Adding an OPNsense Gateway
Expanding your organization's network is simple with Zenarmor’s Global Deployments feature. You can easily add new gateways directly from the dashboard, ensuring centralized management and full network protection across branch offices, virtual environments, and cloud infrastructures.
The one-time installation script allows you to securely register your OPNsense device as a gateway in your Zenarmor organization.
Before installing Zenarmor, ensure that your system meets the minimum hardware and system requirements for optimal performance. See Hardware Requirements for more information.
Since the Hardware Offloading feature is incompatible with netmap, ensure that hardware offloadings are disabled on your OPNsense node before installation.
By following the steps below, you can quickly add a new gateway to your organization.
-
Open your browser and navigate to Zenconsole.
-
Enter your username and password.
-
Once logged in, the left-hand sidebar will display the navigation menu.
-
Click Global Deployments on the left-hand sidebar.
-
Click + Add Gateway on the Global Deployments page.
Figure 1. Adding a Gateway
-
After clicking + Add Gateway, the Add a Gateway to Your Deployment panel opens.
In this panel:
- Select OPNsense as the target platform.
- A one-time installation script is automatically generated.
- The script includes a countdown timer indicating how long it remains valid.
Figure 2. One-time Installation Script
-
Select OPNsense as the target platform.
-
Copy the command and run it on the target device with administrator/root privileges.
-
The installer downloads the required components and completes Zenconsole registration.
---------------------------✓ SUCCESS ✓----------------------------
Installation finished successfully.
Registering your firewall gateway to Zenconsole Cloud Management Portal...
Vendor: ubuntu - Name: OPNsense 26.1 - Release: 24.04.4 - Ver: 24.04
---------------------------✓ SUCCESS ✓----------------------------
Registration to Zenconsole completed successfully.
Starting zenarmor-agent service now...
Zenarmor agent started, Zenconsole communication is online!
Please return to Zenconsole and complete the gateway provisioning process.
You should be able see your new gateway popping up under “Pending Gateways”.
After completing the initial configuration wizard,
your new gateway will be fully operational.
Within a few minutes, the device appears under Gateways in Zenconsole.
Now you must complete the gateway provisioning process in Zenconsole.
To install plugins in OPNsense, you must use an account with administrative privileges.
To enable Zenarmor protection, your gateway must be registered in Zenconsole.
Before starting the registration process, ensure that:
- An organization has already been created
- Identity and access management (IAM) configuration is completed
Organization features and endpoint support are only available on SSE and higher subscriptions.