Important

Netgate is offering COVID-19 aid for pfSense software users, learn more.

Download Installation Media

Note

Customers who have purchased firewalls from the Netgate Store can get factory installation images by contacting support. The Netgate Product Manuals contain specific instructions for each model. Some Netgate devices can also run Community Edition images, but the factory images offer the best user experience.

For other hardware, continue reading.

  • Navigate to www.pfsense.org in a web browser on a client PC.

  • Click Downloads.

  • Select a File Type of Install.

  • Select an Architecture:

    AMD64 (64-bit)

    For 64-bit x86-64 Intel or AMD hardware.

    Netgate ADI

    For most of the SG-series firewalls from the Netgate Store, specifically, models which contain a USB console port on COM2.

  • Select a Platform for a 64-bit install:

    USB Memstick Installer

    A disk image which can be written to a USB memory stick (memstick) and booted on the target hardware for installation.

    CD Image (ISO) Installer

    To install from optical media or for use with IPMI or hypervisors which can boot from ISO images.

  • Select a Console for USB Memstick Installer images:

    VGA

    Installs using a monitor and keyboard connected to the target hardware.

    Serial

    Installs using a serial console on COM1 of the target hardware. This option requires a physical console port.

  • Select a Mirror that is close to the client PC geographically.

  • Click fa-download Download.

  • Copy the SHA-256 sum displayed by the page to verify the download later.

Note

To view a listing of all files on the mirror, do not select any options from the drop-down menus except for a mirror then click Download.

The file names for pfSense software version 2.4.5-RELEASE-p1 are:

USB Memstick Installer (Netgate ADI)

pfSense-CE-memstick-ADI-2.4.4-RELEASE-p3-amd64.img.gz

USB Memstick Installer (VGA)

pfSense-CE-memstick-2.4.4-RELEASE-p3-amd64.img.gz

USB Memstick Installer (Serial)

pfSense-CE-memstick-serial-2.4.4-RELEASE-p3-amd64.img.gz

ISO Image installer

pfSense-CE-2.4.4-RELEASE-p3-amd64.iso.gz

See also

At any point in the installation if something does not go as described, check Troubleshooting Installation Issues.

Verifying the integrity of the download

The integrity of the installer image can be verified by comparing a computed hash value of the downloaded file against a hash computed by the pfSense project when the files were originally created. The current hashes provided by the project use SHA-256.

The SHA-256 sum displayed on the download page is the best source, as it is not pulled from the same directory as the download images. A file containing the SHA-256 sum is also available on the mirrors with the same filename as the chosen installer image, but ending in .sha256.

Use the accompanying SHA-256 sum from the download site or .sha256 file to verify that the download successfully completed and is an official release of pfSense software.

Warning

The SHA-256 sums are computed against the compressed versions of the downloaded files. Compare the hash before decompressing the file.

Hash calculation programs vary by operating system, some common examples include:

Use HashTab to compare the value against the provided hash. With HashTab installed, right click on the downloaded file to access the File Hashes tab containing the SHA256 hash, among others.

Tip

If a SHA256 hash is not displayed, right click in the hash view and click Settings, then check the box for SHA256 and click OK.

The generated SHA256 hash from HashTab can be compared with the contents of the provided checksum.

Note

It is also possible to use the Linux sha256sum or md5sum commands within Cygwin if the Cygwin command prompt is launched as an Admin user.

Use the shasum or md5 command line utilities to generate a hash of the downloaded file.

Example:

shasum -a 256 pfSense-CE-2.4.4-RELEASE-p3-amd64.iso.gz

The generated SHA256 hash can be compared with the contents of the provided .sha256 checksum.

Use the sha256sum or md5sum command line utilities to generate a hash of the downloaded file.

sha256sum pfSense-CE-2.4.4-RELEASE-p3-amd64.iso.gz

The generated SHA256 hash can be compared with the contents of the provided .sha256 checksum.

Use the sha256 or md5 command line utilities to generate a hash of the downloaded file.

sha256 pfSense-CE-2.4.4-RELEASE-p3-amd64.iso.gz

The generated SHA256 hash can be compared with the contents of the provided .sha256 checksum.