Installing Sensei is straight-forward and easy. You just run a one-liner shell command to download the installer and run it. That's it, everything then gets taken care by Sensei.
Sensei Community Edition is forever free-of-charge. We strongly recommend you register to keep in touch with updates and new features. You can register here: https://www.sunnyvalley.io/sensei
In this blog post, we're going to show how you can install Sensei Next Generation FW plugin on OPNsense Next Generation Firewall. First of all you have to install OPNsense and have enough system resources for Sensei next generation DPI.
If you have not install OPNsense yet, please click this link to install OPNsense: https://www.sunnyvalley.io/post/opnsense-download-hardware-setup-default-user-password
If you have a installed OPNsense system, you need to check it out your system resources in order to install Sensei to be ensure as enough as to install.
To ensure your hardware is enough to work with Sensei please check CPU, RAM, CPU, disk space and bandwidth as follow:
This process is quite straight-forward and easy. Basically you don’t have to use ssh to connect and install Sensei. You can install Sensei via OPNsense web UI.
You can install with following instructions:
- Go to your OPNsense web UI and login to it as a root user. And after that you can follow this path. On the left pane of the page, you can click System --> Firmware --> Plugins
- After the opening of the Plugins page, you can view the installed and not installed plugins. You can search with Ctrl + F key combination with the “os-sunnyvalley” keyword then press the enter button to find out the Sensei plugin components.
- After that you should click the plus “+” button, than you will redirect to the Update menu tab.
4. After the installation you can see the Sensei plugin in the Plugin menu bar. If you cannot see Sensei plugin, please refresh your web UI with F5 button.
5. You also shoud install “os-sensei”. You can find out with Ctrl + F button combination, and you can click the plus “+” button to install it.
6. If you couldn’t see Sensei menu you may refresh web UI with the F5 button to verify installation.
7. After verifying the installation, you can follow the initial configuration simple step to finish Sensei install.
Initial Configuration Wizard
To start using Sensei, first, you need to go through the Wizard which will guide you to start with the best initial configuration.
To start your "Initial Configuration Wizard";
- Log in to your OPNsense Web UI,
- Click Sensei from the left menu,
- Click on the Dashboard sub-menu. It will open up the Wizard.
- Accept the End User License Agreement (Scroll & read the terms to get to the next button).
- Click "Next" and get to the "Interface Selection" section.
2- Interface Selection
- Select the Ethernet Interfaces to protect. To do that, click on an interface and use the right/left arrow buttons to move it to protected/unprotected interfaces combo box.
- Click "Next" and get to the "Cloud Reputation" section.
3- Cloud Reputation
The Cloud Threat Intelligence data is queried real time when anyone makes a connection through your network. It enables us to respond to malware and wireless outbreaks in real time and very fast.
The engine processes the request, queries to "SVN Cloud" in real-time and decides whether it will be blocked or allowed. We check against 140+ Million Websites, under 120+ categories in milliseconds.
Cloud Threat Intel settings let you;
- Enable/Disable the cloud reputation & web categorization engine
- Set local domain settings to be excluded from cloud queries
4- Sensei CLI (Security)
- Set your TCP Service password. This password protects the command line based CLI access to the packet engine. It is highly recommended to set this with a secure one.
- Click "Next" and get to the "Updates" .
5- Updates & Health Check
Sensei uses OPNsense package system to deliver its updates. Configure the way you receive your Sensei updates as you feel convenient.
- Self Health Check: If enabled, "Self Health Check" monitors the system's memory, CPU, disk usage and core services if they're working correctly, and raises alerts if anything goes wrong. Self Health Check also stops the relevant services if they're consuming excessive system resources.
- Check for Updates Automatically: Checks automatically for the updates and creates a notification on the status page.
- Update Databases and Threat Intelligence Data Automatically: Checks automatically for the updates and creates a notification on the status page .
- Enable Generation of Support Data: If enabled, Sensei collects supporting data during unusual events and crashes. You can share this data while opening a ticket with us.
6- Deployment Size
Sensei supports up to 1000 concurrent users on an everyday PC. You can set your Sensei installation's capacity here.
You can get detailed info about suggested hardware on Getting Started > Hardware Requirements
Click the Finish button to save your initial configuration data and start using Sensei.
Depending on the speed of your computer and your Internet connection, it might take 2-4 minutes to complete the whole installation.