Download pfsensece280releaseamd64isogz from the official Netgate mirror, verify the checksum, and build the firewall your network deserves.
Critical vulnerabilities like the "SSH Terrapin Attack" and various webGUI XSS exploits have been addressed out-of-the-box. pfsensece280releaseamd64isogz
The gateway monitoring system now includes "fail-back" support, which allows the firewall to clear states from lower-tier gateways when a preferred (higher-tier) gateway recovers, ensuring traffic returns to the best path. Important Upgrade Notes and Best Practices verify the checksum
*Secure boot may work with pfSense 2.8.0 but is not officially certified. pfsensece280releaseamd64isogz
Upgrade recommendations
You can verify your download matches this hash to ensure the file is not corrupted or tampered with.