Netgate Releases pfSense® Plus Software Version 25.11

pfSense® Plus software, the world’s leading firewall, router, and VPN solution, provides secure network edge and cloud networking solutions for millions of deployments worldwide.

Netgate® is excited to announce the release of pfSense Plus software version 25.11. This is a maintenance release that includes numerous updates, bug fixes, and enhancements, with more to come. All pfSense Plus customers are encouraged to upgrade to this new version.

New Features and Improvements

OpenVPN Changes

OpenVPN has deprecated DH parameters that are less than 2048 bits. OpenVPN users will notice that if the update process detects a setting of 1024, the update process will automatically change this setting to 2048.

Netgate Nexus Updates

Netgate Nexus is the Multi-Instance Management solution for pfSense Plus and is production-ready in 25.11, with new updates. All API endpoints have been implemented, and the GUI is now fully functional. In addition to the powerful GUI, an API toolkit has also been provided on GitHub. Licenses and entitlements for managed instances will be available for purchase separately. Additional information will be provided at the product launch for Netgate Nexus soon. pfSense Plus version 25.11 is a requirement for Netgate Nexus.

Release Notes 

Release Notes for pfSense Plus 25.11-RELEASE are available for review. 

Installing the Upgrade

Netgate has a detailed Upgrade Guide available in the pfSense documentation to help explain the process. Below are the high-level steps to perform the upgrade. 

Note: New installations of pfSense Plus 25.11 will require the Netgate Installer version 1.1.1, which is available for download here.

Users currently running pfSense Plus software

Upgrades from an earlier version of pfSense Plus software are usually made through the user interface. Before any major change, such as an upgrade, it’s always recommended to save a backup of the pfSense Plus configuration. You can find Backup and Recovery instructions in the pfSense documentation.

• Navigate to System > Update
• Set Branch to “Current Stable Version (25.11)”
• Click Confirm to start the upgrade process

Users currently running pfSense Community Edition (CE) software

We encourage you to migrate from pfSense CE software to pfSense Plus software. Doing so will ensure you have access to all of the benefits of pfSense Plus software. You can find details on how to get pfSense Plus software here.

Troubleshooting the Upgrade

Please review the documentation on Troubleshooting Upgrades for the most up-to-date information on working around upgrade issues.

This pfSense Plus software release is ready for use in production environments. Should any issues arise, please post to our forum or contact Netgate Technical Assistance Center (TAC) for paid 24/7/365 support.

Supporting the Project

When you purchase Netgate hardware, TAC, or AWS/Azure cloud instances, you directly sustain the engineering teams responsible for maintaining high-quality pfSense software. 

You may support this work through one or more of the following:

• Purchase an official appliance directly from Netgate or from our worldwide reseller partner network. Our appliances are the fast, easy way to get up and running with a fully-optimized firewall.
• Purchase TAC support, which provides you with direct access to Netgate Global Support
• Purchase Professional Services to access our most senior engineers for more complex projects outside the scope of TAC support.
• Use a genuine pfSense Plus instance from Netgate to connect and protect your cloud workloads on AWS and Azure.

Our efforts are made possible by the support of our customers and the community, and for that we express our sincere thanks. This involvement strengthens the pfSense project for everyone.