OPNsense has released version 24.1. The release, codenamed “Savvy Shark”, brings numerous improvements to the open-source firewall platform.
Key New Features
Modernized Interface
OPNsense 24.1 brings a modernized MVC-based interface with improved user guidance. The interface has been redesigned in many areas and offers a more consistent user experience.
Improved Authentication
- Deferred Authentication for multi-factor authentication (MFA)
- Improved LDAP/RADIUS integration
- Extended TOTP support
Firewall and Networking
- Improved firewall alias management with new types
- Extended traffic shaping functionality
- IPv6 improvements
System Updates
- Update to FreeBSD 13.2-p9
- PHP 8.2 with security updates
- Updated Phalcon 5 framework
- Unbound DNS updated to version 1.19
VPN and Security
- Improved WireGuard support
- Updated IPsec configuration via swanctl
- OpenVPN improvements
- Updated Suricata IDS/IPS engine
API Improvements
- Extended REST API for automation
- Improved API key management
- New API endpoints for configuration management
Upgrade Notes
Existing OPNsense installations can be updated to version 24.1 via the built-in update system. It is recommended to create a complete backup of the configuration before updating.
Implementation Support
DATAZONE supports you with the implementation and operation of your OPNsense firewall. Contact us for individual consultation.
More on these topics:
More articles
Firewall for small businesses 2026: the honest comparison
Firewall for small businesses 2026 compared: FritzBox, OPNsense, pfSense Plus, Sophos XGS and Fortinet FortiGate -- what fits for 5 to 50 users?
The Cloud Is Not a Backup: On-Premises TrueNAS as Your Resilient Extra Layer
After destroyed data centers, even AWS pointed customers to their own backups. Why an on-premises backup layer with TrueNAS (immutable ZFS snapshots, pull replication, air-gap) is a mandatory part of any data strategy.
MFA Methods: TOTP vs. FIDO2 vs. Push — Which for SMBs?
MFA comparison for SMBs: TOTP, FIDO2 and push notifications in practice. Phishing resistance, cost, and rollout with Authentik or Keycloak.