Updating

The NetDefense plugin ships through OPNsense’s standard package system, so updates flow through the same channels as everything else on the device.

Automatic Updates

Tip

If you installed NetDefense using the repository method, the plugin will be automatically updated during regular OPNsense system updates.

The NetDefense repository is registered alongside the official OPNsense repositories. In practice:

• NetDefense updates are included in standard pkg upgrade operations
• Updates apply during scheduled firmware updates
• No manual steps are needed for routine updates

Updating via System Updates

The easiest way to keep NetDefense updated is through OPNsense’s built-in update system:

1. Navigate to System > Firmware > Updates

2. Click Check for updates

3. If updates are available (including NetDefense), click Update

4. The system will download and apply all available updates

NetDefense updates will be applied along with any other pending updates.

Scheduled Updates

If you have configured automatic updates in OPNsense, NetDefense will be updated automatically:

1. Navigate to System > Settings > Cron

2. Verify your firmware update schedule

3. NetDefense updates will be included in these scheduled updates

Note

We recommend keeping your OPNsense system on a regular update schedule to receive security patches and new features promptly.

Manual Updates

Via Command Line

If you prefer to update NetDefense specifically or need to update outside the normal schedule:

Repository Update

pkg update -f

pkg upgrade os-netdefense

pkg upgrade

Manual Package

For manual package updates (air-gapped environments):

1. Download the latest package from the repository

   curl -L -O https://repo.netdefense.io/prod/opnsense/os-netdefense-X.Y.Z.pkg

2. Transfer to OPNsense device

   scp os-netdefense-X.Y.Z.pkg root@your-opnsense-ip:/tmp/

3. Install the update

   ssh root@your-opnsense-ip
   pkg add -f /tmp/os-netdefense-X.Y.Z.pkg

4. Restart the service

   service ndagent restart

Checking Current Version

Via Web Interface

The installed plugin version can be found at:

System > Firmware > Plugins

Look for os-netdefense in the list of installed plugins.

Via Command Line

pkg info os-netdefense

This displays the installed version along with other package details.

Update Notifications

OPNsense surfaces update notifications in the web interface when new versions are available:

• A notification badge appears on the System menu
• Available updates are listed on the System > Firmware > Updates page

Version Compatibility

OPNsense Compatibility

NetDefense supports:

• OPNsense 25.7 and later
• FreeBSD 14.x base system

Update Safety

Updates preserve:

• All configuration settings
• Device registration status
• Log history

Post-Update Verification

After updating, verify the plugin is working correctly:

1. Check the service status

   service ndagent status

2. Review the logs for any errors

   Navigate to Services > NetDefense > Log File

3. Verify connectivity in your NetDefense dashboard

   The device should remain online and connected after the update.

Troubleshooting Updates

Update Fails to Apply

If the update process fails:

1. Clear the package cache and retry:

   pkg clean -a
   pkg update -f
   pkg upgrade os-netdefense

2. Check for dependency conflicts:

   pkg check -d

Service Doesn’t Start After Update

If the agent fails to start after an update:

1. Check the logs:

   tail -50 /var/log/ndagent.log

2. Verify configuration integrity:

   Navigate to Services > NetDefense > Settings and click Apply

3. Manually restart the service:

   service ndagent restart

See the Troubleshooting guide for more detailed solutions.