Troubleshooting of Installation
Most frequently seen Zenarmor installation issues and their solutions are given below.
Can't find the plugin
"I can't see os-sunnyvalley
listed under OPNsense System
→ Firmware
→ Plugins
."
This is because you are not on a supported platform. See this question.
Can't update the Zenarmor
"Can not update Zenarmor to the latest version?"
Please make sure you're running the latest platform (OPNsense, FreeBSD, Linux) version. If your system is not up-to-date; chances are high that you can not use the latest Zenarmor release
Running Zenarmor along with Suricata
When you use IPS & Zenarmor together, you can only use the WAN interface for Suricata.
Zenarmor will complain if you configured Suricata on one of its interfaces (even if Suricata is not running yet). Reason is they both use the same packet I/O interface and this interface allows only a single application to be active at any time.
Quick hack to bypass the hardware check:
Edit
/usr/local/opnsense/scripts/OPNsense/Sensei/check_hardware.sh
with your favourite editor and add below line:
CPU_SCORE=300000
It Should look like:
if [ -f $CPU_SCORE_TMP ]; then
CPU_SCORE=$(cat $CPU_SCORE_TMP)
fi
CPU_SCORE=300000
if [ $CPU_SCORE -le 300000 ]; then
if [ $CPU_SCORE -ge 200000 ] && [ $NCPU -ge 8 ] ; then
CPU_PROPER="true"
else
Best Practices for Hardware Selection
Zenarmor requires at least 2 GB of memory. Installer will not continue if you have less than 2 GB of RAM. We recommend at least 4 GB memory to have an improved experience.
Detailed Hardware requirements according to deployment size can be accessible from here
How do I uninstall the plugin?
-
Navigate to
Zenarmor
→Configuration
-
Click on
Uninstall
tab -
Click on
Uninstall Zenarmor packet engine
button. -
Confirm that you want to proceed.