPU, disk usage and core services if they're working correctly, and raises alerts if anything goes wrong. "Health Check" also stops the relevant services if they're consuming excessive system resources.
- Help Sunny Valley Improve Its Products and Services: If enabled, general system information is submitted to Sunny Valley to help improve the future development of Zenarmor.
Figure 11: Updates & Health Check
- Click
Next
to continue to theDeployment Size
section.
7- Deployment Size
Zenarmor may support up to 1,000 concurrent users on an average PC. You can set your Zenarmor installation`s capacity in this section.
You may see detailed information about suggested hardware at Getting Started --> Hardware Requirements
Figure 12: Deployment Size
- Click
Next
to continue to theFinish
section.
Finish
You may enter your email address if you wish to subscribe to the Sunny Valley email list to stay up to date on the latest news.
Figure 12: Finish
- Click the
Finish
button to save your initial configuration data and start using Zenarmor.
Hands-on Video
Here is a video that will guide you through the steps of the Zenarmor® installation and initial configuration process on OPNsense: