OPNsense has released version 24.1. The release, codenamed “Savvy Shark”, brings numerous improvements to the open-source firewall platform.
Key New Features
Modernized Interface
OPNsense 24.1 brings a modernized MVC-based interface with improved user guidance. The interface has been redesigned in many areas and offers a more consistent user experience.
Improved Authentication
- Deferred Authentication for multi-factor authentication (MFA)
- Improved LDAP/RADIUS integration
- Extended TOTP support
Firewall and Networking
- Improved firewall alias management with new types
- Extended traffic shaping functionality
- IPv6 improvements
System Updates
- Update to FreeBSD 13.2-p9
- PHP 8.2 with security updates
- Updated Phalcon 5 framework
- Unbound DNS updated to version 1.19
VPN and Security
- Improved WireGuard support
- Updated IPsec configuration via swanctl
- OpenVPN improvements
- Updated Suricata IDS/IPS engine
API Improvements
- Extended REST API for automation
- Improved API key management
- New API endpoints for configuration management
Upgrade Notes
Existing OPNsense installations can be updated to version 24.1 via the built-in update system. It is recommended to create a complete backup of the configuration before updating.
Implementation Support
DATAZONE supports you with the implementation and operation of your OPNsense firewall. Contact us for individual consultation.
More on these topics:
More articles
Backup Strategy for SMBs: Proxmox PBS + TrueNAS as a Reliable Backup Solution
Backup strategy for SMBs with Proxmox PBS and TrueNAS: implement the 3-2-1 rule, PBS as primary backup target, TrueNAS replication as offsite copy, retention policies, and automated restore tests.
OPNsense Suricata Custom Rules: Write and Optimize Your Own IDS/IPS Signatures
Suricata custom rules on OPNsense: rule syntax, custom signatures for internal services, performance tuning, suppress lists, and EVE JSON logging.
Systemd Security: Hardening and Securing Linux Services
Systemd security hardening: unit hardening with ProtectSystem, PrivateTmp, NoNewPrivileges, CapabilityBoundingSet, systemd-analyze security, sandboxing, resource limits, and creating custom timers.