Now Available: pfSense® Plus 25.07-RELEASE

pfGeorge

pfSense Plus software, the world’s leading firewall, router, and VPN solution, provides secure network edge and cloud networking solutions for millions of deployments worldwide.

Netgate is excited to announce the release of pfSense Plus software version 25.07. This new version includes several major features that our customers have requested, and many other enhancements and bug fixes. All pfSense Plus customers are encouraged to upgrade to this new version.

Key Features and Improvements Include:

Netgate Nexus - Multi-Instance Management for pfSense Plus. This product is launching soon.
Auto Config Backup - enhanced UI, encryption, and key management.
New PPPoE Driver - boosts performance and reduces CPU usage.
Custom Login Screen Messages - custom messages that will appear as a banner on the login screen.
Feature Complete Kea - the successor to ISC’s deprecated DHCP. Added support for IPv6 Prefix Delegation and more.
NAT64 - enables clients with only IPv6 addresses to reach remote hosts using IPv4 addresses.
System Aliases - allow user-created firewall rules to utilize aliases that were previously only usable by internal firewall rules.

Read the blog here:
https://www.netgate.com/blog/netgate-releases-pfsense-plus-software-version-25.07

Release Notes here:
https://docs.netgate.com/pfsense/en/latest/releases/25-07.html

johnpoz

@pfGeorge well know what I will be doing tmrw morning in quiet time when nobody on plex.

mcury

Upgraded successfully from 24.11 -> SG-4100.
Thanks, Netgate team.

Phizix

As always I will wait about 2 weeks before upgrading.

Gertjan

@pfGeorge

Prepared a boot environment, booted into it, and updated.
I was already at the latest 25.07 RC, so no big changes.
AS always, I used the console menu option 13 to update, logging the terminal to a file so upgrade sequence log info is available, if needed.
The reboot into a new boot environment, the update itself, and the subsequent reboot and install+all packages reload : less then 3 minutes.
It was clean and lean process.
Back to the beach.

keyser

Upgraded 6100 Max from 24.11 to 25.07 without any hickups or issues.

Packages installed:

Freeradius 3
pfBlockerNG
Tftpserver
Nut
Notes
Lldpd

johnpoz

Just updated sg4860 from 24.11 - went fine..

keyser

Upgraded 2100 Max from 24.11 to 25.07 without any hickups or issues.

Packages installed:

Freeradius 3
pfBlockerNG
Tftpserver
Nut
Notes
Lldpd

It does take quite a while though... 15'ish minutes before it's back up.

slu

@pfGeorge thank you to the Netgate team, I update appliances without issue.

WN1X

Upgraded my 4200 Max this morning from the 25.07-RC. Easy peasy!

markster

Upgraded 5100 without issues. Switched to KEA and so far so good.
One small issue was with older LG TV that would not use KEA DHCP for some reason. But I switch to static IP, disable DHCP and I am good.

provels

@Phizix Wish I had, tried, failed, had to spin up my 20 year old 2.3.5 hardware. Oh, well, at least I'm reitired... :)

LarryFahnoe

Upgraded 2 4200 MAX appliances from 24.11 to 25.07 and all went well. About 3-4 minutes each.

I did not remove packages prior to the upgrade, current list:
acme
aws-wizard
Cron
haproxy-devel
ipsec-profile-wizard
mailreport
Netgate_Firmware_Upgrade
nut
pfBlockerNG
sudo
System_Patches
WireGuard

--Larry

provels

Just me, or can't we edit posts anymore?

F00d

Upgraded 3100 from 24.11 to 25.07. Everything seems normal. The upgrade took about 10 minutes until the web UI reloaded. Installed packages include: Cron, RRD_Summary, Service_Watchdog, WireGuard. I'm following the advice to remain on ISC and not migrate to KEA due to arm32 incompatibility with the 3100.

ITSGS_

Updated from 25.07.r.20250715.1733.1500029 to 25.07 on my SG4200. No issues so far.

Cylosoft

It looks like Kea still has issues with static entries at times pulling an IP out of the pool.

Gertjan

@provels said in Now Available: pfSense Plus 25.07-RELEASE:

Just me, or can't we edit posts anymore?

Not on Netgate's 'Pinned' forum posts.

Dean79

I successfully upgraded my SG-1100.

Before upgrading, I backed up the config, deleted all packages, and updated firmware via the GUI rather than the console.
After upgrading my SG-1100 to firmware version 25.07, most of the resource overload issues that occurred with the previous version 24.11, were resolved, making it much more efficient. I had previously only been using the PFBlockerNG and Snort packages.

When I used version 24.11 on my SG-1100, the load was extremely high, reaching 100% CPU and RAM usage, frequently resulting in performance degradation and crashes down.
However, the current version 25.07 has reduced the load to about 30-70%.

This appears to be a very successful upgrade. I'd like to thank the Netgate developers for their hard work.

sjhawke

Upgraded SG-2100 BASE - updated with a 128Gb SSD (Internal drive wear was too high).

Upgrade process was ok, though it did get confused and give the "another process" error in the updates screen.

After update:

Unbound crashed with out of memory error. Switched to python mode and it seems to work, though pfblocker dns filter service then failed to start on boot and needed starting on the portal.

Hope these things get patched soon.

Simon