Wazuh OPNsense Installation Instructions

Confirm Router Firmware Is Up to Date:

• Go to System > Firmware > Updates.
• Check for updates and apply any available.

Install the Wazuh Agent Plugin:

• Go to System > Firmware > Plugins.
• Install the plugin: os-wazuh-agent.

Configure the Wazuh Agent:

• Go to Services > Wazuh Agent.
• Manager Address: 10.3.120.4
• Manager Port: 1515
• Enable Agent.
• Save configuration.

Start and Enable the Agent:

• In Services > Wazuh Agent:
• Start the service.
• Ensure it shows as running.

Troubleshooting

Check Logs:

• Run: tail -f /usr/local/ossec/logs/ossec.log
• Verify successful startup and enrollment messages.
• If “Unable to connect to enrollment service” appears:
• Verify ports 1515 and 1514 are reachable.
• Verify routing to the manager.

Test Connectivity to Manager:

• nc -vz -w 3 10.3.120.4 1515
• nc -vz -w 3 10.3.120.4 1514

Verify Enrollment:

• In the Wazuh dashboard, check Agents > Manage agents.