2.0 New Features and Changes

This is a partial, work in progress list of the new features and major changes in the pfSense 2.0 release.

GRE tunnels
gif tunnels
3G support
Dial up modem support
LAGG Interfaces
Interface groups
IP Alias type Virtual IPs
QinQ VLANs
Gateway enhancements for multi-WAN
Can use Block Private Networks / Block Bogon Networks on any interface
All interfaces are optional except WAN
All interfaces can be renamed, even LAN/WAN
Bridging enhancements - can now control all options of if_bridge, and assign bridge interfaces

Set to HTTPS by default, HTTP redirects to HTTPS port
Dashboard and widgets added
System > Advanced screen split into multiple tabs, more options available.
SMTP email alerts and growl alerts
New default theme - pfsense_ng
Some community-contributed themes added
Contextual help available on every page in the web interface, linking to a webpage containing help and documentation specific to that page.

Traffic shaper rewritten - now handles any combination of multi-WAN and multi-LAN interfaces. New wizards added.
Layer7 protocol filtering
EasyRule - add firewall rules from log view (and from console!)
Floating rules allow adding non-interface specific rules
Dynamically sized state table based on amount of RAM in the system
More Advanced firewall rule options
FTP helper now in kernel
TFTP proxy
Schedule rules are handled in pf, so they can use all the rule options.
State summary view, report shows states grouped by originating IP, destination IP, etc.

New user manager, centralizing the various user configuration screens previously available.
Per-page user access permissions for administrative users
Three built-in authentication types - local users, LDAP and RADIUS.
Authentication diagnostics page

Certificate manager added, for handling of IPsec, web interface, user, and OpenVPN certificates.

OpenVPN filtering - an OpenVPN rules tab is available, so OpenVPN interfaces don't have to be assigned to perform filtering.
OpenVPN client export package - provides a bundled Windows installer with certificates, Viscosity export, and export of a zip file containing the user's certificate and configuration files.
OpenVPN status page with connected client list -- can also kill client connections
User authentication and certificate management
RADIUS and LDAP authentication support

Voucher support added
Multi-interface capable
Pass-through MAC bandwidth restrictions
Custom logout page contents can be uploaded
Allowed IP addresses bandwidth restrictions
Allowed IP addresses supports IP subnets
"Both" direction added to Allowed IP addresses
Pass-through MAC Auto Entry - upon successful authentication, a pass-through MAC entry can be automatically added.
Ability to configure calling station RADIUS attributes

Contents