Netgate is diligently working to get pfSense Plus version 24.08 out the door and is targeting an October release. Implementing an API in such a mature product is difficult, but we know how eager the community is to see a demo of Multi-Instance Management. On September 11, 2024, our VP of Marketing, Glen Shok, held a session with AWS Howdy Partner on their Twitch platform. This session included a demo of Multi-Instance Management and the Mesh VPN product currently in development.
Netgate’s partner, Rocky Mountain Tech Team, had a customer who needed to pass PCI compliance scans. To help their customer get this done, they had to find and change a system tunable that was not showing up in the GUI. They wrote a short blog on accomplishing this simple pfSense Plus configuration change.
Thank you to the Rocky Mountain Tech Team for sharing these tips!
TNSR® in the Cloud
Did you know Netgate offers pfSense Plus and TNSR software on the AWS and Azure marketplaces? You can use the products on a “pay-as-you-go” (PAYGO) basis or subscribe to one- or three-year terms for a discounted price. Further discounts may be available via private offer, please get in touch with us to discuss.
Try Netgate in the Cloud
Would you like to protect your cloud workload or establish a secure VPN edge-to-cloud connection? See if pfSense+ or TNSR software is right for you! We offer no-cost proof of concept trials for qualified opportunities. The cloud platform credits your account for cloud resources associated with the PoC (certain limits may apply), and Netgate covers the cost of our products. Try Netgate in the Cloud for more details and to get started!
Configure /31 and /127 Point-to-Point Links With TNSR Software
It's uncommon to see point-to-point (P2P) links configured with /31 for IPv4 or /127 for IPv6 on network devices. Typically, network engineers stick to the traditional approach of using /30 for IPv4 and /64 for IPv6. However, there are several advantages to opting for P2P subnet masks instead.
The Netgate Forum is a great resource for all our TNSR customers. On the forum you can read about user and use case experiences, respond to them, and even post your own. From time to time we will select interesting topics, questions, and solutions from the forum and highlight them here in our Newsletter!
Today’s topic from the forum: Can TNSR software support VRFs for IPsec tunnels?
Virtual Routing and Forwarding (VRF) is a method of turning one physical router into multiple virtual routers. Each VRF instance has its own IPv4 and/or IPv6 routing tables and associated set of interfaces. Segmentation is a key principle in the landscape of overall security because it is all about limiting access. VRFs enforce logical isolation at Layer 3. VRFs can be completely isolated from one another, or they can be configured to share specific routing information. Using VRFs for IPsec tunnels adds configurable segmentation as a method of limiting access even in highly secure IPsec VPNs.
Here’s a great example that just came in a few days ago:
User1: Can you configure TNSR to support VRFs for IPSec Tunnels?
User2: Yes, you can
1. create your vrf, in case you don't have one:
2. Assign your new vrf to the ipsec tun ipip interface. In my case, this is ipip101 interface.
3. Configure static route in your new vrf pointing to the remote ipip interface.
Monthly Customer Highlights From PeerSpot
“We saw the value of pfSense within a few days. Some of it was instant, but other things took time. When we first implemented it, we saw some value, and a few days later, it kept impressing me with more. A week went by, and I still saw more value.
With a firewall, VPN, and other router functionalities, pfSense offers an excellent total cost of ownership. It's a one-time purchase on appliances with no hidden fees, making it significantly more affordable than Cisco products, which require additional licensing, subscriptions, support, and per-feature purchases.”
Tom Lawrence of Lawrence Systems dives into the Netgate 8300 security gateway running pfSense Plus software. Discover its performance, features, and overall capabilities as a network firewall. This is an independent, uncompensated review.
The Netgate Technical Assistance Center (TAC) provides world-class technical assistance for pfSense Plus and TNSR software.
Each Netgate Security Gateway appliance and cloud instance comes with TAC Lite, which provides software updates and zero-to-ping support for effortless setup and configuration. TAC Lite ensures that your Netgate appliance, equipped with pfSense Plus, AWS, or Azure firewall, is Internet-ready and connects to at least one client on the network.
Additionally, every Netgate Secure Router and TNSR software cloud instance includes TAC PRO as standard, with the option to upgrade to TAC Enterprise.
Beyond TAC Lite, there are TAC Professional and TAC Enterprise tiers, which provide quicker response times and cover a broader range of support issues. No matter your support level, TAC is available 24/7/365 to assist you. If you would like to upgrade your current TAC subscription, please contact sales@netgate.com
What Our Customers Say About TAC
“Not only was the response timely, but all of the information I needed was given with clear directions on what to do. Perfect. Excellent support, again. Thank you!”
“Every interaction I have had with your support has been a great experience”
“Everyone on the support team is incredibly knowledgeable, super helpful, and always quick to respond.”
“I have TAC Light on one device, but even with entry-level support my question was answered within 30 minutes.”
“Support responded promptly and provided the necessary configuration example. The engineers are always polite and pleasant to work with, unlike most other support teams we interact with from other companies.”
Netgate Holiday Schedule
As the holidays near, please be aware that Netgate will be closed on the following dates except for Technical Support. Considerations should be made for possible delays due to these closures:
November 28- Thanksgiving
November 29- Thanksgiving
December 24- Christmas Eve
December 25- Christmas
Our 24/7/365 Global Support Technical Assistance Center (TAC) is fully staffed and operational for all holidays. The engineering, sales, manufacturing, and shipping teams will be off for the holidays listed above.
We Want Your Feedback
Thank you for subscribing to the Netgate newsletter, and for your continued support of Netgate and our products. We are always looking for ways to improve and value your feedback. If you have suggestions, please reply to this email, contact us, or send an email to mktg@netgate.com. You can also talk to us on social media, or visit our forum.
Netgate is a registered trademark of Rubicon Communications, LLC TNSR is a registered trademark of Rubicon Communications, LLC pfSense is a registered trademark of Electric Sheep Fencing, LLC Other trademarks are the property of their respective owners.
Netgate, 4616 W Howard Lane, Suite 900, Austin, TX 78728, USA, +1 (512) 646-4100