Skip to main content

Troubleshooting of Installation

Most frequently seen Zenarmor (Sensei) installation issues and their solutions are given below.

Can't find the plugin#

"I can't see os-sunnyvalley listed under OPNsense System โ†’ Firmware โ†’ Plugins."

This is because you are not on a supported platform. See this question.

Can't update the Zenarmor#

"Can not update Zenarmor to the latest version?"

Please make sure you're running the latest platform (OPNsense, FreeBSD, Linux) version. If your system is not up-to-date; chances are high that you can not use the latest Zenarmor release

Running Zenarmor along with Suricata#

When you use IPS & Zenarmor together, you can only use the WAN interface for Suricata.

Zenarmor will complain if you configured Suricata on one of its interfaces (even if Suricata is not running yet). Reason is they both use the same packet I/O interface and this interface allows only a single application to be active at any time.

Zenarmor 1.10 Figure 1. Zenarmor 1.10

Quick hack to bypass the hardware check:#

Edit

/usr/local/opnsense/scripts/OPNsense/Sensei/check_hardware.sh

with your favourite editor and add below line:

    CPU_SCORE=300000

It Should look like:

    if [ -f $CPU_SCORE_TMP ]; then       CPU_SCORE=$(cat $CPU_SCORE_TMP)        fi        CPU_SCORE=300000        if [ $CPU_SCORE -le 300000 ]; then        if [ $CPU_SCORE -ge 200000 ] && [ $NCPU -ge 8 ] ; then        CPU_PROPER="true"        else

Best Practices for Hardware Selection#

Zenarmor requires at least 2 GB of memory. Installer will not continue if you have less than 2 GB of RAM. We recommend at least 4 GB memory to have an improved experience.

Detailed Hardware requirements according to deployment size can be accessible from here

How do I uninstall the plugin?#

  • Navigate to Zenarmor โ†’ Configuration
  • Click on Uninstall tab
  • Click on Uninstall Zenarmor packet engine button.
  • Confirm that you want to proceed.