Installing Sensei is straight-forward and easy. You just run a one-liner shell command to download the installer and run it. That's it, everything then gets taken care by Sensei.
$ ssh root@your-firewall-ip
After a successful login, enter "8" as the option to drop to the shell
Run the following one-liner command to download and invoke the installer script.
root@fw:~ # curl https://updates.sunnyvalley.io/getsensei | sh
Hence we passed the downloaded script to
sh, it will automatically run the installer script.
Installing via OPNsense installerDo you wish to install Sensei? y
Install script will copy the installation files onto the filesystem and will add a menu item within the Firewall Web User Interface.
Depending on your computer setup and your internet connection speed, it might take 1-4 minutes to complete.
Once the install is completed, you can disconnect from your terminal, and disable your firewall's ssh service by unchecking the checkboxes mentioned above.
To start your "Initial Configuration Wizard";
Log in to your OPNsense Web UI,
Click Sensei from the left menu,
Click on the Dashboard sub-menu. It will open up the Wizard.
Accept the End User License Agreement (Scroll & read the terms to get to the next button).
Click "Next" and get to the "Interface Selection" section.
Select the Ethernet Interfaces to protect. To do that, click on an interface and use the right/left arrow buttons to move it to protected/unprotected interfaces combo box.
Click "Next" and get to the "Cloud Reputation" section.
The Cloud Threat Intelligence data is queried real time when anyone makes a connection through your network. It enables us to respond to malware and wireless outbreaks in real time and very fast.
The engine processes the request, queries to "SVN Cloud" in real-time and decides whether it will be blocked or allowed. We check against 140+ Million Websites, under 120+ categories in milliseconds.
Cloud Threat Intel settings let you;
Enable/Disable the cloud reputation & web categorization engine
Set local domain settings to be excluded from cloud queries
Set your TCP Service password. This password protects the command line based CLI access to the packet engine. It is highly recommended to set this with a secure one.
Click "Next" and get to the "Updates" .
Self Health Check: If enabled, "Self Health Check" monitors the system's memory, CPU, disk usage and core services if they're working correctly, and raises alerts if anything goes wrong. Self Health Check also stops the relevant services if they're consuming excessive system resources.
Check for Updates Automatically: Checks automatically for the updates and creates a notification on the status page.
Update Databases and Threat Intelligence Data Automatically: Checks automatically for the updates and creates a notification on the status page .
Enable Generation of Support Data: If enabled, Sensei collects supporting data during unusual events and crashes. You can share this data while opening a ticket with us.
Sensei supports up to 1000 concurrent users on an everyday PC. You can set your Sensei installation's capacity here.
Click the Finish button to save your initial configuration data and start using Sensei.