Feature announcements, product updates, and engineering notes from the NetDefense team.https://netdefense.io/en-ushttps://netdefense.io/blog/remote-access-policy/https://netdefense.io/blog/remote-access-policy/NDAgent v1.15.0 adds remote_access_policy, a device-local ceiling on remote sessions — full, readonly, or disabled — that no operator account, platform compromise, or AI agent can raise remotely, because the value lives only in the device's own configuration.Tue, 28 Jul 2026 00:00:00 GMThttps://netdefense.io/blog/secure-by-default-privilege-rejection/https://netdefense.io/blog/secure-by-default-privilege-rejection/NDAgent v1.14.0 flips reject_dangerous_snippets on by default for new installations — a device now refuses privilege-granting configuration pushes unless its operator explicitly opts out, locally.Sat, 25 Jul 2026 00:00:00 GMThttps://netdefense.io/blog/manage-multiple-opnsense-firewalls/https://netdefense.io/blog/manage-multiple-opnsense-firewalls/A practical, vendor-neutral look at the real options for managing a fleet of OPNsense firewalls in 2026 — from manual per-box administration to OPNcentral, DynFi Manager, infrastructure-as-code, and hosted platforms.Fri, 24 Jul 2026 00:00:00 GMThttps://netdefense.io/blog/read-only-remote-webadmin/https://netdefense.io/blog/read-only-remote-webadmin/Grant auditors, NOC staff, or MSSP customers complete read-only visibility into your managed firewall — see everything, change nothing.Sat, 27 Jun 2026 00:00:00 GMThttps://netdefense.io/blog/opnsense-firmware-upgrades/https://netdefense.io/blog/opnsense-firmware-upgrades/NetDefense can now upgrade OPNsense firmware across your fleet — minor point releases with zero downtime via split-apply, and major series jumps on a planned window. Schedulable, previewable, and available from NDCLI, the web console, and the MCP server.Thu, 04 Jun 2026 00:00:00 GMThttps://netdefense.io/blog/recurring-task-scheduler/https://netdefense.io/blog/recurring-task-scheduler/Schedules are reusable named cadences you attach to the commands you already use — run, sync, and backup — so nightly backups, weekly reboots, and periodic config delivery happen on their own.Wed, 03 Jun 2026 00:00:00 GMThttps://netdefense.io/blog/securing-the-control-channel-to-your-firewalls/https://netdefense.io/blog/securing-the-control-channel-to-your-firewalls/A detailed look at how NetDefense makes forging a command to a managed firewall infeasible: asymmetric device identity, a bidirectionally signed task channel, and an operator-gated rebind ceremony — built so that everything but the two private signing keys can only verify, never forge.Sat, 30 May 2026 00:00:00 GMThttps://netdefense.io/blog/personal-access-tokens/https://netdefense.io/blog/personal-access-tokens/NDCLI now supports static API tokens for headless authentication in CI/CD pipelines, GitHub Actions, and automated scripts.Wed, 27 May 2026 00:00:00 GMT