Skip to main content

Zenarmor Software Updates - Release Notes

This section contains information about past and present release of Zenarmor. This includes release notes and detailed version information.

1.17​

This is a major software release including new features, improvements and bug fixes.

1.17.3 - May 20, 2024​

This is a maintenance software release including new features, improvements and bug fixes.

OPNsense Plug-in

  • Bug-Fix: The Python compatibility issue that prevents Zenarmor Elasticsearch database installation on OPNsense version 24.1.7 has been resolved

1.17.2 - May 14, 2024​

This is a maintenance software release including new features, improvements and bug fixes.

Device Identification

  • Improvement: A notification message is not displayed when Zenarmor detects devices with public IPv6 addresses but is displayed only for IPv4 addresses on the LAN interface, improving user experience.
  • Improvement: The correct identification of all Bogon IP address ranges has been achieved, enabling accurate device identification on the LAN interface.
  • Improvement: When an existing device is detected on another protected interface, its trust setting is appropriately engaged, improving both dependability and user experience.

Policy & Filtering

  • New Feature: The Cloud Access Security Broker (CASB) feature has been added to Zenarmor, enabling organizations to enforce security policies and monitor cloud application usage for improved data protection. This feature enables firewall administrators to enforce security policies uniformly and provides visibility into client activities. CASB enables the administrator to manage specific cloud application components, thereby preventing data loss and potential infection from malicious attachments. It safeguards sensitive information against unauthorized access and monitors all cloud services and applications, enabling administrators to detect and eliminate threats rapidly.

  • Improvement: Users can now enable or disable the Block Notification Page feature.

  • Improvement: Users can now easily enable or disable the Syn Flood Detection feature by navigating to the "Intrusion Detection & Prevention" page under the firewall Settings menu.

  • Bug-fix: The issue causing the application to crash when the syn cache buffer is full has been resolved enhancing stability.

  • Bug-Fix: The issue preventing the Block Notification Page from being displayed when the session is blocked according to VLAN ID has been fixed, ensuring consistent and accurate notification delivery to users.

  • Bug-Fix: The issue with the landing page appearing in the advertisements category has been resolved.

Configuration

  • Improvement: Backup operation now includes the private key file of the self-signed Zenarmor certificate, which is especially important for TLS inspection users, allowing it to be restored after firewall reinstallation, enhancing reliability.

  • Improvement: Restore backup operation now offers the Exclude CA certificate option providing configuration flexibility and control over certificate management.

Licensing

  • Improvement: The number of purchased Home Edition has been limited to 1 for each customer.

Zenconsole:

  • Improvement: Zenconsole now allows users to change their monthly subscriptions to annual subscriptions by themselves, improving user experience.
  • Bug-Fix: The issue that was delivering the error message "database disk image is malformed" and preventing users from accessing the firewall dashboard has been resolved.
  • Bug-Fix: The issue that was preventing the user from receiving notification emails when a firewall is shared has been resolved.
  • Bug-Fix: The issue causing an empty Live Sessions Explorer to appear when users click on the number of identified threats link in the Threats Summary pane on the firewall dashboard has been fixed.

Reporting

  • Improvement: Proxy sessions now are not tagged as Security category in Threats and Blocks Reports, instead classified as a web category in Web Reports.
  • Bug-Fix: The issue that was restricting users from utilizing specific filters to exclude certain data from their reports or analyzing the data in more detail, since the "Filter", "Exclude," and "Drill-down" options were not active for custom report views on all reporting databases, has been fixed.
  • Bug-Fix: The issues causing the domain name section of a hostname field to be displayed incomplete in the Device Details window, for example displaying mypc.home.ar instead of mypc.home.arp has been resolved.
  • Bug-Fix: The issue that was delivering the error message "Cannot use a scalar value as an array" when a filter is applied for the Block status field of a Live Session Explorer on MongoDB reporting database has been resolved.
  • Bug-Fix: Users can now properly view the relevant traffic data based on the selected context via Live Sessions Explorer after applying a filter for Blocks, DNS, and Threat Reports. The resolved issue was displaying all sessions even though users want to view only the related traffic by drilling down via Blocks, DNS, or Threats Reports.
  • Bug-Fix: The issue that was preventing the correct sorting of Live Sessions Explorer using the "Start Time" column on SQLite and Elasticsearch reporting databases has been resolved.
  • Bug-Fix: The issue that was resulting in an incorrect count of detected threats in the Threats Summary section on the firewall dashboard, after a reset to factory settings on the Elasticsearch database, has been resolved.
  • Bug-Fix: The issue that was resulting in the incorrect display of traffic flow directions in Live Sessions Explorer for sessions that were initiated from one firewall interface and reached their destination on another firewall interface has been successfully resolved.
  • Bug-Fix: The issue with "Enable/Disable TLS verification" option and scheduled reports email delivery service has been resolved.
  • Bug-Fix: The issue that was causing the Block button in the Web and TLS Live Session Explorers to malfunction has been fixed.

Threat Intelligence

  • Improvement: Experimental Global CTI feature has been temporarily removed from the application and will be available only for Business and SSE subscriptions in the future releases.
  • Bug-Fix: Stability and dependability have been improved by the fix of the global CTI client problem that was causing the application to crash when the internet connection was dropped.
  • Bug-Fix: The problem that was limiting the functionality of the "Cloud Cache Clear" option, which is responsible for promptly cleaning the threat intelligence cache on the firewall, has been resolved.
  • Bug-Fix: The problem that was causing the program to crash when the firewall could not resolve the hostname of the global cyber threat intelligence server has been fixed, improving the stability and dependability.

1.17.1 - April 24, 2024​

This is a maintenance software release including new features, improvements and bug fixes.

Policy and Filtering

  • Bug-Fix: The issue causing the Zenarmor application to crash when a policy configuration includes a username has been fixed, ensuring stable operation and reliability.
  • Bug-Fix: The issue causing a website with an allowed custom web category to be blocked while its predefined web category is blocked has been resolved.

1.17 - April 22, 2024​

This is a major software release including new features, improvements and bug fixes.

Policy and Filtering

  • New Feature: Zenarmor has now full TLS inspection capability enabling comprehensive analysis and monitoring of encrypted traffic for enhanced security. By decrypting and inspecting incoming and outgoing TLS traffic, the Full TLS inspection feature of Zenarmor enables robust threat detection and prevention. This process strengthens network defense by allowing for comprehensive monitoring, threat identification, and control over encrypted communications, ensuring that malicious content hiding within encrypted data flows doesn't bypass security measures.

  • New Feature: TCP SYN flood attack detection and prevention mechanism is now available, enhancing security and providing improved protection against DDoS attacks.

  • New Feature: IPv6 CIDR format is now supported, allowing users to add IPv6 addresses in CIDR format to both policy configuration and the Exempted IP/Network Address option.

  • New Feature: Users can quickly assign/unassign a device to/from an existing policy, or view assigned policies that affect the selected device via the Devices page. This feature enhances user experience, providing better visibility and management options.

  • New Feature: URL and URL regex-based blocking feature is now available for SSE subscription, empowering users to enforce tighter security measures by blocking access to specific websites or patterns within URLs, keeping their clients secure from known threats and unauthorized access.

  • Improvement: Blocking Proxy services has been moved from Security Controls to Web Controls.

  • Improvement: Block Notification Pages are now enabled by default by removing this enable/disable option from Block Notification Page settings, streamlining configuration options for administrators.

  • Improvement: Zenarmor can now allow space characters to be used in usernames, ensuring proper handling of user-based filtering functionality.

  • Improvement: The proper configuration of custom web controls on the default policy after license expiration is ensured, enhancing security control.

  • Improvement: SMTP over TLS traffic is now identified as "Secure Email Access via IMAP", "Secure Email Access via POP3" and "Secure Email Transport", enhancing the accuracy of application categorization and security.

  • Improvement: Enhanced security enforcement by automatically blocking newly defined apps when an application category is fully blocked, ensuring consistent policy application.

  • Bug-Fix: The issue causing Apple mDNS network traffic to be incorrectly identified as Malformed DNS traffic has been resolved, ensuring accurate packet classification and traffic handling.

  • Bug-Fix: The issue preventing the Block Notification Page from being displayed when the user chooses only protected interfaces and there is no policy setting defined has been fixed, ensuring consistent and accurate notification delivery to users.

  • Bug-Fix: The issue causing the Device name to be displayed as device () for multicast traffic in reports when the WAN interface is protected has been resolved, improved reporting clarity.

Device Identification

  • Improvement: A notification message is displayed if Zenarmor detects many devices with public IP addresses due to an interface tag misconfiguration in deployment settings, enhancing user awareness and preventing misconfigurations.

  • Improvement: Zenarmor now does not identify special MAC addresses, like 0202020202 and 06060606 as a new device, ensuring comprehensive device recognition.

  • Improvement: Random MAC addresses are now purged daily, ensuring a cleaner and more accurate device list.

  • Improvement: The device management feature is enhanced by enabling users to view and add child devices directly from parent device details, providing a comprehensive overview of device relationships and improving user experience.

  • Bug-Fix: The issue where Exempted VLANs & Networks was not excluded from device identification has been fixed, ensuring accurate device classification and policy enforcement.

Zenconsole

  • New Feature: Office 365 Single Sign-On (SSO) support is now available, providing users with streamlined authentication and access management.
  • Improvement: Google and Office 365 SSO are now available for users who try to access directly their firewalls via the https://dash.zenarmor.com/firewalls page, improving user experience and enhancing user authentication options for increased security.
  • Improvement: A warning message is now displayed for unsynchronized central firewall policies, enhancing reliability and ensuring consistent policy enforcement across devices.
  • Improvement: Users who register to Zenconsole with SSO must now set a password before removing their accounts properly and securely, ensuring proper account management functionality.

Reporting

  • New Feature: Users now can apply a filter for both traffic flow directions (inbound/outbound) in reports, ensuring more precise traffic analysis and management.

  • New Feature: Log rotation support is now available for MongoDB.

  • New Feature: Live Sessions can now be filtered by Encryption type, allowing users to view which connections are inspected, plain or TLS-encrypted, for enhanced analysis.

  • Improvement: Unsupported metrics, Volume, and Packet, are removed from table reports, enhancing accuracy and consistency between charts and tables.

  • Improvement: Users can now view the JA3 Fingerprint field in TLS session details, enhancing visibility.

  • Improvement: The Device Category Name is now displayed instead of Device Category ID in Reports/Live Sessions, improving user experience and visibility.

  • Improvement: Users can now conveniently access the Connections Live Sessions report for a selected device via the Devices page, improving user experience.

  • Improvement: The throughput of an interface can be hidden or shown by clicking on the interface names in the traffic throughput graph pane on the dashboard.

  • Improvement: A confirmation is now requested from the user if the data path has old data for removal, during Elasticsearch DB installation, ensuring user awareness and preventing accidental data loss.

  • Improvement: Elasticsearch v8 support is now available, offering users the latest features and optimizations for faster and more reliable reporting data storage and retrieval.

  • Improvement: Ensured that chart order was considered in scheduled reports, providing users with more organized and visually appealing reports.

Licensing

  • New Feature: A new edition is available now, SSE, providing users with cutting-edge security features and flexibility for selecting a subscription depending on their needs.
  • Improvement: The pool licensing option is now available for Business Editions, providing flexibility with a single activation key for all firewalls in enterprise infrastructure.

OPNsense Plug-in

  • Improvement: Free users are empowered with greater flexibility by allowing deployment size selection via the initial configuration wizard and configuration page, ensuring that users can tailor their setups to their specific needs and resources.
  • Bug-Fix: The issue preventing users from importing their own CA certificates with EC private key has been resolved, ensuring smooth certificate management processes.
  • Bug-Fix: The issue preventing Show WAN Interfaces settings in Firewall Configuration from being saved permanently and causing users to select this option for each page visit has been resolved, ensuring consistent configuration settings and smoother operation for administrators.
  • Bug-Fix: Enhanced visualization experience by addressing the graph scaling issue in full-screen mode, ensuring clear and accurate display of charts for better monitoring and analysis.

Threat Intelligence

  • New Feature: Global load balancing feature is now available for cyber threat intelligence servers, improving reliability and performance.

Platform

  • New Feature: FreeBSD 13 arm64 platform support is now available, allowing users to protect a wider range of systems, like Raspberry Pi or Banana Pi, with Zenarmor.

1.16​

This is a major software release including new features, improvements and bug fixes.

1.16.4 - March 8, 2024​

This is a maintenance software release including new features, improvements and bug fixes.

Reporting

  • Improvement: The default reporting periods for MongoDB on new installations in OPNsense are now set to 2 days, ensuring accurate reporting settings.
  • Bug-Fix: The issue of scheduled reports being sent to the receiver despite the scheduled reporting capability being deactivated has been resolved, providing users with better control over reporting functionality.
  • Bug-Fix: The issue where scheduled reports were not being sent when "No Security" option was selected has been resolved, ensuring reliable report delivery.

Policies and Filtering

  • Improvement: Policy configuration has been improved to enhance filtering and reporting performance preventing duplicate network traffic inspection on both parent and child interfaces unnecessarily. Now, users are prevented from selecting both parent and child interfaces simultaneously on policy configuration. If a parent interface is selected, its child interfaces are now automatically deselected, and a notification message is displayed to the user.

  • Bug-Fix: The issue preventing global exclusions from working properly has been resolved, ensuring accurate filtering.

  • Bug-Fix: The issue preventing accurate identification of MAC addresses has been resolved, ensuring the proper functioning of device-based policies.

OPNsense Plug-in

  • Bug-Fix: The issue preventing users from importing their own certificates has been resolved, ensuring smooth certificate management.
  • Bug-Fix: The issue causing web control settings to be reset after a packet update in OPNsense has been resolved, maintaining consistent configurations.

1.16.3 - February 16, 2024​

This is a maintenance software release including new features, improvements and bug fixes.

Reporting

  • Improvement: If no chart is selected during the scheduled report configuration test, a helpful notification message is displayed enhancing user experience.

  • Bug-fix: The conflict between Zenconsole and OPNsense regarding the maximum number of active devices for the free edition has been resolved, ensuring both platforms consistently implement the established device limit, offering a seamless user experience.

  • Bug-fix: The device identification feature now accurately handles user agents and hostnames containing non-UTF-8 characters, eliminating a previous malfunction.

Filtering

  • Improvement: The auto-complete feature is now disabled for the Pin Code field on a Block Notification Page enhancing security and reducing the risk of accidental submission.

OPNsense Plug-in

  • Improvement: The initial configuration wizard now prevents users from proceeding if the remote elasticsearch version is incompatible. This ensures a smooth setup process and avoids potential issues.
  • Bug-fix: Resolved a bug where network interfaces containing the letter "lo" were mistakenly identified as loopback interfaces. This improves accuracy and clarity in interface management.
  • Bug-fix: The "Start your 15 days free trial" button on charts is now functioning correctly, allowing users to easily begin their trial experience via the Reports page.

1.16.2 - January 25, 2024​

This is a maintenance software release including new features, improvements and bug fixes.

Cloud Management - Zenconsole

  • Improvement: A dialog box prompting the user to restart the engine if the runtime and installed engine version are different will now appear on the firewall dashboard, rather than the all firewalls dashboard, improving user experience and awareness.

  • Improvement: License Expire Time is now displayed on the Subscription page, providing users with clearer subscription status information.

  • Improvement: Implemented warnings for devices with private MAC addresses, boosting network visibility and aiding in identifying potential security risks.

  • Improvement: License event notifications will be delivered only in the case of a status change.

  • Bug-fix: The issue causing Bytes Out/In and Packets Out/In columns in the "Table of Apps" table to be displayed in reverse order for the SQLite and MongoDB databases has been fixed, ensuring accurate metrics reporting for network traffic.

Reporting

  • Bug-fix: The problem that was causing the malfunction of the filtering feature on the Top Talkers Heatmap graphic for Elasticsearch and SQLite databases has been fixed, ensuring precise reporting of network traffic.
  • Bug-fix: The issue that caused the "Blocked Local Hosts Over Time" chart to be shown inaccurately has been resolved for an accurate representation of historical network data.

Policy and Filtering

  • Improvement: A new checkbox option has been added to the configuration page, enabling users to see WAN interfaces in the interface list. This will allow users to choose WAN interfaces for protection, providing them with more control and visibility.

  • Bug-fix: A non-ASCII character handling issue on the Block Notification Page has been fixed, ensuring clear and readable notifications for better incident response.

  • Bug-fix: The problem that hindered the correct functioning of Device Category-based policies has been fixed.

OPNsense Plug-in

  • Improvement: Notices displayed on the dashboard are immediately removed after users perform an action by pressing the buttons on the notification bar, streamlining the user interface and ensuring a cleaner, more efficient experience.
  • Bug-fix: The issue of users being able to enable a policy without specifying any corresponding criteria has been fixed, ensuring accurate rule application and reinforcing policy enforcement. Users are now required to provide at least one criterion in order to activate the policy.
  • Bug-fix: The issue that caused the Zenconsole to appear as a Mail Provider option in scheduled report settings for free users has been resolved.
  • Bug-fix: The problem of displaying all "Advanced Security" settings as "Allowed" after the expiry or revocation of the license has been fixed.
  • Bug-fix: The issue preventing hostnames from being displayed on the "Top Local Hostname" chart in the MongoDB database has been resolved, enhancing visibility into network activities.
  • Bug-fix: The issue causing the "RSS feature enabled" warning notice to persist even after deactivating it has been resolved, providing accurate and timely notifications to users.

1.16.1 - January 4, 2024​

This is a maintenance software release including new features, improvements and bug fixes.

Device Identification

  • New Feature: Backup and Restore feature now supports the Device database, enhancing manageability. Users can now backup and restore detected devices for easy device management. They can save custom device settings, parent/child devices, and device status, such as trusted, untrusted, starred, hidden, etc.
  • Improvement: A larger group of Android devices are now categorized as Mobile, providing more accurate device classification and enhancing visibility.
  • Improvement: The device identification feature is improved and can now identify Tesla IoT devices correctly.
  • Improvement: Broadcast and multicast IP addresses are now excluded from the device identification process, improving manageability and user experience.

Cloud Management -Zenconsole

  • New Feature: Users can now configure tracefs partition size, ranging from minimum value 100MB to maximum value 500MB, manually.
  • Improvement: Zenconsole UI is now compatible with more screen resolutions and sizes, like 14-inch displays, providing better UX and preventing horizontal scrollbars.
  • Improvement: Users will be automatically redirected to the Policies page to import policies for newly registered nodes, and the notification at the bottom right will be shown when they try to visit Live Sessions or Reports pages before importing policies.
  • Improvement: Devices and device categories can now be added to a centralized policy configuration, enhancing access control and user experience.
  • Improvement: A dialog box asks the user to restart the engine if the running and installed engin versions are different, improving the reliability and user experience.
  • Bug-fix: The problem that hindered users from activating a valid license key when their cloud-managed firewall quota was reached has been resolved.
  • Bug-fix: The problem that caused a user to receive the error "Device not found" when attempting to view device details despite the device's existence has been resolved.
  • Bug-fix: The problem that caused a user to receive the error "Error (200)" on the Devices page has been resolved.

OPNsense Plug-in

  • New Feature: Users can now configure tracefs partition size, ranging from minimum value 100MB to maximum value 500MB, manually.
  • Improvement: Now, the Scheduled Reports Configuration pane is not displayed when the scheduled reports option is disabled, improving the user experience.
  • Improvement: Through the Policies list view, users can now directly enable or disable policies with ease, thereby improving the overall user experience.
  • Improvement: A dialog box asks the user to restart the engine if the runtime and installed engine version are different, improving the reliability and user experience.
  • Bug-fix: The issue that prevented changes to the default record/row size for Threats Live Sessions on deployments of elasticsearch databases has been resolved.
  • Bug-fix: The bug that caused the selected web profile to be mistakenly displayed after license expiration for users with custom web profiles on the default policy has been fixed.
  • Bug-fix: The bug that prevented the configuration option Do not require TLS server certificate verification for scheduled reports from functioning correctly has been fixed.
  • Bug-fix: The issue that prevented the revocation of MS Active Directory API keys when a user disables one of the multiple keys and the vulnerability that caused them to become corrupted has been fixed.
  • Bug-fix: The issue that allowed users to enable a policy without any criteria and match all sessions has been resolved, enhancing reliability.
  • Bug-fix: The issue that prevented the Scheduled Reports option from being disabled after license expiration has been fixed.
  • Bug-fix: The issue that prevented the reporting database path settings from being updated has been resolved.

Reporting

  • Improvement: A warning message is now displayed when users leave user/password fields empty in the SMTP server configuration for scheduled reports, improving user experience.
  • Improvement: The Device Category field has been added to the Live Sessions Explorers. Live session reports can be filtered by the device category, as per the user's preference.
  • Bug-fix: The issue that requires restarting the engine to activate new IP anonymization settings has been resolved.

Policies and Filtering

  • Improvement: Users can now add exclusions for web categories via Blocks Live Sessions, enhancing user experience.
  • Improvement: Botnet DGA domain detection is improved, reducing false positive cases.
  • Improvement: The removal of matching criteria from a policy configuration, such as device, device category, IP address, and MAC address, now requires user affirmation, enhancing the user experience.
  • Bug-fix: The issue causing the packet engine to crash if a user defines a policy configuration by adding a large number of IP addresses instead of a network address in CIDR format has been resolved.

1.16 - December 18, 2023​

This is a major software release including new features, improvements and bug fixes.

Packet Engine

  • New Feature: The device identification feature is now available for enhanced network visibility and management. Devices are automatically detected and device details, such as hardware vendor, operating system, device name, hostname, IP address, MAC address, and device category, are provided.
  • New Feature: The device access control feature is now available for paid Editions. Detected devices can be categorized as Trusted and Untrusted. Users can now define a policy to restrict Untrusted devices from accessing the network.
  • New Feature: Community ID Flow hashing is now supported, enabling integration and collaboration between other network security tools.
  • New Feature: Improved threat detection and data exfiltration prevention capabilities by identifying tunnels over the DNS protocol.
  • New Feature: Internal CA certificates are now supported, enhancing security in packet inspection.
  • Improvement: Netmap emulated mode performance has been improved on Linux-based systems.
  • Improvement: Improved TLS landing page with added Subject Alternative Name (SAN) information to the certificate in the engine.
  • Improvement: Enhanced engine to parse DNS requests/responses over TCP, improving analysis for more accurate insights.
  • Bug-fix: The issue preventing the Block Notification page from being displayed correctly due to incorrect flow direction and local/remote addresses is resolved.
  • Bug-fix: The issue causing the allowed traffic records to be displayed in Block reports was resolved, improving visibility and user experience.
  • Bug-fix: The bug causing the wrong policy sort order when there were more than 10 policies was resolved.
  • Bug-fix: The issue of 443 traffic being incorrectly tagged as Generic TCP/IP is resolved to ensure accurate traffic identification.
  • Bug-fix: The bug preventing Chrome browsers from receiving any response for block notification pages was resolved.
  • Bug-fix: The issue causing unexpected DNS query results for some domains was resolved, ensuring all DNS queries generate the correct responses.
  • Bug-fix: The bug causing missing sessions in reports and blocks is resolved, ensuring all sessions are accurately reported.

Reporting

  • New Feature: Users can conveniently access the device details by clicking on the device column in Live Sessions or by clicking on the device-related charts, like Top Devices, in Reports.
  • New Feature: Added the Show only blocked connections option to view blocked connections exclusively in Live Session Explorer, aiding in threat analysis.
  • New Feature: Direct access to Detected and Blocked Threats reports from the firewall dashboard, streamlining traffic analysis and threat hunting.
  • Improvement: Scheduled reporting now includes device-related reports, providing a comprehensive overview of device activities.
  • Improvement: New device-related charts, such as Top Devices, Top Device Categories, Top Blocked Devices, Top Blocked Device Categories, Top Detected Devices, Top Detected Device Categories, are available on reports now.
  • Improvement: A personalized experience with the ability to select time formats by allowing users to select 24-hour or 12-hour time formats from the setting button at the top right on the live sessions and reports pages.
  • Improvement: Streamlined data analysis with the ability to drill down to Live Session Explorer by clicking on the chart pies or by selecting the pie names followed by the ellipsis button.
  • Improvement: Enhanced data management with the ability to customize the record size and export all records in Live Sessions Explorer through Zenconsole. Users now have several options for Live Session Explorer record size, such as 25 Rows, 100 Rows, 500 Rows, 1000 Rows and custom.

OPNsense Plug-in

  • New Feature: Users can now download internal CA certificate files in CRT format via the Block Notification Page* and Certificate Authority settings pages.
  • Improvement: The user experience is improved with the newly implemented intuitive Zenarmor user interface. The updated fonts and color scheme ensure a seamless and enjoyable experience.
  • Improvement: Streamlined userauth_cache.db with automatic removal of inactive records after 7 days and updated records for existing entries.
  • Improvement: Enhanced user experience on OPNsense UI by displaying OPNsense descriptive name in parentheses on Configuration page for interface(s).
  • Improvement: Improved High Availability (HA) synchronization on OPNsense UI with the addition of protected interface configuration.
  • Improvement: The user experience is improved by displaying a warning message to the user if they select Zenconsole as an email provider in Scheduled Reports while the firewall is not registered to Zenconsole.
  • Bug-fix: Fixed the issue with changing DB path in Settings - Data Management. The Change Path option now accurately reflects the new database path.
  • Bug-fix: Disabled network interfaces no longer appear in the available interface list on Configuration page, improving interface management.
  • Bug-fix: The issue causing the Policy Schedule to apply configurations inaccurately was resolved, providing a smoother and more effective policy management experience.

Filtering

  • New Feature: Device and Device Category options are now available in Policy Configuration, enhancing device-based filtering capability.
  • New Feature: Enhanced security management with the option to Allow/Block based on Security categories via Live Sessions Explorer through Zenconsole.
  • Improvement: Added MAC address support for the Exempted VLANs & Networks, enhancing filtering configuration.
  • Improvement: The policy creation process is improved, preventing the user from saving a policy without any criteria and matching all sessions.

Application Control

  • Improvement: Improved identification of WireGuard applications in the engine by recognizing them from their fingerprint.

Threat Intelligence

  • New Feature: Enhanced security with Botnet DGA detection, providing advanced threat identification capabilities.
  • Improvement: New security category, Malformed DNS, is now available for paid editions.
  • Improvement: New web categories, such as Compromised Sites and Uncategorized Safe are available for Non-Business Editions.
  • Improvement: Some web categories are renamed, such as Undecided Safe and Undecided Not Safe renamed Uncategorized Safe and for Non-Business editions.

Agent

  • Improvement: MongoDB and SQLite filter parameters are modified to handle "Contains" filter for both Live Sessions and Charts in the agent.
  • Bug-fix: The issue related to Scheduled Report configuration was addressed, ensuring accurate and reliable reporting. Your scheduled reports will now function seamlessly, providing you with the precise information you need.

Cloud Management - Zenconsole

  • New Feature: Users can now add charts to scheduled reports via charts on Zenconsole enhancing reporting capabilities.
  • New Feature: Users can now download internal CA certificate files in CRT format via the Block Notification Page* and Certificate Authority settings pages.
  • Improvement: The user experience is improved with the newly implemented intuitive Zenconsole user interface. The updated fonts and color scheme ensure a seamless and enjoyable experience.
  • Improvement: Improved project sharing flexibility with updated limits based on the lowest firewall plan in Zenconsole. The project-sharing feature is now limited to one user for home editions, while it is limited to three users for SOHO editions. A business licence has no limitations.
  • Improvement: Enhanced user awareness with improved notifications for licence checks on Zenconsole, especially in the case of an expired licence.
  • Improvement: A new feature that clears or resets firewall-specific filters when users switch to a different firewall was introduced. This enhancement provides a clean and contextually relevant interface when transitioning between different firewalls.
  • Improvement: Interfaces are now automatically refreshed after changing deployment mode, displaying the WAN interface for bridge mode deployment, and ensuring accurate and up-to-date information.
  • Bug-fix: The issue causing a CA Certificate PEM Format Error was resolved.

Platforms

  • New Feature: Linux users benefit from DKMS support, allowing the shipment of a more generalized netmap.ko module for major Linux kernels. Simplified installation with netmap DKMS packages is now shipped in the Zenarmor package repository for Linux platforms.
  • New Feature: Ubuntu 23.04 Lunar Lobster is supported now, expanding compatibility and platform options.
  • Improvement: Improved handling for non-OPNsense systems, ensuring repo URL updates when the OS is updated, and enhancing system compatibility.
  • Improvement: Ubuntu users start to benefit from improved key store path management in the zenarmor repo file, ensuring a seamless and secure installation process.

1.15​

This is a major software release including new features, improvements and bug fixes.

1.15.2 - October 25, 2023​

This is a maintenance software release including new features, improvements and bug fixes.

Platforms

  • New Feature: Debian 12 (bookworm) is now supported.

OPNsense

  • New Feature : Priority options in the feedback window for licensed users are now available to improve the feedback collection process and user communication.
  • New Feature : An enable/disable option for the SwapRate setting is now available, allowing users to control this feature for future use.
  • Improvement : Reinstall Report Database option is now passive during the Reset Reporting process for better UX.
  • Improvement : The user experience is enhanced by enabling automatic removal of notifications after issues are resolved, reducing clutter, and ensuring a smoother user interaction.
  • Improvement : The previous reporting DB is now completely removed during the uninstall process or reporting DB change, improving user experience and ensuring a smooth uninstallation.
  • Improvement : Once Zenarmor has been reset to Factory Defaults, nodes that have already installed a license key are presented with the option to "Use existing subscription" in the initial configuration wizard.
  • Improvement : Netmap buffer (dev.netmap.buf_num) value is now automatically set during installation according to the device RAM size. (from 4GB to 8GB value is 500000, more than 8GB value is 1000000).
  • Improvement : Domain validation regex has been enhanced and Shortened URL formats are now supported for exclusion domains.
  • Improvement : The vulnerable x11/libX11 port has been updated to 1.8.7.
  • Bug-fix : The issue where web categories would sometimes revert to an 'allow' state even when configured to block has now been fixed.
  • Bug-fix : Remote elasticsearch service status is now accurately displayed in the dashboard.
  • Bug-fix : The issue causing the Change Prefix feature for the remote elasticsearch database to give an error is resolved.
  • Bug-fix : The bug causing cloud management usernames to be set incorrectly, resulting in Zenconsole connection problems if the default privacy settings are changed is resolved.
  • Bug-fix : The bug causing a critical Disk I/O error during the Restore Backup process is resolved, ensuring data integrity and the reliability of backup operations.
  • Bug-fix : Reporting capabilities are improved by resolving the issue where VLAN IDs were not displaying in the Live Sessions Explorer.
  • Bug-fix : The bug causing HTML tags to be displayed in notification messages was resolved.
  • Bug-fix : The error that rendered the exclusion feature inoperable as a result of duplicate entries in the exclusions list has been fixed.

Zenconsole

  • New Feature: Priority options in the feedback window for licensed users are now available to improve the feedback collection process and user communication.
  • New Feature: The Swap Rate option is now available, providing users with additional flexibility in their system configurations and increasing system reliability.
  • Improvement: Visibility for canceled subscriptions is improved, providing users with enhanced clarity regarding their subscription status.
  • Improvement: Domain validation regex has been enhanced and Shortened URL formats are now supported for exclusion domains.
  • Bug-fix: The typo in the notification message for disabling the Report Infrastructure Errors option in Privacy settings is fixed.
  • Bug-fix: The issue with displaying the session expiry warning message on network connection loss was resolved.

Reporting

  • Improvement: The Firewall option is removed from Reports and Live Sessions, ensuring proper reporting configuration.
  • New Feature: Integration with NXlog is now supported, offering enhanced security and event log management.
  • Bug-fix: The bug causing the missing Table of Remote Hosts data on MongoDB and Elasticsearch databases was resolved.
  • Bug-fix: The MongoDB error that caused the Packets Out and Packets In columns of the Table of Remote Hosts to be arranged in reverse order has been fixed.
  • Bug-fix: The bug causing the missing data on Interfaces & VLANs report was resolved.
  • Bug-fix: The bug causing the missing username data on the Connection Eggress Users report for the SQLite database was resolved.

Agent

  • New Feature: Aliases are now supported to perform real-time reverse DNS queries, enhancing DNS enrichment on reports.
  • Bug-fix: The Agent module can now generate accurately encoded tokens even when email addresses contain special characters, such as '+'.
  • Bug-fix: The issue causing errors on Zenconsole due to the 'agent' module crashes is resolved, enhancing stability.
  • Bug-fix: The bug causing the 'Reset Reporting' functionality to become unresponsive and stuck is resolved, ensuring smooth reporting functionality.
  • Bug-fix: The bug causing failure to set reverse DNS during DNS enrichment on Zenconsole is resolved.
  • Bug-fix: The bug causing configured DNS server IP addresses to disappear after being added is resolved, ensuring stability and consistency in DNS configuration.

1.15.1 - September 29, 2023​

This is a maintenance software release including new features, improvements and bug fixes.

OPNsense GUI

  • New Feature: Swap Usage configuration feature is provided on the Health page to manage the swap size of which Zenarmor engine will be stopped when it reaches this rate.
  • Improvement: Notification messages about license status are improved, providing details before license expiration for proactive and easy license management
  • Improvement: The warning message about failed initial configuration on incompatible hardware is improved, providing more information about the failure reason.
  • Bug-fix: The issue causing the Zenarmor menu to disappear from the sidebar after the OPNsense 23.7.4 upgrade is resolved.
  • Bug-fix: The bug that was preventing users from enabling/disabling Zenconsole Cloud-Based Management on the Privacy page is resolved.
  • Bug-fix: The bug that was preventing users from cloning a policy is resolved.
  • Bug-fix: The typo on the notification message about successfully deleting log files is fixed.
  • Bug-fix: The issue causing a blocked application category to be displayed with the Allowed toggle button is fixed.
  • Bug-fix: The issue causing a cloned central policy on OPNsense UI to be seen as a local policy on Zenconsole is fixed
  • Bug-fix: The issue preventing filtering from being applied in a custom report view is resolved.

Zenconsole

  • Improvement: "Projects" menu is improved for better UX, facilitating easy project management.
  • Improvement: Heatmap charts are improved, enabling charts to be rendered in proper colors depending on the theme.
  • Bug-fix: The typo on the "Create Centralized Policy" button is fixed.
  • Bug-fix: The issue causing Table of Local Assets charts to be empty in MongoDB is fixed.

Reporting

  • New Feature: A new feature is offered to perform index checks for MongoDB and to produce related events/notifications.
  • Bug-fix: The issue causing the incorrect Active Users value on Elasticsearch and MongoDB databases is resolved.
  • Bug-fix: The issue causing an index creation problem on remote elasticsearch is resolved.

Engine

  • Improvement: netmap emulated mode performance on Linux systems is improved .
  • Bug-fix: The bug causing the DNS packet inject error is resolved.
  • Bug-fix: The bug causing the DNS traffic tags as Proxy due to the destination hostname is resolved.

Policies and Filtering

  • Improvement: Several new security controls are introduced in Zenarmor, including "DNS over HTTPS", "Compromised Websites", "Keyloggers and Monitoring", and "Spyware and Adware", enhancing your network security capabilities for a more comprehensive and secure browsing experience.

Agent

  • Bug-fix: The issue causing the Exempted Vlans & Networks setting not to be configured is resolved.
  • Bug-fix: The issue causing Egress New Connections by Source Over Time report shows the NaN value is resolved.
  • Bug-fix: The issue causing deleted policy IDs to override the Default policy on elasticsearch database reports is resolved, providing a proper display of policy names on reports.
  • Bug-fix: The issue causing missing fields in DNS and Web Live Sessions Explorers for SQLite database deployments is resolved.

1.15 - September 18, 2023​

This is a major software release including new features, improvements and bug fixes.

Zenconsole

  • New Feature: Zenconsole now supports role-based sharing for projects, enabling users to control and customize project access and collaboration based on specific roles and permissions. The following roles are implemented: owner, admin, operator, and viewer.
  • New Feature: "Account Sessions'' feature in Zenconsole, empowering users to view and manage active sessions with ease. Now you can access valuable session information, including platform, browser, IP address, location, login, last seen, and remotely terminate sessions.
  • New Feature: Zenconsole now supports real-time configuration synchronization between Zenconsole users, facilitating instant viewing of updates when another user makes changes to firewall configuration or policy settings.
  • New Feature: Zenconsole introduces a convenient "Whois" button for the destination hostname, similar to Zenarmor's OPNsense UI. This feature provides users with quick access to valuable domain information for enhanced network monitoring and threat analysis.
  • Improvement: Zenconsole now includes a warning message for users with incompatible OPNsense versions. This notification helps users maintain compatibility and avoid potential issues when using Zenconsole.
  • Improvement: A convenient "Download CA Private Key" feature has been introduced in Zenconsole, empowering users to easily import the CA into clients, notably benefiting macOS users.
  • Improvement: Zenconsole reporting capabilities are enhanced by adding new chart types that are already available on the OPNsense web UI, like the Top Destination Locations Heatmap, Table of Local Assets, Table of Remote Hosts, and TLS/DNS/Web-Top Egress/Ingress Users, providing improved visualization options for a richer monitoring experience.
  • Improvement: Both global exclusions and policy-based exclusions can be added via Live Sessions Explore on Zenconsole.
  • Bug Fix: Zenconsole now respects the real-time sync configuration, ensuring that newly created policies are not synchronized with the firewall until the user manually initiates synchronization.
  • Bug Fix: Non-existent policies are now correctly displayed as "Deleted" in Zenconsole, enhancing the accuracy of policy management.
  • Bug Fix: Discrepancies in threat detection data and chart information displayed on the firewall dashboard between OPNsense and Zenconsole are fixed, ensuring accuracy and consistency in Zenarmor
  • Bug Fix: The issue with the Live Session Filter on SQLite DB when applying multiple filters to the same field in Zenconsole is resolved.

OPNsense UI

  • New Feature: The Reports page within OPNsense has been enhanced with a new "Maximize" feature. This allows users to expand reports into full-screen mode for a more detailed and immersive viewing experience.
  • Improvement: On the Firewalls screen, users can now conveniently access Live Sessions via ia Top Threads, Top Hosts, and Top Apps reports.
  • Improvement: Zenarmor's Web UI menu has been seamlessly integrated into the OPNsense user privilege system. You can assign privileges to OPNsense users for accessing Zenarmor submenus, like Settings, Report, and Live Session.
  • Improvement: Custom Web Category enhancement ensures that custom web category content is accurately displayed in the exclusion list, allowing for better control and customization.
  • Improvement: Users can now seamlessly import and export lists, making it easier to maintain and share custom web category configurations.
  • Improvement: The health check feature on OPNsense will now notify users when it shuts down Zenarmor services. This ensures that users are promptly informed about any service disruptions, allowing for quicker troubleshooting and resolution.
  • Improvement: Duplicate policy control mechanisms are improved by allowing the same policies to be added when they have different time schedules, enhancing policy management.
  • Improvement: Users will now receive a warning if the Zenarmor engine stops, providing immediate feedback and allowing for timely action to restart the engine.Bug Fix: The Disk Space Utilization widget on Zenarmor Dashboard now correctly displays used disk usage for OPNsense platforms, ensuring accurate and up-to-date information.
  • Bug Fix: The egress new connections by source over time report in OPNsense has been fixed to display accurate and correct data, improving the reliability of this reporting feature.
  • Bug Fix: The local/blocked connections filter in OPNsense GUI has been fixed to ensure that it works as expected.
  • Bug Fix: Issues related to backup and restore version mismatch errors have been resolved, ensuring smooth backup and restore operations.
  • Bug Fix: Campaigns that were previously dismissed are no longer displayed, resolving this issue.
  • Bug Fix: The bug that forces the user to input a license key even though the Free Edition option is selected in the installation wizard if the user has previously attempted to obtain a 15-day free trial is resolved.
  • Bug Fix: The bug that were causing authentication error on HA (High Availability) configuration page is resolved.

Cloud Agent

  • Improvement: The Zenarmor cloud agent has been improved to effectively handle "Contains" filters to ensure that filtering capabilities are more precise and adaptable to various use cases for all supported reporting databases. This enhancement provides users with more versatile and precise filtering options when querying data.
  • Improvement: The warning messages about the engine status are improved for better UX.
  • Bug Fix: The Zenarmor cloud agent's scheduled reports PDF service now provides expected and consistent data, resolving any unexpected data issues that were previously preventing scheduled reports from being generated in PDF format.
  • Bug Fix: The Zenarmor cloud agent no longer continues to run after unregistering from the cloud, ensuring that the agent properly terminates after the firewall is unregistered from Zenconsole.

Packet Engine

  • New Feature: Realtek network interface users will now receive important warnings and advisories within BSD-based systems, such as OPNsense and pfSense for Netmap Issues.
  • Improvement: The engine now detects and warns users when Jumbo frames (MTU size > 1500) are used on the protected interface, preventing potential processing issues.
  • Improvement: Zenarmor Health Check system now includes authentication, enhanced security, and access control for improved system health monitoring and management.
  • Improvement: The CPU pinning option is improved, optimizing resource utilization and performance and it now functions correctly.
  • Improvement: Netmap emulated mode performance on Linux-based systems is Improved.
  • Bug Fix: The database lock error in IpdrStreamer has been addressed, eliminating any issues related to database locks that prevent ipdr files from being processed in the case of heavy network traffic/data load.
  • Bug Fix: The issue of DNS traffic tags being mislabeled as "Proxy" due to destination hostnames has been resolved in the Zenarmor engine.

Policies and Filtering

  • Improvement: Several new web categories are introduced in Zenarmor, including "Low-THC Cannabis Products", and "Generative AI," enhancing your web content filtering capabilities for a more comprehensive and secure browsing experience.

Reporting

  • Bug Fix: The bug that was causing the Unique Local Hosts chart in ES to display remote host values is resolved, ensuring accurate chart data.
  • Bug Fix: The chart size issue on MongoDB has been fixed to display accurate information.
  • Bug Fix: The number of unique local devices is now accurately calculated and displayed in SQLite, eliminating inaccuracies.

1.14​

1.14.5 - August 29, 2023​

OPNsense GUI

  • New Feature: Display campaign/Zenarmor updates directly in OPNsense UI for easy access.
  • Improvement: Zenarmor now supports custom web categories for precise content filtering.
  • Improvement: The loading of reports in OPNsense UI and Zenconsole has been optimized to greatly improve performance.
  • Improvement: OPNsense UI now automatically adjusts space for effortless window resizing, enhancing user experience and interface adaptability.
  • Improvement: The user interface now prevents enabling scheduled reports if the mail provider connection test fails.
  • Improvement: The user interface now provides alerts for misconfigured VLAN parameters, reducing the occurrence of configuration glitches.
  • Improvement: For a better user experience, Zenarmor login session management is improved by redirecting expired user login sessions to the OPNsense login page.
  • Improvement: Global option is now available for creating exclusions via Live Sessions Explorer enabling adding policy-based exclusions.
  • Improvement: Signature option is renamed as Application DB on High Availability and Privacy settings page.
  • Improvement: Exporting Exclusions feature is improved, by allowing users to distinguish between Whitelist and Blacklist domains. Now, exclusions exported via All Exclusions pane can be imported successfully.
  • Bug-fix: Zenconsole now displays restored policies after backup and restore, enhancing policy management.
  • Bug-Fix: Excessive CPU usage has been successfully resolved, ensuring stable performance and efficient resource allocation.
  • Bug-Fix: "Contains" and "Not Contains" filter issue is fixed for accurate live session data analysis, streamlining insights.
  • Bug-Fix: Zenarmor menu is removed after uninstallation, providing a tidy and seamless user experience.
  • Bug-Fix: "ES" filter inaccuracy is fixed, ensuring precise data display and analysis within OPNsense.
  • Bug-Fix: The issue with the left zenarmor menu and some config.xml entries after uninstallation has been resolved for comprehensive cleansing.
  • Bug-Fix: Data duplication in Zenconsole's drill-down was resolved for clearer, reliable data analysis.
  • Bug-Fix: Username retrieval error in Captive Portal resolved, ensuring smooth user authentication.
  • Bug-Fix: Incorrectly reversed data display for "Top Local-Remote Hosts" is resolved accurately reflecting network traffic.
  • Bug-Fix: Zenarmor menu disappearance after 1.13.x to 1.14.x upgrade fixed, ensuring uninterrupted access to functionalities.
  • Bug-Fix: Issue of disappearing interfaces post Zenarmor 1.13.x to 1.14.x update resolved, facilitating smooth network management.
  • Bug-Fix: Start-on-boot cloud agent message is corrected for accurate communication during configuration.
  • Bug-Fix: The issue that was preventing successful notification deletion has been resolved, allowing for efficient and clutter-free notification management.
  • Bug-Fix: Discrepancy in application records count for app category is resolved, fixing inaccurate display of the number of records.
  • Bug-Fix: Version mismatch error during backup and restore process fixed, ensuring data restoration efficiency.
  • Bug-Fix: The issue that prevented the successful removal of an exclusion created using Live Session Explorer has been resolved.
  • Bug-Fix: The issue that prevented the Update Subscription icon on the Dashboard from functioning properly when the license was activated on another device has been resolved.
  • Bug-Fix: The problem pertaining to the erroneous presentation of notification messages on the Active Directory Integration page of the Home License has been resolved.

Reporting:

  • Improvement: Remote Elasticsearch database support is now compatible with Elasticsearch 8.9.1.
  • Bug-Fix: Mongodb backend: Table of Local Assets displays local assets instead of remote IPs, enhancing accurate tracking.

Zenarmor Agent

  • Bug-Fix: OPNsense version check improved for smoother interactions, preventing conflicts with unexpected version formats.

Zenconsole

  • Improvement: Zenconsole saves reporting settings in browser storage, ensuring consistency.
  • Bug-fix: Zenconsole now displays restored policies after backup and restore, enhancing policy management.

Application Database

  • Bug-Fix: Typo on Categorization: All Categories > Storage & Backup: Download Storage is fixed.

Web Categorization

  • Improvement: The following web categories have been removed: "Malformed Domain", "Bad IP", "NX Domain", "Undecided Safe", "Undecided Not Safe", "Unknown", "Whitelist", and "Blacklist". These changes have been made to streamline and improve the web content filtering experience in Zenarmor.

1.14.4 - August 23, 2023​

OPNsense UI

  • Bug-Fix: OPNsense 23.7.2 incompatibility issue fixed.

1.14.3 - August 17, 2023​

OPNsense UI

  • Improvement: The policy save and update process performance is optimized by implementing SQLite commands, resulting in a remarkable 30-fold improvement in performance for policy management tasks.
  • Improvement: MongoDB query timeout is improved by allowing configurable settings beyond the default 30 seconds for more comprehensive queries.
  • Improvement: User experience on OPNsense UI is enhanced by displaying full query names on mouseover, overcoming field length limitations.
  • Improvement: The check for the Community repository conflict is now re-introduced in order to avoid incompatible elasticsearch or MongoDB packages.
  • Improvement: OPNsense live sessions by filling data instead of cutting off on the right side is improved, enhancing user interaction.
  • Improvement: Improved visual distinction by assigning different colors to mixed allow/block categories in OPNsense, enhancing category management experience
  • Improvement: Handling of default DNS enrichment IP address is optimized, providing accurate and reliable information.
  • Bug-Fix: The issue of missing dismiss option and non-functional "Check it" button for schedule report errors is fixed, ensuring a smoother reporting experience.
  • Bug-Fix: The problem of a full custom web category list popup requiring users to remove previous entries before creating a new list is resolved, improving user experience.
  • Bug-Fix: "invalid workers.map file" error which was triggered if wan interface tags were used with "Passive" deployment mode is fixed.
  • Bug-Fix: The misplacement of the 'Undecided Safe' category within the Security category is fixed, improving policy categorization.
  • Bug-Fix: The packet health check mismatch error in OPNsense UI is fixed, addressing issues with OPNsense/Zenarmor/StaticConfig.php and OPNsense/Zenarmor/Menu/Menu.xml for accurate health assessment.
  • Bug-Fix: The issue of the "Please Wait" button becoming stuck when sending test mail on the scheduled report page is fixed, enhancing user interaction.
  • Bug-Fix: The hostmap cache to use a much lower disk size by removing unnecessary records is optimized, improving system stability
  • Bug-Fix: The inability to cloud register with ports other than 443 is fixed, ensuring versatile cloud connectivity.
  • Bug-Fix: The bug causing exclusions import to fail in OPNsense is resolved, ensuring a successful import process.
  • Bug-Fix: The bug on the live session detail is resolved, ensuring the display of policy names instead of policy IDs.
  • Bug-Fix: The lack of warning messages for insufficient memory and CPU resources in UI is rectified, enhancing user awareness.
  • Bug-Fix: The bug in the zenconsole configuration screen is fixed, addressing the need for automatic refresh in pfSense CE/FreeBSD environments.
  • Bug-Fix: Improved policy sorting in OPNsense, ensuring proper sorting action.
  • Bug-Fix: The sorting issue for "bytes in" and "bytes out" columns in the "connection live session" is fixed, ensuring accurate data display.
  • Bug-Fix: The connection error during scheduled report test in Agent is addressed, improving report functionality.
  • Bug-Fix: The errors in GUI that occurred after restoring the backup process in OPNsense are fixed, ensuring a smooth restoration experience.
  • Bug-Fix: The bug where, after the 1.14.2 update, all parent categories were blocked despite only sub-categories being blocked in the Policy App category is rectified.
  • Bug-Fix: The bug causing "Policy could not be found" error in OPNsense policy filter is fixed, ensuring accurate policy search.
  • Bug-Fix: The bug in OPNsense where SQLite Unique Local Devices information was incorrect is addressed, ensuring accurate device data.
  • Bug-Fix: The bug causing reports filtering on Security Category to malfunction in Live Session Threats is fixed, improving filter accuracy.
  • Bug-Fix: Live Traffic Graph now displays local time instead of UTC time.
  • Bug-Fix: The bug causing incorrect cloud policy id in live session rows is fixed, ensuring accurate data representation.
  • Bug-Fix: The bug caused policies to be disabled after updating to 1.14.2 with Home License in OPNsense is fixed.
  • Bug-Fix: Policy matching for DNS packets is optimized, ensuring consistent and efficient first-come-first-served enforcement.
  • Bug-Fix: Policy cloning issue is resolved, enabling smooth duplication of policies for streamlined network management.
  • Bug-Fix: Incorrect notification display on hover is addressed, ensuring notifications are now visible as intended.
  • Bug-Fix: ES index creation is improved, now including accurate customer ID and node UID.
  • Bug-Fix: The bug preventing Safari users from selecting backup files is fixed, ensuring cross-browser functionality.
  • Bug-Fix: The bug causing duplicate policies is resolved, streamlining policy management and avoiding confusion.

Zenconsole

  • Bug-Fix: "ES Query Failed. Error: 400 Bad Request" error in Zenconsole is resolved, improving error handling.
  • Bug-Fix: The bug on the live session detail is resolved, ensuring the display of policy names instead of policy IDs.

1.14.2 - August 09, 2023​

OPNsense UI

  • Improvement: Your license type is now displayed in the header, providing easy visibility of your account information.
  • Improvement: We've added your Host UUID to the Cloud Management Portal menu in settings, streamlining your cloud management experience
  • Improvement: For bridge mode, you'll now see custom interface names in the traffic graph, making it clearer and more informative.
  • Improvement: We've updated the Traffic Graph labels to Download and Upload, ensuring better clarity at a glance.
  • Bug-Fix : No more error messages in the Dashboard after saving changes in Settings - Configuration.
  • Bug-Fix : Fixed the issue where the whole application category was blocked, even if some selections were set to allow.
  • Bug-Fix : The MongoDB Start on Boot button now works seamlessly in Firefox.
  • Bug-Fix : Fixed the issue with SQLite Unique Local Devices, ensuring accurate device tracking.
  • Bug-Fix : Applying remote Elasticsearch configuration from deployment settings now works flawlessly.
  • Bug-Fix : Getting reports with Remote Elasticsearch is now trouble-free.
  • Bug-Fix : Resolved the issue where blacklist entries were unintentionally converted to whitelists.
  • Bug-Fix : Live Session Threats tab now displays threats reports in MongoDB as expected.
  • Bug-Fix : Device count values in Widget and Conn-Fact reports are now consistent.

1.14.1 - August 07, 2023​

OPNsense UI

  • Improvement: Attaching screenshots to bug reports is now automated, making it effortless for you to provide valuable feedback for smoother software improvements.
  • Bug-Fix : Resolved the "Network Error" issue that some users experienced after the 1.14 update, ensuring a seamless network experience.
  • Bug-Fix : Fixed the multi-interface selection not showing in the GUI, enabling easy navigation and selection of interfaces.
  • Bug-Fix : Addressed the Top Destination Location Heatmap Report's data display issue, providing accurate insights into your network activity.
  • Bug-Fix : Fixed the Firefox button functionality issue, ensuring a seamless experience when using Firefox with Zenarmor.

1.14 - August 06, 2023​

OPNsense UI

  • Improvement: Modern, more intuitive Zenarmor Web UI, and better user experience. Consolidating different Zenconsole and Zenarmor OPNsense interfaces into a unified one can help establish consistency and standardization across the software ecosystem. It allows users to follow familiar workflows and reduces the learning curve associated with multiple interfaces. Users being able to use the same interface across different platforms, the frequency and variety of developments for a single interface will increase, and it will become a more functional firewall.
  • Improvement: Real-Time Feedback for Policy Modifications. The 'saving...' indicator in the policy details view provides real-time feedback during policy modifications.
  • Improvement: Serial File Difference Warnings: Display warnings during restore actions to ensure data integrity and prevent accidental data loss.
  • Improvement: Streamlined Status Panel. The status panel is now on the Dashboard, providing quick access to the engine, DB, cloud nodes, and NICs status.
  • Improvement: Optimized Deployment Mode. The default deployment mode is emulated netmap driver for a seamless and optimized installation experience.
  • Improvement: User Feedback Submission. Easily send feedback, including bug reports, via the Have feedback box on the OPNsense UI.
  • Improvement: Simplified Zenarmor Settings. Access all Zenarmor settings quickly through the Zenarmor > Settings navigation on the OPNsense GUI.
  • Improvement: Activity Explorer and Live Session Explorers are now available in the main sidebar for quick access, simplifying connection reporting, and real-time session monitoring.
  • Improvement: Application DB and Engine can also be checked for updates on the About page under Settings, enabling users to conveniently check for updates and ensure their system is up-to-date.

Zenconsole

  • Improvement: Enhanced Data Visualization. Introduce "table" and "map" chart types for diverse reporting and analysis capabilities.
  • Improvement: Precise Filtering with "Contains" and "Does Not Contain". Easily filter and find specific data within reports and live sessions, streamlining data analysis and troubleshooting tasks.

Policies and Filtering

  • New Feature: Custom Application Port Configuration. Allow finer control and accuracy in defining custom application rules by specifying ports.

Reporting

  • New Feature: CLI Endpoint for Sample Reports. Automate sample report sending at specified intervals, simplifying testing and validation of report generation and delivery processes.
  • Improvement: Compatibility for Remote Elasticsearch version 8.8.2.

1.13​

1.13.2 - June 14, 2023​

Zenconsole

  • New Feature: Users can now easily update their email addresses directly from the Management Portal in Zenconsole, providing flexibility and convenience in account management.
  • New Feature: Account owners can now conveniently view their credit balance in Zenconsole, providing better visibility and control over their subscription and usage.
  • Improvement: In Zenconsole, the new policy status will now be set as "active", ensuring that newly created policies are immediately effective in protecting the network.
  • Bug-Fix: Users can now add IPv4 after adding IPv6 into policy configuration, allowing for flexible and comprehensive policy enforcement for both IP versions.
  • Bug-Fix: In Zenconsole, the bypass code for Alcohol and Tobacco category now appears correctly and separately, providing more accurate and granular control over content filtering and access policies.

Agent

  • Improvement: The Agent now detects old OPNsense versions for which there is no package and warns the user, preventing potential update loops and ensuring a smooth update process.
  • Bug-Fix: Wrong Elasticsearch Version Detection issue has been resolved, ensuring accurate detection and compatibility for Elasticsearch, resulting in a smoother user experience.
  • Bug-Fix: The fix of the query error in the localhost table improved data accuracy and reliability.
  • Bug-Fix: Resolved SQLite potential DBLock error, ensuring uninterrupted database access and performance.
  • Bug-Fix: In the Agent module, the issue of not being able to find some query files belonging to newly added charts has been resolved, ensuring proper data retrieval and analysis.
  • Bug-Fix: The Agent module now alters the policy table to accommodate the safe search option during version upgrades, ensuring seamless and consistent enforcement of Safe Search settings across different versions of the software.
  • Bug-Fix: The Agent module now removes non-existent categories from policies, ensuring accurate and up-to-date policy enforcement.

OPNsense GUI

  • Improvement: Engine instance healthcheck sensitivity in OPNsense has been adjusted to prevent false engine down notifications.
  • Improvement: Reporting streaming performance has been improved in Opnsense, allowing users to generate and access reports faster, facilitating better monitoring and analysis of network activities.
  • Bug-Fix: Whitelisted domains are now properly whitelisted from Cloud Queries on OPNsense, reducing false positives and improving the efficiency of web filtering.
  • Bug-Fix: The Zenconsole URL in the Zenarmor install script, which was previously https://sunnyvalley.cloud, has been updated to https://dash.zenarmor.com.
  • Bug-Fix: Enhanced memory management in the engine reduces memory errors and optimizes resource utilization, resulting in a smoother operation of the NGFW system.
  • Bug-Fix: In OPNsense, the bypass code categories now appear correctly, allowing users to effectively manage and enforce bypass rules for specific categories.
  • Bug-Fix: In OPNsense UI, the exempted feature now works properly even if the user's license is downgraded to free and then re-added, providing consistent functionality and security.
  • Bug-Fix: The issue with the empty "Add/Sort Charts" menu in Scheduled Report customization has been fixed.
  • Bug-Fix: OPNsense default reporting criteria is now set to "Volume", providing users with more relevant and comprehensive reporting information.
  • Bug-Fix: The issue with the "Add filter" feature on the Dashboard not displaying the selected value has been resolved. Users can now view the selected value accurately in the filter options.
  • Bug-Fix: When cloning the default policy on OPNsense, the "system" user and group name is no longer directly added to the username and group section, eliminating the issue that prevented the policy from working properly.
  • Bug-Fix: Removal of "Non-existent Domain" and "Bad IP" categories and resolved bugs in various modules ensure accurate and reliable security policy enforcement and reporting.
  • Bug-Fix: In OPNsense UI, the issue of the exempted VLAN ID still appearing after being removed has been resolved, ensuring accurate display and management of VLAN configurations.
  • Bug-Fix: The "Repo not found" issue on OPNsense Business has been addressed, allowing for seamless repository access and updates.
  • Bug-Fix: The export global sites bug in OPNsense UI has been fixed, enabling users to export global site configurations without any issues.
  • Bug-Fix: Custom categories can now be added and seen in the UI on OPNsense, allowing users to tailor the NGFW system to their specific security needs.
  • Bug-Fix: The generated PIN now adheres to the required conditions and is generated correctly.
  • Bug-Fix: The issue which related to Mail server Settings has now been resolved, and the port information is correctly displayed on the page, reflecting the current configuration.

Engine

  • Improvement: New categories from CTI Engines have been added to the Zenarmor's CTI database, enhancing the accuracy and effectiveness of threat detection and prevention.
  • Bug-Fix: Crash caused by insufficient in-memory pre-allocations in low deployment sizes has been fixed.
  • Bug-Fix: This fix ensures that DNS queries are processed correctly and not blocked unnecessarily, enhancing the overall stability and reliability of the engine module.
  • Bug-Fix: Fixed a memory error in the process of clearing the cloud cache. This fix resolves a memory-related issue that could occur during cache clearing, ensuring more reliable and efficient memory management within the engine module.

Platforms

  • Bug-Fix: Compatibility with pfSense CE has been addressed, allowing users of pfSense CE to benefit from the Zenarmor.

1.13.1 - May 8, 2023​

Policies and Filtering

  • Bug-Fix: A bug that causes an error when a custom application was deleted from a policy has been fixed.
  • Bug-Fix: The web filtering issue on non-business licenses has been fixed, ensuring users can now get its full benefits without any issues.

Reporting

  • Bug-Fix: MongoDB - SQLite reporting database problem that causes some values to disappear is fixed.

Zenconsole

  • Bug-Fix: Zenconsole's filter window visual bug has been fixed, improving the user experience.

OPNsense GUI

  • Bug-Fix: Some typos have been fixed.
  • Bug-Fix: An issue with Trial - I will do it later button on OPNsense initial configuration wizard has been fixed.

1.13 - May 4, 2023​

Policies and Filtering

  • New Feature: Enforcing Safe Search feature has been implemented for popular search engines like Google, Bing, Yahoo!, and YouTube for safer browsing experience.
  • New Feature: Adding Bright Cloud TI for enhanced threat intelligence and detection capabilities.

Platforms

  • New Feature: FreeBSD 14 support has been added, ensuring compatibility with the latest operating system version.

  • Improvement: Linux NFQ: Engine now includes the ability to use user-defined iptables rules, providing customization options for network configuration.

Cloud Agent

  • Improvement: Agent ES Indices now include FW ID prefix, improving data organization and indexing.

  • Improvement: Improvement for deployment mode changes in the event logs, so you can easily track and monitor changes to your system's deployment settings.

  • Bug-Fix: Resolved a issue with policy filtering in MongoDB, ensuring that policy settings are accurately applied and enforced.

  • Bug-Fix: Resolved an issue where users were unable to see the name of the cloned policy in the reports, ensuring that policy management is more efficient and transparent.

  • Bug-Fix: Fixed an edge case problem causing zenarmor-agent to produce zombie processes, ensuring smooth and efficient operation of the software.

  • Bug-Fix: Query results now return meaningful messages instead of "There is No data to display", improving user feedback and experience.

  • Bug-Fix: Resolved an issue where the Block page was not returning any results.

  • Bug-Fix: Fixed error in adding firewall for pfSense for smoother operations.

RestAPI

  • New Feature: Agent now includes endpoints for creating custom chart queries via RestAPI for more flexibility in data analysis.

  • Improvement: RestAPI now supports Custom Chart Query for customized data analysis and visualization.

  • Bug-Fix: Implemented field validation for the SetWholePolicy endpoint, ensuring that policy settings are properly validated for accuracy and consistency.

  • Bug-Fix: API now includes a mapdirectoryuser endpoint for directory connector, enhancing user enrichment capabilities.

OPNsense GUI

  • New Feature: OPNsense UI now includes a search feature for application and web categories, improving policy management and search capabilities.

  • Improvement: Reports now clearly distinguish between local and remote sessions for accurate analysis.

  • Improvement: Improved error handling in the engine, ensuring that any errors are handled smoothly and effectively for a more reliable user experience.

  • Improvement: Users can now upload their own CA certificate/key for convenience and enhanced security.

  • Improvement: OPNsense UI has been improved to deny 0.0.0.0/0 entry to the Exempted Networks, enhancing security and preventing potential unauthorized access.

  • Improvement: OPNsense GUI has been adapted to new aliases and prefixes, improving usability and consistency.

  • Improvement: Interface offload features in OPNsense now check for individual interfaces, improving performance and stability.

  • Bug-Fix: An issue with the activity explorer's date has been resolved, ensuring that it displays the correct information for improved accuracy and and usability.

  • Bug-Fix: An issue with the value displayed in the Egress New Connections by Source Over Time report has been fixed.

  • Bug-Fix: An issue where captive portal users were unable to connect has been resolved.

  • Bug-Fix: An issue related to the color of info icons in the Essential Security section, showing it as active when a policy is created, has been fixed.

  • Bug-Fix: An issue where the last menu tab remained active after clicking on the configuration menu has been fixed.

  • Bug-Fix: The status of Enable Cloud Management has been fixed as active after registering in the cloud.

  • Bug-Fix: The issue with default settings not working properly in the Add & Sort Charts menu has been resolved, ensuring that charts are displayed as expected.

  • Bug-Fix: A problem with the MongoDB session detail filter has been fixed, ensuring that filtering functions properly for improved data management.

  • Bug-Fix: An issue in the User Enrichment feature of the Active Directory Agent (ADA) has been resolved, ensuring that user enrichment functions accurately and reliably.

  • Bug-Fix: The issue with the cryptodev.ko module causing database opening errors has been resolved.

  • Bug-Fix: An issue where applications were not being blocked when the proxy was active on OPNsense has been resolved.

  • Bug-Fix: Fixed a typo in the "heartbeat" command, under "System-Settings-Cron >>Edit Commands"

  • Bug-Fix: Resolved a bug that caused core files to be generated incorrectly, ensuring that your system operates smoothly and efficiently.

  • Bug-Fix: Properly checking duplicate IP/Domain entries in Exclusions

  • Bug-Fix: Fixed an issue where OPNsense Aliases were still being used even when they were disabled, ensuring that your policy settings are accurately applied.

  • Bug-Fix: Improved consistency in policy status between Zenconsole and OPNsense-UI, ensuring that you have a clear and unified view of your policy status across different interfaces.

  • Bug-Fix: Fixed a problem with installation in version 23.5, ensuring that the installation process is seamless and error-free.

  • Bug-Fix: Notification about expired license was displaying incorrectly. This has been resolved, ensuring accurate license status notifications.

  • Bug-Fix: Maximum number of days to store reporting data now stays at the default value of greater than 7 days, providing optimal data retention for reporting purposes.

  • Bug-Fix: Exclusions in OPNsense now correctly display existing domains, resolving an issue with non-existent domains being incorrectly shown as already existed.

  • Bug-Fix: The full screen displaying issue with PDF Reports is fixed.

  • Bug-Fix: Whitelist edit button in OPNsense UI is now active, allowing easy editing and management of whitelisted items.

  • Bug-Fix: OPNsense UI has been enhanced to check VLAN Hardware filtering under interface settings, ensuring optimal network configuration.

  • Bug-Fix: OPNsense UI is now compatible with Elasticsearch 8.6.1, improving integration and data analysis capabilities.

  • Bug-Fix: Customer ID has been added to Elasticsearch index names for multi-tenant deployments

Zenconsole

  • New Feature: Zenconsole now features a Restart button in the Cloud Agent section for easier management.

  • New Feature: Zenconsole now supports scheduled reports for automated and timely delivery of important information.

  • New Feature: Cloud Portal Bug Report feature is now available for users to report and track bugs for timely resolution.

  • New Feature: Now, Zenconsole has the ability to reset reporting, giving you a fresh start and allowing you to easily manage and analyze your network data.

  • Improvement: The policy order has been aligned with OPNsense, ensuring that policies are consistent across different interfaces for easier management.

  • Improvement: User experience improvements have been made on the data management page to make it more intuitive and user-friendly.

  • Improvement: Zenconsole now includes a Description field for Exclusions, allowing you to provide additional context and information for your exclusion rules.

  • Improvement: You can now stream reporting data to your own syslog server, improving data collection and analysis capabilities.

  • Improvement: Now Zenarmor has the option to make CPU pinning optional, giving you more flexibility in how you configure your system for optimal performance.

  • Improvement: The warning message of disallowed IPv4 entry in the exempted networks has been updated.

  • Improvement: Zenconsole now prompts users to update payment method and pay any due invoices for enhanced billing management.

  • Improvement: Zenconsole now provides special care for WAN interfaces for preventing to remove the WAN interface from the protected list.

  • Improvement: Zenconsole has fixed the issue of displaying incorrect values in the Protocol column of Live Sessions > Connections Report for accurate reporting.

  • Improvement: Added Rocky Linux logo for improved visual representation.

  • Improvement: Added a new filter with cloud policy ID, making it easier for you to filter and analyze live session data based on policy settings.

  • Bug-Fix: Zenconsole now includes a filtering option for Policies, App, and Web Categories in Reports and Live Session Explorer for easy data analysis.

  • Bug-Fix: Zenconsole has resolved the pagination problem in Live Sessions for smooth navigation and user experience.

  • Bug-Fix: Fixed an issue about filtering in Reports and Live Session Explorer by Policy for efficient data analysis and reporting.

  • Bug-Fix: Fixed a color mismatch issue for line charts, ensuring that the visual representation of your data is accurate and easy to understand.

  • Bug-Fix: Fixed an issue where the notification page didn't load properly when there was no firewall registered, ensuring that you can easily access and manage your notifications.

  • Bug-Fix: An issue where WAN tag assignment was not working properly on Linux bridge interfaces has been resolved, ensuring that network configurations are accurately applied.

Packet Engine

  • New Feature: Landing page now allows users to whitelist sites on the fly with PINs for more convenient access.

  • Improvement: Zenarmor now provides improved error information for NFQ interface types, offering users enhanced context and details for better troubleshooting.

  • Bug-Fix: Fixed an issue causing TLS landing pages not being displayed for some websites

  • Bug-Fix: Engine now displays valid policy names in reports for improved visibility and analysis.

  • Bug-Fix: Engine now correctly matches hostnames with existing domain whitelist entries for accurate policy enforcement.

  • Bug-Fix: Engine has resolved the use-after-free issue in DNS enrichment for improved stability and security.

  • Bug-Fix: Added support for usernames consisting of multiple words, making it easier for you to track and manage user activity in your network.

  • Bug-Fix: Fixed an issue in the QUIC classifier causing some STUN traffic to be mis-classified as QUIC

  • Bug-Fix: Fixed a file descriptor leak which was triggered by some edge cases

  • Bug-Fix: An edge case has been properly handled to correctly log block logs, ensuring accurate logging and reporting.

  • Bug-Fix: Engine has been fixed for RHEL build, ensuring compatibility with Red Hat Enterprise Linux.

1.12​

1.12.4 - January 26, 2023​

OPNsense GUI

  • Improvement: OPNsense 23.1 MongoDB compatibility support.

1.12.3 - January 4, 2023​

OPNsense GUI

  • Improvement: "Full Help" is added to the Essential Security tab.

  • Improvement: Username and Groupname lookup from OPNsense and Active Directory is removed in Policy Configuration.

  • Bug-Fix: Bandwidth usage calculation is corrected in Local Host Reports.

  • Bug-Fix: The issue of listing sessions with empty GEOIP information in session explorer has been resolved.

Zenarmor Agent

  • Bug-Fix: Resolved issue with zombie processes.

1.12.2 - December 26, 2022​

OPNsense GUI

  • Improvement: Blocked domain information is added to session details for DNS blocks.

  • Improvement: Enhancement on Session Details page in MongoDB deployments.

  • Bug-Fix: DNS resolution conflict when using Unbound DNS has been resolved.

  • Bug-Fix: Node Registration failed error when trying to re-register the node has been resolved.

  • Bug-Fix: The config history is optimized for small changes.

  • Bug-Fix: Cloud Sync issue due to "Http Error Code is 404" is fixed.

  • Bug-Fix: Parsing notification messages problem has been resolved.

  • Bug-Fix: The frequency and number of notification messages are optimized in logs.

  • Bug-Fix: Uninstall command waits for the engine stop and remove the old configurations now.

  • Bug-Fix: "Cannot read any configuration from workers.map" issue is fixed by optimizing workers map loading process.

Zenconsole

  • Improvement: Zenconsole 2FA Process is improved.
  • Bug-Fix: Running firewall's micro charts' visibility issue is fixed.
  • Bug-Fix: After updating packet engine and get success message, update button was still available , issue is fixed now.

Packet Engine

  • Bug-Fix: Policy ordering has been re-visited to honor policy order in Zenconsole as well.
  • Bug-Fix: Local domain names like .local, .lan, .arpa is added to whitelist to exclude from cloud queries.

1.12.1 - November 16, 2022​

OPNsense GUI

  • Improvement: Preallocated netmap buffers have been adjusted and decreased to save memory

  • Bug-Fix: DNS and User Enrichment settings are now enabled by default.

  • Bug-Fix: Reports : Time filtering option is improved.

  • Bug-Fix: OPNsense: An invalid HA Backup Host URI is fixed which was causing "Unauthorized" errors on HA Master.

  • Bug-Fix: OPNsense GUI: Warning message is added if HA Backup License does not exist.

  • Bug-Fix: OPNsense GUI: Capital letters are now allowed for user and group names.

  • Bug-Fix: Landing Pages: TLS CA certificate can be downloaded from OPNsense UI.

  • Bug-Fix: Reports : OPNsense : Reports : Date format is fixed in PDF Reports.

  • Bug-Fix: More descriptive engine error/warning notifications in the OPNsense UI/Zenconsole.

Zenconsole

  • Improvement: Zenconsole: Tag objects are displayed in a more user-friendly fashion.

  • Improvement: My Account : User experience has been improved on the Referrals page.

  • Improvement: Engine status on/off confirmation has been introduced to avoid the user accidentally clicking the buttons.

  • Improvement: In the Policy Configuration page, the MAC address input form has been improved to have a description field for the MAC address.

  • Bug-Fix: CIDR notation is now a valid option for Policy IP Address Criteria.

  • Bug-Fix: IP/network description in the policy configuration is improved for a better user experience.

  • Bug-Fix:Confirmation box is added to remove a domain from cloud threat intelligence exclusion list.

  • Bug-Fix: Zenconsole: Firewall Settings: Firewall Name is now limited to 30 characters.

  • Bug-Fix: Viewer Role can not modify Engine Status now.

Packet Engine

  • Improvement: Zenarmor now warns you if you have interface hardware offloading enabled since hardware offloading is not compatible with netmap.

  • Bug-Fix: Issue about further DNS resolutions being dropped when there are many unknown sites has been resolved.

  • Bug-Fix: NFQUEUE: Fixed packet direction in multi-homed routed deployments

  • Bug-Fix: Ad blocking database is improved with many new additions.

1.12 - October 26, 2022​

Zenconsole

  • New Feature: Block Notification Page is now displayed for TLS-secured blocked sessions.

  • New Feature: Granual Roles for Team-based Firewall Management: You can share the firewall management with your team mates with granual access levels (Owner, Admin, Operator, Viewer).

  • New Feature: Privacy: Zenarmor users now have the ability to manage all aspects of their privacy settings. A dedicated Privacy Menu allows users to control their privacy posture.

  • New Feature: All Free Trials are now 15 days.

  • New Feature: You can now clone a policy to a different firewall. This allows you to save time creating while creating initial policy configuration for a new firewall.

  • New Feature: Zenconsole now reports disk utilization seperately for each partition on the platform.

  • New Feature: "Clear Cloud Cache" button is is introduced for clearing the cloud threat intelligence in-memory cache. This will force zenarmor to refresh its cache.

  • New Feature: A newly introduced "Magnify icon" in Live Sessions Explorer Page allows you to display a very detailed view of per-session details.

  • New Feature: You can now exempt specific VLANs/Networks from any Zenarmor Processing (was already available in OPNsense GUI).

  • New Feature: Firewall Location is now displayed in Firewall Details Page.

  • New Feature: You can exclude Local Domains from Reports. This will enable you to easily filter and Internet-bound connections.

  • New Feature: You can now Enable / Disable Health Checks on Zenconsole.

  • New Feature: You can now Enable / Disable System Utilization statistics sharing.

  • New Feature: You can configure "Maximum Days of Keeping Reporting Data" setting to optimize your disk space.

  • Improvement: You can now enable/disable the use of Cloud Threat Intelligence via Zenconsole.

  • Improvement: Firewall Delete now requires the user to re-authenticate, preventing the possibility of stale sessions being used by unauthorized users.

  • Improvement: In case of Zenconsole connection problems, Zenconsole now directs users to the relevant documentation for troubleshooting.

  • Improvement: Engine Bypass button is added next to the Engine On/Off Button for improved user experience.

  • Improvement: Zenconsole now warns you if you have Javascript disabled. Javascript is needed for the correct operation of Zenconsole.

  • Improvement: Login page requires a re-captcha after a few failed login attempts.

Platforms

  • New Feature: Rocky Linux is supported by Zenarmor now.
  • New Feature: RHEL Linux is supported now.
  • New Feature: Amazon Linux is supported now.
  • New Feature: Ubuntu 22.04.1 LTS (Jammy Jellyfish) is supported now.

OPNsense

  • New Feature: Reset Reporting now -optionally- re-installs Reporting DB.

OPNsense GUI

  • New Feature: Initial Configuration Wizard allows you to start a 15 Days Business Subscription Trial. No Credit Card Needed.
  • New Feature: To give custom access Giving " Reporting Only " privilige feature is added to OPNsense user priviliges page.
  • Improvement: Improved Policy Synchronization performance.
  • Improvement: OPNsense GUI: Competibility issues are fixed for php74-phalcon 5.0.

RESTful API

  • New Feature: New API Endpoint: setpolicystatus: activate/deactive a single policy.
  • New Feature: Policy Exclusion API Endpoint is introuduced to manage policy exclusions.
  • Improvement: RESTful API can now be used for querying/setting all parameters of a policy.

Configuration

  • New Feature: You can now deploy Zenarmor in L2 Bridge Mode in Linux Platforms. This allows you to deploy zenarmor as a Secure Web/Access Gateway between two physical networks.

Packet Engine

  • Improvement: Minimize interface up/down events during engine startup/shutdown.

Reporting

  • New Feature: Zenarmor is compatible with Elasticsearch 8.3 now.

1.11​

1.11.5 - September 22, 2022​

Zenconsole

  • Bug-fix: Fixed Remote Elasticsearch Service status.

Licensing

  • Bug-fix: Fixed Can not validate license key after OPNsense update.

Reporting

  • Bug-fix: Fixed Elasticsearch database blank report charts.

1.11.4 - July 27, 2022​

OPNsense GUI

  • Bug-fix: Compatibility release for OPNsense 22.7.
  • Bug-fix: Fixed libpython3.8.so.1.0 dependency warning.

1.11.3 - July 7, 2022​

OPNsense GUI

  • Bug-fix: Compatibility release for OPNsense 22.1.10.
  • Bug-fix: Fixed a warning in HA menu.

1.11.2 - May 9, 2022​

Zenconsole

  • Improvement: Re-implemented engine to cloud agent communication to avoid problems due a third party module
  • Bug-fix: Fixed: Cloud agent now properly restarts packet engine after registration
  • Bug-fix: Fixed: Occassional Network error while switching between live sessions tabs
  • Bug-fix: Fixed synchronization of DNS Enrichment configuration setting with Cloud Management
  • Bug-fix: Fixed a time localization problem which was causing some data to appear late in Zenconsole Reports

Policies and Filtering

  • Bug-fix: Fixed time schedules
  • Bug-fix: Fixed Global Whitelisting for Centralized Policies
  • Bug-fix: Restrict updating Centralized Policies via OPNsense UI (Centralized policies are meant to be managed through Zenconsole)
  • Bug-fix: Properly reset all cloud policy IDs during un-register so that subsquent policy synchronizations do not fail
  • Bug-fix: Fixed missing default policy in new platforms (Linux + FreeBSD)

Uninstall

  • Bug-fix: zenarmorctl uninstall properly stops all services before removing packages

Reporting

  • Improvement: Added "Web Categories" chart to Web Reports
  • Bug-fix: Fixed missing "Top Remote Hosts" chart in SQLite-based installations

OPNsense GUI

  • Bug-fix: Fixed missing Zenarmor menu issue due to improper handling of OPNsense User Priviliges Setting
  • Bug-fix: Added missing Time schedule information in Policy Details/Live Session Explorer

1.11.1 - April 15, 2022​

Zenconsole

  • New Feature: Cloud Portal: New payment method: WeChat Pay
  • New Feature: Cloud Central Management: Ability to share firewalls with free edition or home subscription
  • Bug-fix: Live Session Explorer: Fixed drill-down according to MAC addresses
  • Bug-fix: OPNsense UI: Fixed Safari browser compatibility issue
  • Bug-fix: OPNsense UI: Fixed backup compatibility issue with early versions

Packet Engine

  • Improvement: New platforms: Uninstall Script now removes sensei-db folder and sunnyvalley repository

Licensing

  • New Feature: You can start Free Trials without providing a Credit Card

Reporting

  • Bug-fix: OPNsense UI: Fixed Top Remote Ports displaying erronous information
  • Bug-fix: OPNsense UI: Fixed Top Blocked Hosts report so that it only shows blocked sessions (MongoDB backend)
  • Bug-fix: OPNsense UI: Fixed search by Destination Hostname (MongoDB Backend)

Configuration

  • Improvement: Opensense UI: Scheduled Reports: From e-mail address is now mandatory
  • Bug-fix: HA incompatibility with OPNsense 22.1 has been resolved
  • Bug-fix: Opensense UI - Installation Wizard: Multiple Deployment Size selection problems are resolved
  • Bug-fix: "Anonymize Local IP" configuration setting default value is set back to disabled.

1.11 - March 31, 2022​

Cloud Threat Intelligence

  • New Feature: Realtime Cloud Threat Intelligence gains support for Botnet Detection
  • Improvement: Realtime Cloud Threat Intelligence gains support for IP/Network based Threat Intelligence

Cloud Central Management

  • New Feature: App controls: search widget now displays the related app category name while searching for apps

  • New Feature: CIDR / Subnet mask notation support for the exclusions

  • New Feature: Live Session Explorer: Ability to Pin/Unpin a record to the top of the page

  • New Feature: Notifications: Ability to delete all read messages

  • New Feature: Live Session Explorer: Ability to copy a single record to the clipboard

  • Improvement: "Cancel" button is added for custom time ranges in reports/live session explorer

  • Improvement: A top of the page widget displaying the status summary for all firewalls

  • Improvement: DNS Reverse IP Enrichment configuration can now be done through the Cloud Portal

  • Improvement: Event log details have been moved to a right sidebar for better user experience

  • Improvement: Firewall status page: Service Actions (start/stop/bypass) have been made more visible

  • Improvement: No items to display message added to Live Sessions, All Firewalls and Firewall Sidebar

  • Improvement: Policy Details screen has been optimized for Full-HD displays

  • Improvement: Notification details have been moved to a right sidebar for better user experience

  • Bug-fix: Central Policy Exclusions: avoid duplicate entries

  • Bug-fix: Time range message is now properly displayed on custom time range for reports/live session explorer

  • Bug-fix: Live Session Explorer - Destination Port Filtering issue is fixed

Cloud Portal

  • Improvement: 2FA authentication page also displays the Base64 code string as well as the QR image

  • Improvement: While assigning user rights for subscriptions, you can now select multiple subscriptions.

Application Database

  • Bug-fix: Fixed application database updates for the Linux platforms

Integrations

  • New Feature: RESTful API for integrations (Beta)

OPNsense GUI

  • Improvement: A cloud icon will be displayed for re-synchronizaiton if the OPNsense UI cannot synchronize the policy
  • Improvement: A new "re-register" button in cloud management configuration tab
  • Improvement: An informative message will notify you if you have RSS (Receive-Side-Scaling) enabled
  • Improvement: If an interface is removed from the OPNsense configuration, Zenarmor health check will also remove the interface from its own configuration
  • Improvement: OPNsense UI now notifies you when the packet engine is in 'stopped' status
  • Bug-fix: Custom Web Category: Tip box is now displayed properly for "Download List" button
  • Bug-fix: Fixed an irrelevant warning message for MAC based filtering policies
  • Bug-fix: Fixed shaky charts in QHD displays
  • Bug-fix: Help text is now displayed properly on General -> Exempted vlans & Networks pane
  • Bug-fix: OPNsense Captive Portal: a compatibility problem is fixed
  • Bug-fix: Reports: tls/web: fixed drill down for "BLANK" web category
  • Bug-fix: Some cosmetic UI bugs are fixed for better user experience
  • Bug-fix: Some fields (Block Message, Block Category) which were missing on blocked session details pane are now correctly displayed
  • Bug-fix: Time schedules input validation has been improved
  • Bug-fix: TLS Live Session Explorers: Refresh button properly handles refresh intervals
  • Bug-fix: Deployment size now displays the correct deployment size for Home Subscriptions

Packet Engine

  • Improvement: Default swap utilization warning threshold bumped to 50% utilization
  • Improvement: Engine restart confimation added to the re-registration process
  • Improvement: Engine service auto-starts during re-register process
  • Improvement: Integration: Wireguard: service scripts makes sure wireguard service runs first during the boot process
  • Improvement: Interfaces in DOWN status are not displayed for interface configuration
  • Bug-fix: Correctly honor the Data Retention period for Elasticsearch Backend

Platforms

  • New Feature: New Reporting Backend: SQLite as another light-weight database backend option (for up to 100 devices)
  • New Feature: Ubuntu 21 support
  • Improvement: Debian 11 support
  • Improvement: Zenarmor HA configuration is now compatible with opnsense 22.1.x
  • Bug-fix: You can now protect multiple interfaces in Linux distributions

Policies and Filtering

  • New Feature: Real-Time Automatic Synchronization of Cloud Policies
  • Improvement: Exclusions Pages now allow you to automatically submit a website for a re-classification
  • Improvement: Filters in the reports are now case insensitive
  • Improvement: Refresh button for the Reports
  • Improvement: Schedule report configuration now validates usernames without the domain part
  • Bug-fix: DNS Explorer: Fixed filters for Destination Host & Port
  • Bug-fix: Fixed erronously deleting Exclusion IPs during Cloud Policy Synchronizations
  • Bug-fix: MAC address validation has been improved to support various notations
  • Bug-fix: Special characters in URL exclusions are now properly handled

Reporting

  • Improvement: Exclusions Pages now allow you to automatically submit a website for a re-classification
  • Improvement: Filters in the reports are now case insensitive
  • Improvement: Refresh button for the Reports
  • Improvement: Schedule report configuration now validates usernames without the domain part
  • Bug-fix: Some cosmetic fixes in PDF reports

1.10​

1.10.1 - Jan 16, 2022​

Application Database

  • New Feature: New Platforms - Application DB auto-updates

Cloud Central Management

  • Bug-fix: OPNsense: Fixed a merging problem while synchronizing Local & Central Policy Global Exclusions

Cloud Portal and Licensing

  • Bug-fix:Fixed duplicate records in Cloud Portal live session explorer
  • Bug-fix: OPNsense: deployment size now shows the correct value (according the license type)

Configuration

  • New Feature: Health checks for Database indexes
  • Bug-fix: YML file creation issue during legacy Elasticsearch installation updates
  • Bug-fix: Incorrect display of OPNsense Cloud Threat Intel Servers's status

New Platforms

  • Debian 11
  • OPNsense 22.x packages are now available for testing

Reporting

  • Bug-fix:Missing TLS charts on Add & Sort Charts list
  • Bug-fix:Flickering charts on QHD Monitors

1.10 - Oct 14, 2021​

Cloud Central Management

  • New Feature: All Firewalls Dashboard to list all connected firewalls displaying their system statuses, threat levels and top bandwidth consumer hosts and applications.
  • New Feature: Get important event notifications and alerts about your firewalls from the Cloud Portal
  • New Feature: Home, SOHO and Business Subscriptions are now available for the new Platforms
  • New Feature: MAC Address based Policies & Filtering
  • New Feature: Attach "tags" to firewalls to group them
  • New Feature: Better error reporting in the Cloud Portal
  • New Feature: Date Range and Total Number of Results added to Live Session Explorer
  • New Feature: Display Release Notes for updates
  • New Feature: Drill-down filters are now global. Same filtering criteria is persistent for both Live Session Explorer and Report Widgets
  • New Feature: Firewall hostname changes are instantly updated to the Cloud Portal
  • New Feature: If new app signatures are available, portal will notify you to update to the new release
  • New Feature: Interface Configuration now allows you to set the security zones (wan, lan, dmz...) for each of the interfaces
  • New Feature: Manual drill-down filters
  • New Feature: New filters for "hide local connections", "hide blocked connections"
  • New Feature: New screen themes for Cloud Portal: Dark, Light or Automatic (auto-selected according to your browser preferences)
  • New Feature: Search firewalls by name, ip and tag
  • New Feature: You can now set deployment size through the Cloud Portal
  • New Feature: You can start/stop/bypass packet engine from the All Firewalls Dashboard
  • New Feature: PDF and CSV Exports for Live Sessions Explorer and Reports
  • New Feature: Central policy global exclusions
  • Improvement: Automatically avoid duplicate records for VLAN, IP/Networks, Mac, Users, Groups
  • Improvement: Policy configuration now displays the number of blocked/allowed apps in each app category
  • Improvement: Updates now has a better progress indicator
  • Bug-fix: Token expired issue fixed in the Cloud Portal

Reporting

  • New Feature: Auto-delete elasticsearch system logs older than a week
  • New Feature: Better DNS Enrichment: IPv6 host addresses are now mapped to a hostname through MAC DNS enrichment
  • Improvement: Mongodb database performance tweaks
  • Bug-fix: Reporting: IPDR streamer file descriptor leak is fixed

Configuration

  • New Feature: L2 Bridge Mode - Deploy as a Secure Web Gateway alongside another firewall (L2 Bridge)
  • New Feature: Logging Level and Log rotation time can be configurable from the UI now.
  • Improvement: Configuration > About > View now shows the both subscription states (both installed/purchased)

Integrations

  • Bug-fix: AD Agent exclusion error fixed

Policies and Filtering

  • New Feature: Live Sessions Explorer Quick Actions: Hostname is now the default selection for quick Allow/Block operations (instead of category)
  • Bug-fix: Web Controls - Preset Profile Name not changing in the OPNsense Menu
  • Bug-fix: Fixed Block Details in Live Session Explorer on OPNsense GUI

Platforms

  • New Feature: Linux platforms can now use NFQ packet I/O mechanism as an alternative to netmap
  • Bug-fix: Centos 8: Fixed cloud agent migration error

Others

  • New Feature: New product name "Zenarmor" is now displayed in the user interfaces

1.9​

1.9.3 - July 25, 2021​

Integrations

  • Improvement: OPNsense 21.7 compatibility enhancements

1.9.2_1 - July 7, 2021​

A hotfix for compatibility for OPNsense 21.1.8. This fixes the database service being falsely reported as not running.

1.9.2 - July 6, 2021​

Attention all OPNsense users:

As the second phase for their migration to PHP 7.4, OPNsense will release 21.1.8 this week, upgrading its PHP software to version 7.4. This leaves some compatibility issues with Sensei 1.9.1 and prior releases.

Sensei 1.9.2 addresses this compatibility issues and it is compatible both with OPNsense 21.1.8 and the current and past 21.1.x releases.

You can install Sensei 1.9.2 now or let the OPNsense 21.1.8 updater do the job for you automatically. It will also update Sensei to 1.9.2 release as part of OPNsense 21.1.8 upgrade process.

We would like to thank OPNsense team for their cooperation to make this a smooth transition for Sensei users.

Cloud Central Management

  • New Feature: Policy Configuration: Both netmask and CIDR notation is allowed.
  • New Feature: Central Live Session Explorer for all managed firewalls .
  • Improvement: Auto scroll to top when query data gets an update.
  • Improvement: New Release notifications now have the "Update" button. Clicking on "Update" will start the update process..
  • Improvement: Added manual refresh option to refresh reports within a custom date range.
  • Improvement: Added custom date ranges
  • Improvement: Subscription updates are immediately reflected on the cloud portal
  • Bug-fix: Fixed cloud registrations which failed due to duplicate system id.

Backup & Restore

  • New Feature: Backup files can be restored via CLI on the console.

Integrations

  • Bug-Fix: OPNsense 21.1.8 php7.4 compatibility enhancements
  • Bug-Fix: OPNsense: Fixed os-sensei package contents mismatch error due to the newly introduced cloud policy id.

Reporting

  • Bug-Fix: Fixed VLAN drill-downs
  • Bug-Fix: SQLite Reporting Database tables are now retired automatically.
  • Bug-Fix: Remote Elasticsearch: reset reporting database configuration whenever ES is re-installed.

1.9.1 - June 15, 2021​

Attention all OPNsense users:

OPNsense will release 21.1.7 this week, upgrading its Phalcon library to version 4. This leaves some compatibility issues with Sensei 1.9 and prior releases.

Sensei 1.9.1 addresses this compatibility issues and it is compatible both with OPNsense 21.1.7 and the current and past 21.1.x releases.

You can install Sensei 1.9.1 now or let the OPNsense 21.1.7 updater do the job for you automatically. It will also update Sensei to 1.9.1 release as part of OPNsense 21.1.7 upgrade process.

We would like to thank OPNsense team for the timely heads-up and for their cooperation to make this a smooth transition for the Sensei users.

Cloud Central Management

  • New Feature: Live Session Explorer. View real-time connection activity through Cloud-Portal.
  • New Feature: Premium Subscriptions are now available for new platforms (Linux, FreeBSD)
  • New Feature: Cloud Engine Updates now displays "Release Notes"
  • New Feature: Subscriptions tab now displays the number of active devices
  • New Feature: "Remember me" option for Google Authentication
  • Improvement: Connections Report: Default Report Metric is now Volume
  • Bug-Fix: Top Block Reports bug resolved.
  • Bug-Fix: Time Overlapping issue in Home Throughput graphs resolved.
  • Bug-Fix: Reporting: Exclude filters bug resolved for report charts.
  • Bug-Fix: FreeBSD: Cloud Registration error because of concurrent SQlite access fixed.
  • Bug-Fix: Reporting: Added "interface" information for UDP flows.
  • Bug-Fix: Fixed the "exclude" functionality for DNS - Query Types Tag Cloud Report.

Reporting and Policies

  • Bug-Fix: Policies: Custom applications not appearing in the Applications tab.
  • Bug-Fix: Web Reports Live Explorer now has the "URL" column by default
  • Bug-Fix: Fixed an incompatibility issue with some themes (on "Cloud Threat Intel" tab)

Platforms.

  • Improvement: OPNsense 21.1.7 Release compatibility due to Phalcon 4 update.
  • Bug-Fix: Centos: Invalid Serial ID problem fixed.
  • Bug-Fix: Start-on-boot problems fixed for Linux-based platforms.
  • Bug-Fix: Installer checks if the OS has "sudo" command and asks to install first if not found.

Active Directory Agent

  • New Feature: AD Agent: Ability to set Logging Levels.
  • Improvement: AD Agent: Logs older than 7 days are deleted.
  • Improvement: Service Status Button updated to better display the active status.

Other

  • Improvement: New Documentation URLs have been updated throughout the whole User Interface.

Uninstall

  • New Feature: "senseictl uninstall" command line option introduced to uninstall all Sensei software.

1.9 - May 27, 2021​

New Platforms

  • FreeBSD 13

  • AlmaLinux 1

Cloud Central Management

  • New Feature: Centralized policy management of firewalls

  • New Feature: Per-firewall policy management

  • New Feature: Whitelist/blacklist exclusions

  • New Feature: Automatic policy synchronizations between on-prem and cloud.

  • New Feature: Policy Restore Points to backup and restore policy configurations

  • New Feature: Remember me option is added for Two Factor Authentication (2FA).

  • Improvement: Both purchased and installed Subscription information is displayed. You’ll get a warning if they are not the same.

  • Improvement: CPU information is now displayed in the CPU widget.

Policies

  • New Feature: You can now whitelist/blacklist IP/Network Addresses (CIDR format is accepted)

  • Improvement: Blacklists / Whitelists have been moved to a dedicated tab in Policy Configuration for better user experience

  • Improvement: Whitelist/Blacklist now takes precedence over Application Controlrules

  • Improvement: Policy Configuration: Time Schedules are now a distinguishing criteria between otherwise two identical policies.

Installation.

  • Bug-Fix: Elasticsearch service refusing to start due to an old config file.

  • Bug-Fix: Duplicate dependency error for the java packages is fixed.

  • Bug-Fix:Cloud node status info doesn’t appear in the wizard.

Reporting

  • Bug-Fix: Chart error in Interfaces & VLANs report fixed.

  • Bug-Fix: Live Blocked Session Explorer - Live Security Events Monitor filter area

  • Bug-Fix: Report filters appearing multiple times.

Configuration

  • Improvement: Batch blacklist/whitelist import from file: can now filter out invalid IP / Domain values.

  • Improvement: Cloud Threat Intel: You can now define multiple local domain to be excluded from cloud queries.

  • Improvement: Wizard: Stay in touch: Email address now uses a better regex filter to filter out fake domains.

  • Improvement: Child VLAN interfaces can be added along with their parent interfaces. You’ll now get a warning if we suspect a netmap incompatibility.

  • Bug-Fix: Missing cloud nodes status check is fixed.

  • Bug-Fix: Stream to the Elasticsearch: Empty values are properly handled and accepted where allowed.

Others

  • Improvement: Heartbeat mechanism now utilizes a more improved algorithm to handle hypervisor-originated time synchronization problems.

  • Bug-Fix: IMAP classifier error is fixed.

  • Bug-Fix: Empty password issue for encrypted backup file is fixed.

  • Bug-Fix: Sensei and Cloud agent health check error due to a missing file is fixed.

1.8​

1.8.2 - April 1, 2021​

Packet Engine

  • Bug- Fix: Engine is now compatible with wireguard kmod interfaces. The service start problem is fixed.

  • Bug- Fix: Service restart due to IMAP classifier problem is fixed.

Packet Management

  • Improvement: Plug-ins are now compatible with OPNsense's new plug-in system. Plug-in health warnings are handled.

1.8.1 - March 22, 2021​

Installation / Integration

  • Improvement: New OPNsense plugin semantics are adopted. This solves the "misconfigured" plug-in problem.

  • Improvement: Hardware detection timeout is increased to accommodate for low resource hardware.

Cloud Central Management

  • Improvement: Cloud-agent process restarts only after successful upgrades.

Policy

  • Improvement: Cloning of the Default policy is disabled.

  • Bug- Fix: IPv6 wrong policy matching problem is fixed.

  • Bug- Fix: Policy cloning is fixed.

Other

  • Bug- Fix: Handle out-of-bounds condition in DNS Processor.

  • Bug- Fix: High swap usage warning window now correctly shows the actual processes consuming the highest amount of resident memory

  • Bug- Fix: IPDR streamer new file creation error is fixed.

1.8 - March 11, 2021​

New Platforms

  • FreeBSD 11 / 12

  • Centos 7

  • Ubuntu 18.04 / 20.04

  • Debian 9 / 10

  • All these new platforms can be managed alongside OPNsense systems through your single pane of glass: Cloud Portal. Documentation to follow shortly.

Cloud Central Management

  • New Feature: Aggregated Central Reporting of Firewalls

  • New Feature: Grouping and Reporting of Firewalls by Projects.

  • New Feature: Ability to do packet engine updates through Cloud Portal

  • Improvement: Remote Database configuration can be made for a group of firewalls in the Project.

  • Improvement: Node names sorted by node names.

  • Improvement: Performance optimizations for Remote Elastic Database.

  • Bug- Fix: A few Cloud Agent service bugs are fixed.

Updates & Health

  • Improvement: The database version is shortened for convenience.

Reporting

  • New Feature: SQLite backend for low-end systems. (Cloud only for now)

  • Bug- Fix: Allow button problem is fixed in the Threats - Live Security Events Monitor.

  • Bug- Fix: Maximum value limitation for Connections in the Conn-Facts Reports and Schedule Reports is removed and now unlimited.

Configuration

  • Bug- Fix: Exempted Network IP field max character limit extended.

Policy

  • Bug- Fix: Custom Application definitions are now checked for formatting.

  • Bug- Fix: IP / Network field max character limit extended.

Report a Bug

  • Bug- Fix: Crash report creation is fixed.

1.7​

1.7.1 - February 15, 2021​

Cloud Central Management

  • Improvement: Two-factor authentication is made more visible in the Account settings menu.

  • Improvement: During registration, users who are using OPNsense Web UI on "HTTP" protocol are now advised to switch to "HTTPS".

  • Improvement: Metric values are now available with the Reports

  • Bug- Fix: A fix is introduced for a bug that caused some Cloud Registrations to fail.

Active Directory Agent

  • New Feature: AD agent can now stream user/group information to multiple firewalls simultaneously.

  • Improvement: Kerberos Authentications Support

Packet Engine

  • Improvement: Health watchdog value is adjusted to be able to accommodate low-end devices with weak CPU and slow disk speeds (e.g. apu2 devices)

Configuration

  • Improvement: TUN interfaces (Wireguard, OpenVPN) are now re-enabled in the available interface section.

Policy

  • Bug- Fix: A bug while editing a whitelist is fixed.

Report a Bug

  • Bug- Fix: Thank you Screen: bogus meta characters are removed.

1.7 - January 22, 2021​

Cloud Central Management

  • A feature long-awaited by our MSP partners, the First BETA release of Cloud Central Management is available to try with this release. To connect your firewall head to Sensei, Configuration, Cloud Management Portal.

Policy

  • Improvement: In the Free Edition, to provide a consistent User Experience; App, Web, and Security sub-menus have been merged into a "Default Policy".

  • Improvement: Time schedules are now distinguishing criteria for policy definitions. You can now have different policies if their time schedules are different and even all other criteria are the same.

  • Improvement: After an app database update, newly introduced applications can be displayed now. Just click on "Display recently added application only".

  • Bug- Fix: Custom app editing is fixed.

Reporting

  • Improvement: Hide Local Connections and Hide Blocked Connections selection is now remembered.

  • Improvement: IPDR Streamer (Reporting streaming) is now multithreaded and is able to scale to multiple CPUs.

Licensing

  • Improvement: Premium Subscription is renamed as Business Subscription.

  • Bug- Fix: 1000+ license configuration saving problem is fixed.

Enrichment

  • Improvement: Engine and UI communication has been migrated to a unix domain socket.

  • Bug- Fix: CIDR alias entries (/32) are now properly processed.

1.6​

1.6.2 - December 15, 2020​

Reporting

  • Improvement: All domain names are now converted to lower case to avoid duplicate reporting

  • Improvement: MongoDB backend is now able to keep reporting longer than 2 days

  • Bug- Fix: IPv6 matching is fixed for Exempted Networks/IP

  • Bug- Fix: Passive mode in/out stats view is fixed

  • Bug- Fix: IPv6 Top Local Hosts drill-down functionality is restored

Other

  • Improvement: Backup and Restore: handle browser auto-fill for password verification

1.6.1 - October 6, 2020​

Performance

  • Improvement: 2x performance boost with SSL/TLS downloads

Reporting

  • New Feature: Schedule Reports: Option to enable/disable TLS server certificate verification

  • Bug- Fix: Remote Elastic Search authentication problem is fixed

Other

  • Bug- Fix: Backup and Restore: password verification

  • Bug- Fix: Deployment Flavor correctly displayed now - Configuration - General

1.6 - September 17, 2020​

Policies and Content Filtering

  • Improvement: Firstly seen control is now applied only for Web Sites

  • Improvement: OPNSense Management IP Address is whitelisted by default

  • Improvement: The default policy is moved to the end of the policy list to be compatible with the engine policy matching order.

  • Improvement: A Domain can be added as global value to the Whitelist/Blacklist, so affects whole policies.

  • Improvement: Auto White/Block list import/export

  • Improvement: Cloning policies. Start a new policy by cloning an existing one and avoid having to configure all of the policy options.

  • Bug- Fix: Handling the case when a domain is being added to more than one policy

  • Bug- Fix: ccTLDs are better handled.

Reporting

  • Improvement: Top Threat Reports were added

  • Improvement: Show / Hide Local Connections in Reports

  • Improvement: Show / Hide Blocked Traffic in Reports

  • Improvement: Activity Explorer is more efficient with new time grouping and intervals

  • Improvement: Live Session Explorer now displays blocked and allowed connections in different colors so that you can more easily spot blocked connections.

  • Improvement: The number of Unique devices is displayed while purchasing a subscription so that you know which subscription will work for you best.

  • Improvement: It is possible to schedule reports for a specific day and hour and get weekly reports

  • Improvement: You can custom-define your firewall's index prefix in the remote Elasticsearch database so that you can better identify which indexes are for which firewalls.

  • Bug- Fix: SNMP traffic was tagged as QUIC Protocol

High Availability

  • Improvement: Landing pages also get synced to the Passive Nodes

DNS Enrichment

  • Improvement: In-flight reverse DNS queries for unresolved local IP addresses

  • Improvement: OPNSense aliases can now be used for DNS Enrichment

External Reporting

  • Improvement: Syslog Streaming: You can now optionally select which reports are to be streamed to a remote Syslog server (i.e. all reports or just connections, threats, blocks)

Backup Restore

  • Bug- Fix: Fixed restoring only Policies & Rules

Configuration

  • Improvement: Passive Deployment mode is introduced.

  • Improvement: Routed Mode (L3 Mode, Reporting + Blocking) with netmap generic driver is made available for ethernet incompatible interfaces with netmap.

  • Netmap exclusive device access: prevent other applications (e.g. Suricata) to access the interface if sensei is running on the interface. This is to prevent possible network outages in case users start sensei and Suricata on the same interface.

  • Support for VPN connections

  • Vmx and vtnet re-enabled

1.5​

1.5.2 - June 26, 2020​

Cloud Portal and Licensing

  • Cloud Portal is now live!. You can manage your subscriptions from SVN Cloud Portal

  • My Account link added to Sensei UI for easy access to Cloud Portal

  • License Purchase Page now shows the number of unique devices protected so that you can decide on the correct license tier

Policies and Filtering

  • Bug- Fix: policy list not available after a factory reset

  • Bug- Fix: prevent custom web categories to be named as one of the existing SVN category names

  • Bug- Fix: prevent duplicate custom web categories

Application Database

  • Improvement: No need to restart the engine after Application Database Updates

  • Improvement: Application database updated to the latest version

Integrations

  • Bug- Fix: Syslog configuration bug

Other

  • Bug- Fix: cosmetic fixes for vicuna theme

  • Bug- Fix: user enrichment re-enable functionality

  • Other performance and reliability improvements

1.5.1 - June 1, 2020​

Filtering

  • Improvement: Whitelist local domains (.net, .home, .lan etc) and private IP addresses from for Cloud Queries

  • Bug- Fix: Handle floating CDN IP addresses with DNS Enrichment - filtering

Reporting

  • Improvement: User authentication support for Remote Elasticsearch Databases

  • Improvement: Scheduled Reports: Test email now sends an actual report instead of a blank test email

  • Improvement: Scheduled Reports: You can now easily add a chart to the scheduled reports by clicking on the "Envelope" icon on the chart

  • Bug- Fix: Scheduled Reports: Sorting Charts

  • Bug- Fix: Elasticsearch UTF8 encoding problem with remote databases

  • Bug- Fix: Inconsistency with the "Top" records checkbox in Firefox Browser

  • Bug- Fix: DB selection should not be bypassed

  • Bug- Fix: openmap links over HTTPS

Integrations

  • Bug- Fix: Active Directory IPv6 user enrichments

Other

  • Adjust netmap memory according to the available system memory

  • Bug- Fix: Fix a crash at Generic Proxy Parser

  • Bug- Fix: Fix a broken link in Problem Report screen

  • Other performance and reliability improvements

1.5_1 - May 20, 2020​

OPNsense 20.1.7 compatibility patch for MongoDB backend

  • This patch fixes a compatibility issue with OPNsense 20.1.7 if you're using Mongodb

  • Elasticsearch is fine. You might just ignore this update ;)

1.5 - May 7, 2020​

Application Control

Application Database is now a seperate package and can be updated independently and more frequently

  • New Feature: More frequent (e.g. weekly) application database updates

  • New Feature: User-defined application signatures

  • New Feature: Illegitimate Advertising app to block potentially harmful advertising campaigns

  • Improved app detection logic

  • 210+ new applications recognized

Privacy and Compliance

  • New Feature: Ability to anonymize local / remote IP addresses

  • New Feature: Ability to disable Username / DNS enrichments

  • New Feature: Ability to selectively delete reports for specified IP addresses

Policies and Filtering

  • New Feature: Multiple schedules for a single policy

  • New Feature: Tool tips for policy screens

  • New Feature: Policies can now match inbound/outbound flows selectively (You can specify flow direction for Policy Configuration)

  • New Feature: Ordering and prioritizing policies

  • New Feature: Sensei can now inspect and filter Proxy-ed connections (CONNECT method - Not transparent Proxy)

  • Improved Ad Blocking (Especially for Android mobile devices / Google Chrome mobile browsers)

  • Fix: Whitelisting for App Controls issue is fixed

  • Fix: Over-night time schedules

  • Fix: Engine reloading (during rule updates) issue is fixed

  • Fix: Mongodb Backend: Enlarged Charts can now pull data for all "Top" queries

Reporting

  • New Feature: You can now specify an external Elasticsearch instance for the main reporting database

  • New Feature: You can now select the Backend Database Engine during initial configuration

  • New Feature: Scheduled Reports: PDF Reports

  • New Feature: Ability to provide an "exclude filter" for "Add filter" functionality

  • New Feature: Ability to move Reporting Database to a different directory (To be able to move database from a tempfs e.g. /var partition)

  • New Feature: Read-only access to reports: you can now restrict a OPNsense UI user to only be able to view reports (Select Dashboard permission)

  • New Feature: Ability to re-order charts

Cloud

Improved feedback loop for Web Categorization.

When you submit an entry for re-classification we can now re-categorize it within as fast as 10 minutes. Re-categorized web sites may become available via Cloud as soon as 15 minutes. You can submit web sites for re-classification either through Site Classification page on our Web site or through the Sensei UI when you add a site to whitelist/blacklist or to a user defined category.

  • Optimized Cloud Query Caching

  • Fix: case sensitive queries

Integrations

  • Improved MS Active Directory caching performance

Other

  • New Feature: Configuration Backup and Restore

  • New Feature: Health: You can now specify your own threshold for SWAP high utilization ratio

  • New Feature: Health: Check and warn if reporting database is located on a tempfs

  • Improvement: Install/Configuration: You can now re-try hardware compatibility check in case first try fails

  • Other performance and reliability improvements

1.4​

1.4 - February 25, 2020​

High Availability

  • Automatic Sensei configuration synchronization between nodes (Premium feature)

Application Control

  • 74 new applications recognized (mostly for better Ad Blocking)

Cloud

  • Optimized Cloud Query Caching

  • Europe-2 cloud server has been deployed for additional capacity for Europe continent

Filtering

  • Tooltips for policy screens

  • Fixed an issue wherein some rare occasions rules were not communicated with the engine properly

  • Fixed Ad blocking for Android apps

Reporting

  • MongoDB: if indexes are broken, Sensei now tries to automatically fix them before reporting error

  • OPNsense Dashboard Widget: fixed caching bug

  • Fixed custom dates in reporting date filters

  • Fixed a few minor cosmetic issues with cicada theme

Other

  • Health: check and warn if /var directory is mounted on a tmpfs filesystem

  • Health: check and warn if the protected interface has jumbo frames (MTU larger than 1500)

  • Health: if a bypass event occurs due to CPU/Ram/Swap, Sensei now logs the top resource-intensive processes

  • Health: continuously check and warn if any Sensei interface is also in use by Suricata

  • Installer: re-try CPU check if it is not successful for the first time

  • Interface configuration widget Firefox/mobile browser compatibility is re-visited and fixed

  • Other performance and reliability improvements

1.3​

1.3.1 - January 30, 2020​

OPNsense 20.1/OpenSSL compatibility packages for Sensei MongoDB Backend

  • MongoDB backend and OpenSSL: Due to some dependency package upgrades, new MongoDB packages have been built and provided with this release (Because of OpenSSL 1.1.1 migration).

  • MongoDB backend and OpenSSL: Dropped support for OPNsense 19.7.x and prior releases

Reporting

  • OPNsense Dashboard Widget: performance optimizations

  • OPNsense Dashboard Widget: fixed bug occasionally causing raw JSON data appearing in the widget

Other

  • Reporting a bug is now a separate menu. Find it in the upper right-hand corner of the UI (Separated from Contact Sensei Team menu)

  • Interface configuration mobile compatibility is fixed

  • Other performance and reliability improvements

1.3_1 (Patch Level 1) - January 23, 2020​

  • This patch level addresses a browser compatibility issue

1.3 - January 17, 2020​

SOHO Subscription goes live

  • Sensei SOHO Subscription goes live

  • In-App purchase option for all subscription options. You can now purchase all Sensei Subscriptions easily through Sensei User Interface

Filtering

  • New Premium feature: Pause/Resume internet for a policy with a single click

  • User-defined lists: handle subdomain matching more intuitively. If you add domain.com, sensei will match all subdomains under this domain

Reporting

  • New Premium feature: Export PDF: You can export the charts or live session reports as PDF files

  • New Premium feature: Activity Report: A more condensed and brief version of the live connection activity report

  • New Premium feature: Fully Customizable Views. You can now add new fully configurable views

  • Security Reports renamed as "Block Reports"

  • Optimized time-based charts (Mongodb backend)

  • Fixed policy name in Security Reports

Other

  • Contact Sensei Team: improved to share more relevant information during bug-reports

  • Version history now shows feature history for all previous releases

  • API security tokens: ability to remove existing keys

  • Scheduled e-mails: fixed timing bug sometimes causing scheduled emails to fail

  • Wizard: initial configuration wizard now checks if your OPNsense is current and up to date

  • Dropped support for OPNsense 19.1.x and prior releases

  • Other performance and reliability improvements

1.2​

1.2.5 - January 8, 2020​

Important Message

With 1.3 release onwards, Sensei will drop supporting OPNsense releases 19.1.x and earlier. Please update to the latest OPNsense release to avoid any incompatibility issues

Convenience

  • Save Changes button is now more visible for Web/App Controls

Filtering

  • Fix: firewall reboots causing default policy rules being deleted

Reporting

  • Scheduled Reports: errors are now communicated through the user interface

Configuration

  • Fix: deployment size setting

  • Fix: re-assigning network interfaces

1.2.4 - December 27, 2019​

Important Message

With 1.3 release onwards, Sensei will drop supporting OPNsense releases 19.1.x and earlier. Please update to the latest OPNsense release to avoid any incompatibility issues

Premium

  • Fix: Modifying an existing Policy

  • Fix: Deleting Exempt VLAN/Networks

Application Database

  • New app signatures for TikTok, Discord App, GroupMe, Houseparty

Reporting

  • Fix: Drilling down to localhost (specifically IP addresses with hostnames associated with them)

Other

  • Fix: Reset factory defaults also resetting policies

  • Revert: netmap buf_num value to OPNsense default.

  • Other performance and reliability improvements

1.2.3 - December 15, 2019​

Premium

  • Convenience: warning message displayed when allowed number of policies reached for Home Edition

  • Fix: Policy refreshes

Reporting

  • Local Unique Devices information added to Conn - Facts chart in Connections View

  • Auto white/blacklist Hosts: remember user preference (sending categorization feedback)

Other

  • Fix: Increase netmap buf_num value to accommodate both Suricata and Sensei on high-end servers

  • Other performance and reliability improvements

1.2.2 - December 9, 2019​

Premium

  • A reminder message to advise using HTTPS if you're trying to purchase Sensei Premium from HTTP UI

  • Fix: Streaming Data to External Elastic Search Instance: a sanity check for the remote ES URL added

Reporting

  • Fix: Drilling down to BLANK category

  • Fix: Add 50 device option to Mongodb

  • Fix: Drilling down to Policy Session Details

  • Fix: Shortcut to Blocking an individual host/domain

  • Fix: Security Reports: Source GeoIP location fixed

Other

  • MongoDB and other dependency packages have been upgraded to their latest releases for OpenSSL flavor

  • Fix: Suricata interface check restored

  • Fix: Move Stripe JS loading to the "Upgrade Premium" page.

  • Fix: updating to new versions handles user-defined category migration more carefully

  • Other performance and reliability improvements

1.2.1 - December 4, 2019​

Premium

  • A reminder message to advise using HTTPS if you're trying to purchase Sensei Premium from HTTP UI

  • Fix: Streaming Data to External Elastic Search Instance: a sanity check for the remote ES URL added

Reporting

  • Fix: Drilling down to BLANK category

  • Fix: Add 50 device option to Mongodb

  • Fix: Drilling down to Policy Session Details

  • Fix: Shortcut to Blocking an individual host/domain

  • Fix: Security Reports: Source GeoIP location fixed

Other

  • MongoDB and other dependency packages have been upgraded to their latest releases for OpenSSL flavor

  • Fix: updating to new versions handles user-defined category migration more carefully

  • Other performance and reliability improvements

1.2 - November 26, 2019​

Home Premium Subscription

  • Sensei Home Subscription goes live

  • In-App purchase option. You can now purchase Sensei Subscription easily through Sensei User Interface

Performance

  • UI responsiveness has been increased considerably

Reporting

  • Fully Customizable Dashboard. You can now choose which Charts gets displayed in your Sensei Dashboard

  • Scheduled Reports are now available for MongoDB backend

  • Security Reports: "Block Message" added as a filter for Security Reports

  • Bug- Fix: Mongodb autostart problem resolved

  • Bug- Fix: Mongodb backend: Top Destinations Heatmap

  • Bug- Fix: OPNsense Sensei Dashboard Widget fixed to handle an error condition

Other

  • Shortcut to Contact Sensei Team directly and easily from Sensei User Interface

  • A better and user-friendly notification and warning interface

  • Bug- Fix: Handle Hardware Check falsely reporting a low-device in some cases

  • Other performance and reliability improvements

1.1​

1.1_4 (Patch Level 4) - November 19, 2019​

  • This patch level addresses policy sanity check, Elasticsearch and child VLAN issues.

Better low-end device support

  • Minimum RAM requirement lowered to 2GB

  • Support for less powerful CPUs. Try Sensei on your Deciso A10 devices: Yes! with reporting :)

More interface support

  • lagg(4) and bridge(4) interface members can be protected now

  • Interface Configurator now reports "Unassigned" OPNsense interfaces

New Cloud Servers Infrastructure goes live

  • New less-latency cloud servers for US-West, US-East, Asia1, Asia2 and Australia regions

  • New web category/threat intelligence database

  • Improved/faster cloud query mechanism

  • Better availability

  • The status screen now shows uptime in a prettier format

Security

  • Premium: Protection for newly detected malware campaigns (not older than 1 week)

  • Premium: New grey-listing categories for Dead, Newly Registered and Newly Recovered sites

Reporting

  • Reporting Performance Improvements (Reports load faster (a lot faster ;))

Other

  • Shortcut to whitelist/blacklist a domain/host from Live Session Explorers

  • Other performance and reliability improvements

1.1_3 (Patch Level 3) - November 8, 2019​

  • This patch level addresses Elasticsearch and child VLAN issues.

Better low-end device support

  • Minimum RAM requirement lowered to 2GB

  • Support for less powerful CPUs. Try Sensei on your Deciso A10 devices: Yes! with reporting :)

More interface support

  • lagg(4) and bridge(4) interface members can be protected now

  • Interface Configurator now reports "Unassigned" OPNsense interfaces

New Cloud Servers Infrastructure goes live

  • New less-latency cloud servers for US-West, US-East, Asia1, Asia2 and Australia regions

  • New web category/threat intelligence database

  • Improved/faster cloud query mechanism

  • Better availability

  • The status screen now shows uptime in a prettier format

Security

  • Premium: Protection for newly detected malware campaigns (not older than 1 week)

  • Premium: New grey-listing categories for Dead, Newly Registered and Newly Recovered sites

Reporting

  • Reporting Performance Improvements (Reports load faster (a lot faster ;))

Other

  • Shortcut to whitelist/blacklist a domain/host from Live Session Explorers

  • Other performance and reliability improvements

1.1_2 (Patch Level 2) - November 5, 2019​

  • This patch level addresses the Elasticsearch issue.

Better low-end device support

  • Minimum RAM requirement lowered to 2GB

  • Support for less powerful CPUs. Try Sensei on your Deciso A10 devices: Yes! with reporting :)

More interface support

  • lagg(4) and bridge(4) interface members can be protected now

  • Interface Configurator now reports "Unassigned" OPNsense interfaces

New Cloud Servers Infrastructure goes live

  • New less-latency cloud servers for US-West, US-East, Asia1, Asia2 and Australia regions

  • New web category/threat intelligence database

  • Improved/faster cloud query mechanism

  • Better availability

  • The status screen now shows uptime in a prettier format

Security

  • Premium: Protection for newly detected malware campaigns (not older than 1 week)

  • Premium: New grey-listing categories for Dead, Newly Registered and Newly Recovered sites

Reporting

  • Reporting Performance Improvements (Reports load faster (a lot faster ;))

Other

  • Shortcut to whitelist/blacklist a domain/host from Live Session Explorers

  • Other performance and reliability improvements

1.1_1 (Patch Level 1) - November 4, 2019​

Better low-end device support

  • Minimum RAM requirement lowered to 2GB

  • Support for less powerful CPUs. Try Sensei on your Deciso A10 devices: Yes! with reporting :)

More interface support

  • lagg(4) and bridge(4) interface members can be protected now

  • Interface Configurator now reports "Unassigned" OPNsense interfaces

New Cloud Servers Infrastructure goes live

  • New less-latency cloud servers for US-West, US-East, Asia1, Asia2 and Australia regions

  • New web category/threat intelligence database

  • Improved/faster cloud query mechanism

  • Better availability

  • The status screen now shows uptime in a prettier format

Security

  • Premium: Protection for newly detected malware campaigns (not older than 1 week)

  • Premium: New grey-listing categories for Dead, Newly Registered and Newly Recovered sites

Reporting

  • Reporting Performance Improvements (Reports load faster (a lot faster ;))

Other

  • Shortcut to whitelist/blacklist a domain/host from Live Session Explorers

  • Other performance and reliability improvements

1.1 - November 2, 2019​

Better low-end device support

  • Minimum RAM requirement lowered to 2GB

  • Support for less powerful CPUs. Try Sensei on your Deciso A10 devices: Yes! with reporting :)

More interface support

  • lagg(4) and bridge(4) interface members can be protected now

  • Interface Configurator now reports "Unassigned" OPNsense interfaces

New Cloud Servers Infrastructure goes live

  • New less-latency cloud servers for US-West, US-East, Asia1, Asia2 and Australia regions

  • New web category/threat intelligence database

  • Improved/faster cloud query mechanism

  • Better availability

  • The status screen now shows uptime in a prettier format

Security

  • Premium: Protection for newly detected malware campaigns (not older than 1 week)

  • Premium: New grey-listing categories for Dead, Newly Registered and Newly Recovered sites

Reporting

  • Reporting Performance Improvements (Reports load faster (a lot faster ;))

Other

  • Shortcut to whitelist/blacklist a domain/host from Live Session Explorers

  • Other performance and reliability improvements

1.0​

1.0.3 - September 25, 2019​

Application control & filtering

  • 22 new applications (Ad Tracking)

  • Fixed an issue affecting a block 172.16.0.0/16 being recognized as public IP addresses

  • Re-evaluation of policy rules when a policy is re-configured

  • Fixed an issue matching policies with a Captive Portal user group

  • Captive portal: provide user group information to Sensei

Reporting

  • Scheduled e-mail reports: now support STARTTLS method e-mail transport security

  • Scheduled e-mail reports: you can now specify a sender address for the e-mails

  • Reverse DNS lookups for local IP addresses

Performance

  • The output directory is now a tmpfs for higher file system performance

Cloud Threat Intelligence

  • new US-West Cloud servers (Test)

  • new Asia Cloud servers (Test)

  • You can now request web sites being re-categorized by sharing your custom lists with Sensei team

UI/UX

  • Important engine-related messages are communicated through UI

  • Now working with tucan/cicada themes (thanks to opnsense user of Team Rebellion for OPNsense commits)

  • During uninstall, you can now request to be contacted by the Sensei team about your problem

  • Fixed an issue preventing to select the whole application category

  • Better user feedback forms

  • Development features

Misc

  • Proper LibreSSL build and installation

  • The installer now does a CPU benchmark test to see if Sensei can run successfully on your hardware

  • Migrated to Python 3.7

  • More reliability and performance improvements

1.0.2 - August 9, 2019​

  • Installer/Updater: Fix LibreSSL install and update problem

  • New Feature: Live Authenticated Users View (Captive Portal/Active Directory)

  • UI fix: Delete policy time schedule button has been placed in a more appropriate section

  • UI fix: Fixed an issue which causes app/web category listing being incomplete during Policy creation

  • Convenience: Removed an unnecessary engine restart during policy creation

  • Filtering: Fixed a bug preventing Landing Page to display when blocking a connection

  • Policy filtering: Fixed a bug affecting daily schedules

  • Enable unmapping of user and IP addresses

1.0.1 - August 6, 2019​

  • Fix a bug preventing deletion of policy schedules

  • Handle bad formatting during policy creation

  • Enable unmapping of user and IP addresses

1.0.0 - August 4, 2019​

  • First stable release

  • Username Base and Enriched Report View

Active Directory Integration via Sensei AD Agent

Captive portal users displayed in reports

You can now customize whether to display IP addresses or hostnames in reports

  • Automatic Updates

Sensei can now be updated via OPNsense Firmware updater. OPNsense updates now check for Sensei updates and install them automatically.

  • Engine logs are not archived anymore

  • 11 more apps identified

  • Premium subscription features included in this release

0.8​

0.8.2 - June 22, 2019​

  • OPNsense 19.7 compatibility fix (Missing python 2.7 dependencies added)

  • Fixes block landing page not displayed correctly

0.8.1 - June 19, 2019​

  • Fix a bug preventing archive engine logs from being removed

  • OPNsense 19.7 compatibility fix

0.8.0 - June 18, 2019​

  • IPv6 Support

As promised - now Sensei has IPv6 support.

  • Virtio interface support

There were many requests that we make Sensei run on virtual interfaces like QEMU/KVM/Proxmox virtio. Sensei 0.8 combined with OPNsense 19.1.x new netmap enabled kernel, you can now run on virtio interfaces This is also a big enabler to run OPNsense and Sensei on most of the major Cloud and VPS operators. More info on OPNsense forum.

  • Wireless interfaces support

Starting with OPNsense 19.1 and Sensei 0.8, you can now run Sensei on wireless interfaces.

  • VLAN interfaces support

Starting with OPNsense 19.1 and Sensei 0.8, you can now run Sensei on VLAN interfaces.

  • Better Cloud & Update Servers Availability

  • Users can now ignore the Hardware compatibility warning and install Sensei even if the HW resources are below what is advisable.

  • You'll now get reported via an informative message in the UI if Sensei health check automatically stops Sensei service due to an HW resource shortage. Up until now, Sensei was doing this quite silently ;)

  • The number of Elasticsearch dependencies decreased by 1/3: faster installs & updates

  • Better Reporting

  • IPv6 reporting

  • Ability to resolve local IP addresses to MDNS supplied hostnames

  • Source Hostname is now the default instead of IP address in Session Reports (IP is still available via a tooltip

  • Ability to specify start and end times for Session Explorer Reports

  • Ability to refresh Session Explorer Reports without having to close/re-open the report

  • Mobile devices UI improvements

0.7​

0.7.0 - December 26, 2018​

  • 350+ new applications identified.

  • Google applications browsed via Chrome are now being identified (QUIC over UDP protocol support).

  • Mobile browser compatibility: you can view reports from your mobile browser

  • Reports enhancement: Data retirement option introduced. With this option, you can define how long to keep your reports (days)

  • Reports enhancement: Option to erase all reporting data

  • Reports enhancement: Drill-down in Security reports is now available

  • Reports enhancement: Daily executive reports. Selected reports delivered via a daily e-mail.

  • You can easily add block/allow rules within Session Explorer based on Application and Application Category or SNI / hostname

  • User's Manual in English.

  • More deployment options for Home and Large scale users

  • Changelog between updates

  • Fixed Rebellion Theme compatibility issues.

  • Better Cloud Nodes availability

  • Better & smoother updates

  • We speak your language now, we added i18n support to match your OPNsense UI language. English and German are there, for now, more coming soon.

  • Removed some large dependencies in preparation for embedded devices & PIE (Position Independent Executable) support. More performance & stability improvements.

Last updated on by Zenarmor