Netgate Releases pfSense Plus Software Version 26.07

pfGeorge

Today, Netgate has released pfSense Plus software version 26.07. This release marks another significant step forward in the Netgate Nexus controller architecture - our new Go-based controller that is replacing the legacy PHP GUI and serving as the modern foundation for all pfSense software. Netgate Nexus continues to deliver improvements and new features, bringing exclusive capabilities that enhance performance, scalability, and functionality to pfSense Plus.

Key new features exclusive to the Netgate Nexus controller include:

CoreDNS: A high-performance, integrated DNS component that handles DNS-based tasks with exceptional speed and efficiency, powered by a new and exclusive Netgate plugin called rexdns.

Threatgate: A powerful, high-performance component that manages bulk lists of addresses and domains for firewall rules, aliases, and CoreDNS groups. Administrators can block these lists outright or create custom rules based on their content.

Threatgate and CoreDNS were built to integrate tightly together, enabling rapid processing and utilization of even massive lists - all while maintaining excellent performance on small, resource-constrained devices.

Snort Version 3: The updated version of the popular open-source intrusion prevention system (IPS), featuring multi-threading support and a faster rule syntax, is now available exclusively via the new Netgate Nexus controller GUI.

In addition to the features listed above, this release includes critical security updates for WireGuard (CVE-2026-58085), and other security enhancements.

Other fixes and enhancements were made to:

DHCP
DNS Resolver
DynamicDNS
Gateways and Monitoring
IPsec
VXLAN Interfaces
OpenVPN
Firewall Rules and NAT
Traffic Shaper
Wireless support

This release includes numerous updates, bug fixes, and enhancements, with more to come as Netgate Nexus development accelerates.

Using the New GUI

The Netgate Nexus controller is the future of the pfSense Plus GUI.
Whether you manage a single pfSense Plus firewall or an entire fleet, the Netgate Nexus controller delivers a modern, refreshed management experience built for the way you work today.

Getting started is simple:

Go to System > Advanced.
Switch to the Netgate Nexus tab and enable it.
Log in to Nexus on port 8443 of your firewall.

More detailed documentation can be found here. Start using it today and get immediate access to the new features and capabilities coming to pfSense Plus.

Note: Virtual machines, as well as some third-party platforms, may not support the new GUI due to missing machine information required to run the software correctly.

Blog Post:
https://www.netgate.com/blog/netgate-releases-pfsense-plus-software-version-26.07

Release Notes:
https://docs.netgate.com/pfsense/en/latest/releases/26-07.html

tinfoilmatt

Sooo, is TG camel case or not?

JonathanLee

@pfGeorge has the mPCIe driver issue been resolved for SG-2100 MAX systems so I can update ? Or am I still stuck? I have that wifi card and also use that hardware for an adapter. Has that been fixed too?

Beerman

@pfGeorge

How can I use the new GUI on a virtual machine?

400 Netgate Nexus is not supported on this sytem

Nexus cannot be licensed on this system due to: serial number unavailable, unsupported virtualization.

I have a valid pfSense Plus license...

Old GUI:

Thank you for choosing Netgate pfSense® Plus

Your device does not require registration, we recognize it already. You may have already registered, or it may be a pre-registered Netgate appliance.

dennypage

@Beerman said in Netgate Releases pfSense Plus Software Version 26.07:

How can I use the new GUI on a virtual machine?

400 Netgate Nexus is not supported on this sytem
Nexus cannot be licensed on this system due to: serial number unavailable, unsupported virtualization.

See this thread. Short version is that you must have a serial number and a UUID.

Beerman

@dennypage

Thx!

bradsm87

The blog post says that fresh installs of 26.07 require Netgate Installer 1.3. I just grabbed the latest Netgate Installer from the store, but it's only version 1.2.

CDe80

@pfGeorge Hi Since Upgrade to 26.07 i no longer receive the warnung that nexus is not supported. As we are waiting to move our nexus-instance for multi-Instance-management from a physical netgate 4100 to a vm which does nothing but the instance-management, I want to be sure that we have now official support for selfhosting nexus with pfssese plus (hyper-v). Will it also be possible to move mim-licenses from one device to another? THX

along5664

@pfGeorge
I assume we can still install 26.07 and use like previous versions? Or do we need to enable Nexus and use port 8443 to access the firewal to add rules ,aliases,etc.....

chpalmer

@along5664 you can still use the original gui. And if you want to experiment with the new GUI they both work at the same time.

fdhabhar

I have an HA pair running 26.03.1 (Dell hardware). Do I need to enable Nexus on each separately? Will they show up as separate instances in Nexus or are they treated as one? Is there more detailed documentation regarding HA scenarios?

madbrain

Is this actually released ?

I'm on 26.03.1, and even after a forced update check, it says it's the latest.

System / Update settings only shows an RC branch for 26.07 .

SteveITS

@madbrain try https://docs.netgate.com/pfsense/en/latest/troubleshooting/upgrades.html#upgrade-not-offered-library-errors

bradsm87

@madbrain is it this? Is your subscription active?

https://forum.netgate.com/topic/201172/the-2022-limited-time-pfsense-plus-promotion

madbrain

@bradsm87 I have a lifetime free license.

madbrain

@SteveITS Unfortunately, that workaround does not work. There is no "Previous stable branch" option for me to choose. I will try with the RC branch now.

madbrain

@bradsm87 said in Netgate Releases pfSense Plus Software Version 26.07:

https://forum.netgate.com/topic/201172/the-2022-limited-time-pfsense-plus-promotion

I guess it's not lifetime anymore, sigh. Guess I will have to switch to something else.

bradsm87

@madbrain there's your problem right there. Check the article I linked. Those days are over. The devices I manage won't update either. That's why.

madbrain

@bradsm87 Sigh.

madbrain

So, how does one downgrade to the free 2.9.0 version ?