OPNsense 25.7 adds faster onboarding, secure service isolation and improved backup options

OPNsense 25.7, code-named “Visionary Viper”, delivers substantial improvements for users who manage firewall and routing deployments. The reengineered setup wizard now uses a modern Model-View-Controller (MVC) architecture and APIs, resulting in a faster and more consistent configuration workflow. A strict web interface mode enables the UI to run with non-root privileges, addressing operational security best practices. Moving to a FreeBSD 14.3 base, the release enhances hardware support, performance, and long-term system reliability.

Following these foundational upgrades, the dashboard now leverages Chart.js 4, which provides sharper system insights and improved monitoring performance. User management has also advanced with CSV import and export options and the ability to impose source-network constraints, making large-scale access control easier for administrators. Alias management has been overhauled to support JSON import and export, speed up rule processing, and improved automation.

Building on backup and network enhancements, a new SFTP plugin allows for secure, standards-compliant offsite backups, replacing the previous Google Drive integration. Dual DHCP server support lets users select Dnsmasq for lightweight needs or Kea DHCP for advanced IPv6 and scalable environments. OpenVPN and IPsec legacy services have been changed to optional plugins, and the platform now includes Greek language support for better localization.