pfSense Plus 25.11.1: What to know before upgrading

pfSense Plus 25.11.1 is a maintenance and security release, but there are a few changes worth understanding before you upgrade.

Watch the video for a walkthrough of the changes and what to check on your system.

In this video, I cover the changes that matter, including TLS certificate requirements that could affect access to the web interface, stricter cryptographic requirements in OpenSSL, IPv6 issues involving TCP Segmentation Offload (TSO), stability fixes and a hardware-specific fix for the Netgate 2100.

Whether you run pfSense in a home lab or a production environment, checking these changes beforehand could save you some frustration.

The video covers:

• TLS certificate changes and stricter cryptographic requirements

• High, Low and Legacy certificate security levels

• Self-signed and expired certificates

• Certificate Authority considerations for VPNs

• IPv6 and TCP Segmentation Offload fixes

• Stability and reliability improvements

• The Netgate 2100 LAN port driver fix

• A security fix for IPv6 router advertisements

• What to check before upgrading

If you need help with pfSense, network design or business IT infrastructure, Sheridan Computers offers consulting and support.