%201.png?width=302&name=Netgate%20Logo%20PMS%20(horizontal)%201.png "NetgateColorLogoRegisteredRGB.png")
One of the useful features of both pfSense Plus and pfSense CE software is the ability to install system patches between releases, ensuring that your pfSense software (firewall/router/ VPN) is as safe as possible. These patches may include security fixes, bug fixes, and other beneficial changes between releases. We’ve been asked multiple times in our support and community forums for more details on this functionality.
You can install system patches between releases using the System_Patches add-on package, which adds a System menu option for Patches. This menu option shows which patches are available and manages their application.
The best place to find this and other popular add-on packages (like pfBlockerNG) is through Netgate’s Package Manager functionality, another helpful and sometimes overlooked feature in pfSense software.
Installing the System_Patches Add-on Package
Select System > Package Manager to access the package manager.
Click on Available Packages to see all of the add-on packages available.
Scroll down to System_Patches, and click on its “+ Install” button.
Confirm the installation and wait until the Package Installer shows “installation successfully completed.”
Viewing and Installing Available Patches
Once the System_Patches package is installed, you will find a System > Patches menu item in the pfSense WebGUI. Choosing it opens the System / Patches screen.
The System / Patches screen lists available system patches, including a section of “Recommended System Patches.”
It is recommended that you read the available information for a patch before installing it. Clicking on the “+ Apply” button for a patch will apply it, updating your pfSense software.
Checking for An Updated System_Patches Add-on Package
Check for new system patches by going to System > Package Manager > Installed Packages and viewing the icons in the “Actions” column. Clicking on “Update” for the System_Patches package, if it is visible, will update the package. You can also remove or reinstall the package from this screen.
Conclusion
System patches include security fixes, bug fixes, and other beneficial changes distributed in between regular software updates. Following this process is an excellent way to ensure that your pfSense software (firewall/router/ VPN) is as safe & secure as possible, especially in the time between major software releases. Netgate believes the security of our (and your) users is of utmost importance, and we highly recommend that all admins install the available recommended System Patches for their version of pfSense software.