SOFTWARE RELEASE: pfSense Plus v24.03

hey this is Justin from netgate today I'm going to go over the latest release of pfSense plus version 243 we'll go over all the new features and enhancements that make pfSense plus such a standout solution for your network security and management needs pfSense plus provides Advanced networking capabilities VPN support and Powerful traffic shaping and an intuitive web interface to wrap it all together for easy management its security features are top Notch making it an essential tool for safeguarding your network now let's take a look at the features coming in pfSense plus version 243 I'll be referencing the release notes so I'll go ahead and Link that down in the description take a look at that for more detailed information first up we have the removal of the default password we're ensuring compliance with mandates from various regulatory bodies users will now be required to change their admin account password from the default settings specifically passwords cannot be the same as the username or the default PF sense if you have already customized your password you won't be affected by this change so now let's move on to the ZFS boot environments I think I speak for a lot of people when I say that updating your firewall can be a harrowing experience with this next feature we use the ZFS file system to reduce that anxiety increase your stability and minimize downtime during an update the ZF as boot environment implements a safeguard by creating a snapshot of your system during an update this snapshot allows for seamless rollback to the previous state in case of any issues during updates in the event of a failed update the cloned boot environment is automatically removed ensuring the system retains its operational status additionally a boot verification mechanism has been integrated into the system startup automating the recovery process in case of boot failure for those of you who are interested in learning more about the ZFS file system we have a deep dive video with Christian McDonald here on our Channel I'll have that link down in the description next up we have the packet flow data export we utilize pflow to export packet flow data from the PF packet filter to external collectors using the netf flow V5 or ipix protocols giving you a detailed view on how your traffic moves through your network the data is collected Direct irly from firewall States and does not require a separate Damon service or add-on package so why is this good for Effective Network management the ability to capture visualize and analyze your network flow data is crucial this data reveals how information flows through the network tracking your endpoints packets transferred bites exchanged and protocols used without accessing the data content itself to achieve this we ported P flow flow 4 from open BSD to free BSD rather than using NG net flow because it is faster scales better and can leverage multiple CPU cores this grants administrators increased Insight with more performance when monitoring Network traffic now let's move on to enhanced Gateway recovery normally during a failover within a Gateway group if one Gateway encounters a failure all new connections will be redirected through the backup Gateway now with the enhanced Gateway recovery feature once the failed Gateway is back online administrators have the option to reset all connections that were temporarily redirected through the backup Gateway while the main one was offline this is done by killing the States from your backup Gateway you will also have the option to keep states on the backup Gateway and reset these connections as needed for those of you that have a high bandwidth primary Gateway or a metered backup Gateway this feature maximizes performance and availability while minimizing Associated cost so next up we have a change to default State policy it's being changed from floating states to interface bound States for increased security uh floating states are not associated with an interface therefore it's more lenient in how the firewall is checking against the state table uh interface as the name implies binds Network states to specific interfaces at the operating system level uh this means that packets must match the designated interface stored in the firewall state to pass through it's a strong security measure it ensures strict adherence to interface-based routing for enhanced Network integrity and protection against any unauthorized access so next up we have two major upgrades coming to our VPN service we have mobile group pools as well as some pretty significant performance enhancements with mobile group pools users are now able to access a dedicated tab where they can easily set additional address pools and if necessary configure a DNS server as for performance enhancements we've upgraded the IPC MB kernel module to Intel's newest Upstream version 1.5 which includes new optimizations tailored for CPUs featuring The AVX 512 and avx2 support these upgrades really Empower you to do more with your network infrastructure whether you're managing complex user groups are just simply aiming for performance and finally we have our high availability on AWS we're excited to announce this for our AWS users this could be a really exciting change with our ha solution paired with primary and secondary firewalls you can quickly fail over between two instances of pfSense plus and AWS our implementation integrates standard ha features with AWS enhancements to provide configuration synchronization Optimal Performance and a reliable connection when you're faced with the disruption the pfSense plus awsh ha offers continued reliability and availability for your Cloud deployment minimizing downtime and maintaining connectivity of your mission critical operations within AWS all right and before we wrap up let's touch on pricing and support pricing for pfSense plus starts at just $129 a year and includes tack light support uh pfSense Plus is available for download through our store at shop.net gate.com or through our partner program additionally for those interested in testing our latest features we invite you to check out our net installer and explore its capabilities through our informative Deep dive video which is linked down in the description if you're looking for a more human experience our sales team is here to help you can contact them at sales nate.com however you choose to purchase pfSense plus we're here for you every step of the way and that'll cover it for our overview of PF plus version 243 thank you so much for watching like And subscribe for more news updates and guides from netgate I'm Justin and I'll see you next time [Music]

Channel: Netgate

Views: 3,997

Keywords: netgate, pfsense, update, oss, opensource, router, firewall, VPN, TNSR, Computer Networking, NAT, bridging, vlan, multi wan, virtual private networks, virtual LAN, OpenVPN, WireGuard, IPSec, Traffic Shaping, Network Address Translation, Edge to Cloud, Zero Trust, ZTNA, Zero Trust Networking, QAT, DHCP Server, DNS Server, Access Control Lists, BGP, FRR, Dynamic Routing, VRRP, High Availability, High Speed Routing, BFD, NETCONF, RESTCONF, OSPF, Kea, vRouter, Secure Networking, IPv4, IPv6, NGFW

Id: FELjJRlKx1Q

Length: 7min 26sec (446 seconds)

Published: Wed Jun 12 2024