05 Aug pfSense Plus RELEASE 25.07
pfSense Plus RELEASE 25.07
pfSenseⓇ plus software, Release 25.07, is available now!
Release Details
The latest release of pfSense Plus 25.07 introduces several highly requested features along with numerous performance improvements and bug fixes:
- Netgate Nexus: A fully production-ready multi-instance management solution for pfSense Plus, featuring a complete API, a powerful GUI, and an API toolkit available on GitHub. Nexus can control a designated pfSense Plus Controller instance, with additional licenses available for managing more instances. Additional information will be provided at the product launch for Netgate Nexus soon.
- Auto Config Backup: A redesigned and more efficient service that encrypts configuration changes and securely uploads them to Netgate’s cloud. Enhancements include customizable Device Keys for improved security and a streamlined user interface.
- New PPPoE Driver: A new PPPoE backend (if_pppoe) delivers significantly faster performance and reduced CPU usage compared to the legacy MPD implementation. Users with multi-gigabit PPPoE WAN links are encouraged to enable this option in System > Advanced > Networking for enhanced speed.
- Custom Login Screen Messages: Administrators can now configure custom text banners for the pfSense Plus login screen, aligning with corporate and government security guidelines (STIGs).
- Kea DHCPv6 Prefix Delegation: A complete implementation of Kea DHCPv6, replacing the deprecated ISC DHCP. This allows automatic distribution of IPv6 prefixes to downstream networks. Users migrating from ISC DHCP must manually recreate prefix delegation settings.
- NAT64 Support: Adds full support for NAT64, enabling IPv6-only clients to access IPv4 hosts. Integration includes NAT64 firewall rules, PREF64 router advertisements, and DNS64 resolver options, with full documentation available here.
- System Aliases: New built-in system aliases make it easier to create firewall rules using predefined sets of reserved and special-purpose networks, reducing repetitive configuration tasks.
These updates are designed to improve the functionality and security of pfSense Plus, making it a more robust and versatile network management solution.
Learn more by viewing the Release Notes.
Users running pfSense Plus on Netgate Appliances
Netgate-branded appliances come with TAC Lite support and receive this and future software updates at no additional cost for the lifetime of the unit.
Upgrading from an earlier version of pfSense Plus software is typically conducted via the user interface. To ensure data integrity and recovery options, it’s crucial to back up your pfSense Plus configuration before initiating any significant changes, including upgrades. Detailed Backup and Recovery guidelines are available in the pfSense documentation available here: Backup and Recovery.
Instruction to upgrades from the user interface:
- Navigate to System > Update
- Set Branch to “Current Stable Version (25.07)”
- Click Confirm to start the upgrade process
Users running pfSense Plus on their own hardware
Upgrading pfSense on your own hardware follows the same procedure as on Netgate appliances, provided you have a valid subscription. If you need to renew your pfSense Pluse Software Subscription, please visit our online shop.
Users running pfSense Community Edition (CE)
We recommend upgrading from pfSense CE to pfSense Plus to take full advantage of the enhanced features and benefits of the Plus version. You can easily upgrade your pfSense CE by purchasing an activation token (pfSense+ Software Subscription).
If you need assistance to migrate from pfSense CE to pfSense Plus, talk with our certified pfSense Engineers.
Get in touch
ITG Customers
If you are an ITG customer with an active maintenance package or support contract, your are all covered. We will reach out to you shortly to finalize the details of the upgrade, which we will handle on your behalf.
