Netgate Releases Netgate Nexus Version 26.07_1

Netgate® Nexus enables Multi-Instance Management for pfSense® Plus, and enhances the security of the pfSense GUI. Designed to address the growing complexity of managing multiple pfSense Plus instances across distributed environments, Netgate Nexus empowers network operators to securely manage one, or hundreds of pfSense Plus instances through a unified and intuitive GUI, along with a full-featured REST API.

Today, Netgate is releasing Netgate Nexus version 26.07_1. This release contains a large number of enhancements and fixes. We strongly encourage all pfSense Plus customers to upgrade to the latest version.

New Features and Improvements

Dashboard & Widgets

• Added Gateways and Services widget
• Updated traffic graph
• New alerts for CARP maintenance mode, uninstalled WireGuard

CoreDNS & ThreatGate

• CoreDNS now starts automatically after reboot; Easy Setup defaults to all interfaces
• Migrate Unbound host overrides to CoreDNS
• Description field for resolver entries
• Auto-managed blocklists apply to all groups and are shown per group
• Global domain/hostname allowlist
• Fixes: uppercase hostnames, resolve expressions, address/port rules, stale aliases on rename

VPN

• IPsec: custom IKE and NAT-T ports (with defaults and help text)
• WireGuard: fixed peer endpoint validation

Status & System

• IPv6 display fixes across Status, Dashboard, and Interface views (incl. subnet mask)
• Warning when running a temporary boot environment
• System update: fixed branch selection/switching
• Bridges: fixed interface path cost
• Upgrade reboot status reporting

Firewall & NAT

• NAT rule info; fixed invert match; hide source block in port forward
• Fixed rule insertion when anti-lockout/block-bogon auto rules or separators are present

Snort Version 3

• Fixed rules download schedule, progress status, and day rendering

Diagnostics

• Edit File: file browser tree with browse and search
• Backup: Configuration Backup Settings and Boot Environments
• Command prompt minor fixes

Authentication

• Fixed authentication server deletion and SAML config serialization
• LDAP: shell group DN required only when shell auth is enabled
• Login precheck handles missing sshguard table, checks block list

Other

• Router advertisement: VIPs can be used as RA interface
• Captive portal: fixed tab wrap
• DNS Forwarder: fixed custom options
• Orchestration: alias changes apply to devices, upgrades show reboot-required state, mesh rendering fix
• Relaxed VM running requirements
• HAProxy menu naming update
• Certificates: improved CSR support

How to Upgrade

Netgate Nexus exists as a package on pfSense Plus instances, and as such is not restricted to the usual pfSense Plus release cadence. In order to update the package, simply navigate to System > Package Manager and click the Reinstall Package button to the right of the Nexus package. All settings will be preserved.

Using the New GUI

Netgate Nexus is the future of the pfSense GUI. It delivers a new updated GUI, significant security and performance improvements, a powerful, full-featured API, and true cross-platform compatibility. Whether you manage a single pfSense Plus instance or an entire fleet, the Netgate Nexus controller delivers a modern, refreshed management experience built for the way you work today.

Getting started is simple:

1. Go to System > Advanced.
2. Switch to the Netgate Nexus tab and enable it.
3. Log in to Nexus on port 8443 of your pfSense Plus instance.

More detailed documentation can be found here. Start using it today and get immediate access to the new features and capabilities coming to pfSense Plus.

Note: Virtual machines as well as some third-party platforms may not support the new GUI due to missing machine information required to correctly run the software.

Supporting the Project

Your purchases directly support the engineering teams building the future of pfSense. When you buy Netgate hardware, pfSense Plus software, TAC subscriptions, or use our AWS/Azure cloud instances, you help fund continued innovation, including the shift to our high-performance Go-based platform.

Ways to support the project:

• Purchase an official system directly from Netgate or from our worldwide reseller partner network. Our appliances are the fast, easy way to get up and running with a fully-optimized secure gateway..
• Purchase a technical assistance subscription (TAC), which provides you with direct 24/7 access to our Netgate Global Support team.
• Purchase Professional Services to access our most senior engineers for more complex projects outside the scope of TAC support.
• Use a genuine pfSense Plus instance from Netgate to connect and protect your cloud workloads on AWS and Azure.

Thank you to our customers and the community for your continued support. Your involvement helps strengthen pfSense for everyone.