Netgate Releases Netgate Nexus Version 26.07_1

pfGeorge

Netgate Nexus enables Multi-Instance Management for pfSense Plus, and is the future of the pfSense GUI. Designed to address the growing complexity of managing multiple pfSense Plus instances across distributed environments, Netgate Nexus empowers network operators to securely manage one, or hundreds of pfSense Plus instances through a unified and intuitive GUI, along with a full-featured REST API.

Today, Netgate is releasing Netgate Nexus version 26.07_1. We strongly encourage all pfSense Plus customers to upgrade to the latest version.

This release contains over 30 enhancements and fixes, in areas including:

Dashboards & Widgets
CoreDNS & Threatgate
IPsec and Wireguard VPN
System & Status
Firewall & NAT
Snort Version 3
Diagnostics
Authentication
Orchestration
VM Running Requirements

How to Upgrade

Netgate Nexus exists as a package on pfSense Plus instances, and as such is not restricted to the usual pfSense Plus release cadence. In order to update the package, simply navigate to System > Package Manager and click the Reinstall Package button to the right of the Nexus package. All settings will be preserved.

Using the New GUI

Netgate Nexus is the future of the pfSense GUI. It delivers a new updated GUI, significant security and performance improvements, a powerful, full-featured API, and true cross-platform compatibility. Whether you manage a single pfSense Plus instance or an entire fleet, the Netgate Nexus controller delivers a modern, refreshed management experience built for the way you work today.

Getting started is simple:

Go to System > Advanced.
Switch to the Netgate Nexus tab and enable it.
Log in to Nexus on port 8443 of your pfSense Plus instance.

More detailed documentation can be found here. Start using it today and get immediate access to the new features and capabilities coming to pfSense Plus.

Note: Virtual machines as well as some third-party platforms may not support the new GUI due to missing machine information required to correctly run the software.

Blog Post

https://www.netgate.com/blog/netgate-releases-netgate-nexus-version-26.07_1

keyser

Excellent.

The “deal breakers” for me currently is Threatgate cannot be used because it max’es listsizes out at 4999 entries, the rest i dropped silently. Also it’s not great that lists are imported into individual pf rule entries rather than an URL alias. Makes it very inflexible compared to pfBlockerNG.

The second thing is missing DNS reply logging - in fact logging as a whole from Nexus services

mcury

@keyser said in Netgate Releases Netgate Nexus Version 26.07_1:

Threatgate cannot be used because it max’es listsizes out at 4999 entries

This is one of the main things holding me back right now, along with ThreatDB not being available yet.
Also, the last time I tested GeoIP, it created the aliases and I added them to the rules, but they wouldn't match and ended up blocking all traffic instead.

Glad they fixed this, though:
CoreDNS now starts automatically after reboot

The second thing is missing DNS reply logging - in fact logging as a whole from Nexus services

I don't care as much about DNS replies... I just need logs showing what's actually being blocked by the ThreatGate DNS integration.

Bob.Dig

Is it just me or are there significantly longer load-times when switching pages? Something that shouldn't be with Nexus, I thought.

stephenw10

Not that I've noticed, Even on low resource hardware,

Bob.Dig

@stephenw10 Ok. I only noticed it some times.
Also here comes a notice after login in, that a temporary BE exists, which is not true, but it vanishes fast.

SteveITS

If one is not using Nexus is it recommended to upgrade the package? Is it used at all for the legacy GUI/internally/etc.?

stephenw10

I would probably upgrade it anyway in case it does get enabled. But I wouldn't expect it to do anything if you're not using it.