Skip to main content

Zenarmor Gateway Installation

Zenarmor® provides you with two powerful deployment options, tailored to meet your unique cybersecurity needs based on your subscription type.

  1. Perimeter Protection with Zenarmor Gateway Deployment: Deploy Zenarmor as a gateway on a perimeter firewall or routing platform, such as OPNsense or pfSense CE. This option ensures that your network is fortified at its entry points, providing a robust shield against external threats. All Zenarmor editions, including Free Edition, can be deployed as a gateway on a routing platform to protect your networks.

    With Zenarmor SASE, your users can securely access internal resources behind your Zenarmor gateway, no matter where they are located, through private networks. Moreover, the Zenarmor SASE edition enables seamless connection between different branches via a secure private network, providing unmatched flexibility without compromising security.

  2. Comprehensive Endpoint Security with Zenarmor Endpoint Application: Install the Zenarmor endpoint application directly on devices like desktop PCs, laptops, or servers.

With Zenarmor, you gain proactive defense mechanisms, enhanced control, and peace of mind knowing your digital environment is secure.

In this documentation, we provide a comprehensive list of the supported platforms you can deploy Zenarmor gateway mode. Additionally, we outline the straightforward steps required to install the Zenarmor on each of these platforms.

warning

To get benefit of Zenarmor endpoint application and to be able to protect your endpoints you must have Zenarmor SSE and higher editions.

Supported Platforms​

You can install Zenarmor as a gateway on variety of platforms for trying it free. Zenarmor supports the following platforms for gateway deployment.

IMPORTANT NOTE:

Before installing Zenarmor, you should ensure you meet the minimum system requirements in order to run Zenarmor or to have the best user experience. See Hardware Requirements for more information.

warning

To use all of the filtering functionalities of the Zenarmor, you must have either the netmap framework or nfqueue framework installed on your system. Although FreeBSD systems has installed netmap by default, Linux systems such as Ubuntu, CentOS and Debian does not include the netmap by default. On Linux distributions, you may use the default installed NFQ framework or install the netmap by yourself. For more information about how to install netmap on Linux, please refer to netmap installation guide.

note

Zenarmor Free Edition is forever free-of-charge. We strongly recommend you register to keep in touch with updates and new features. You can register at Zenconsole Cloud Management Portal.

tip

We advise you to read the Best Practices for Zenarmor Deployment Guide after installing Zenarmor on your network.

Get Started with Zenarmor Today For Free

Installing on OPNSense​

Prerequisite

Since Hardware Offloading feature is incompatible with netmap, make sure that hardware offloadings are disabled on your OPNsense node.

Zenarmor may be installed using the web interface in OPNsense or using the command line interface via SSH or local system access (see instructions here). The preferred method is the web interface. Once Zenarmor is installed, you will need to complete the initial configuration in the web interface so it is convenient to also complete the installation using the web interface.

To install plugins in OPNsense, you must use an account with administrative access.

Before installing Zenarmor, you should ensure you meet the minimum system requirements in order to run Zenarmor or to have the best user experience. See Hardware Requirements for more information.

Web Interface Installation​

To install Zenarmor, you must first install the Sunny Valley Networks vendor repository plugin. Go to the System → Firmware → Plugins page. Click on the + icon next to os-sunnyvalley to install the plugin.

Once the vendor plugin is installed, you should see the Zenarmor plugin available in the list of plugins as os-sensei. If you do not see the Zenarmor plugin, you may need to refresh the Plugins page. Click the + icon next to os-sensei to install the plugin.

After installing Zenarmor, you should see the Zenarmor menu in the left sidebar of the OPNsense web interface. If you do not see the new, top-level menu, you may need to refresh the page.

For more information, please refer to Zenarmor Installation on OPNsense Web UI.

Installed Zenarmor Plugins on OPNsense

Figure 1. Installed Zenarmor Plugins on OPNsense

Next, you will need to complete the Initial Configuration Wizard for Zenarmor to be fully operational.

Initial Configuration Wizard is quite self-explanatory; but if you still need detailed guide, please read on here:

Hands-on Video​

Here is a video that will guide you through the steps of the Zenarmor® installation and initial configuration process on OPNsense:

Installing on FreeBSD​

Prerequisite

Since Hardware Offloading feature is incompatible with netmap, make sure that hardware offloadings are disabled on your FreeBSD node.

To install Zenarmor on FreeBSD, just run below one-liner which will install the package repository and the main package as root or user with sudo privileges:

curl https://updates.zenarmor.com/getzenarmor | sh

Authenticate & register your FreeBSD node to the Cloud Central Manager

(*) Sign-up for a new account from the Cloud Central Management Portal if you've not done so yet. For more information about creating a portal account, click here.

To register your FreeBSD node to the Cloud Central Manager run the following command as root or user with sudo privileges:

sudo zenarmorctl cloud register

As a final step, complete the Initial Configuration of your FreeBSD firewall for the cloud portal by following the instructions.

Installing on Ubuntu​

To install Zenarmor on Ubuntu, just run below one-liner which will install the package repository and the main package as root or user with sudo privileges:

curl https://updates.zenarmor.com/getzenarmor | sh

Authenticate & register your Ubuntu node to the Cloud Central Manager

(*) Sign-up for a new account from the Cloud Central Management Portal if you've not done so yet. For more information about creating a portal account, click here.

To register your Ubuntu node to the Cloud Central Manager run the following command as root or user with sudo privileges:

sudo zenarmorctl cloud register

As a final step, complete the Initial Configuration of your Ubuntu firewall for the cloud portal by following the instructions.

Installing on CentOS​

To install Zenarmor on CentOS, just run below one-liner which will install the package repository and the main package as root or user with sudo privileges:

curl https://updates.zenarmor.com/getzenarmor | sh

Authenticate & register your CentOS node to the Cloud Central Manager

(*) Sign-up for a new account from the Cloud Central Management Portal if you've not done so yet. For more information about creating a portal account, click here.

To register your CentOS node to the Cloud Central Manager run the following command as root or user with sudo privileges:

sudo zenarmorctl cloud register

As a final step, complete the Initial Configuration of your CentOS firewall for the cloud portal by following the instructions.

Installing on Debian​

To install Zenarmor on Debian, just run below one-liner which will install the package repository and the main package as root or user with sudo privileges:

curl https://updates.zenarmor.com/getzenarmor | sh

Authenticate & register your Debian node to the Cloud Central Manager

(*) Sign-up for a new account from the Cloud Central Management Portal if you've not done so yet. For more information about creating a portal account, click here.

To register your Debian node to the Cloud Central Manager run the following command as root or user with sudo privileges:

sudo zenarmorctl cloud register

As a final step, complete the Initial Configuration of your Debian firewall for the cloud portal by following the instructions.

Installing on pfSense® software​

To install Zenarmor on pfSense® software, just run below one-liner which will install the package repository and the main package:

curl https://updates.zenarmor.com/getzenarmor | sh

Authenticate & register your pfSense® software node to the Cloud Central Manager

(*) Sign-up for a new account from the Cloud Central Management Portal if you've not done so yet. For more information about creating a portal account, click here.

Make zenarmorctl utility visible for the csh shell.
rehash
Cloud Registration Command
zenarmorctl cloud register

As a final step, complete the Initial Configuration of your firewall for the cloud portal by following the instructions.

Prerequisite

Since Hardware Offloading feature is incompatible with netmap, make sure that hardware offloadings are disabled on your pfSense node.

note

Due to the recent changes to the pfSense+ software; pfSense+ package manager now blocks 3rd party applications from getting installed onto the platform.

To that end, regretfully, we have decided to remove pfSense+ support.

If you'd like to continue using Zenarmor, you can consider other platforms alternatives including OPNsense, pfSense CE and other Linux-based distributions.

Installing on Amazon Linux​

To install Zenarmor on Amazon Linux, just run below one-liner which will install the package repository and the main package as root or user with sudo privileges:

curl https://updates.zenarmor.com/getzenarmor | sh

Authenticate & register your Amazon Linux node to the Cloud Central Manager

(*) Sign-up for a new account from the Cloud Central Management Portal if you've not done so yet. For more information about creating a portal account, click here.

To register your Amazon Linux node to the Cloud Central Manager run the following command as root or user with sudo privileges:

sudo zenarmorctl cloud register

As a final step, complete the Initial Configuration of your Amazon Linux firewall for the cloud portal by following the instructions.

Hands-on Video​

Here is a video that will guide you through the steps of the installation and registration process for BSD-based, such as pfSense® software, and Linux-based, such as Debian and Ubuntu, systems.

Last updated on by Zenarmor