pfAdmin

Apple Intelligence (iOS 26 and later, on supported devices) - Explain any firewall log entry in plain English: what happened, the likely cause and what to check. - Summarize your firewall log: repeated attempts and port scans are grouped and counted, then explained. - Explain any firewall rule or alias in plain English, including what it means in practice. - Troubleshoot: describe a problem such as "the internet is slow". Apple Intelligence picks read-only checks to run, then explains what it found and what to try next. It can't change any settings. - The Home Screen widget gains a one-line health summary, and the medium widget adds a sentence from Apple Intelligence describing it. - Describe a rule in your own words, such as "Block the kids' iPad from the internet after 10pm". pfAdmin finds the device, sets the schedule and shows exactly what will change. Nothing is saved until you confirm. - Runs entirely on your device. Firewall data is never sent to Apple or anyone else. Turn it off any time in Settings. Troubleshoot - A new Troubleshoot screen (More > Diagnostics) runs every read-only check in one tap and points out problems such as an offline gateway, a full state table, a stopped DNS Resolver or DNS lookups failing. Works with or without Apple Intelligence. Rule review - pfAdmin now checks your rules and flags common mistakes: rules that never take effect because an earlier rule matches first, rules that are never reached, and services such as SSH or Remote Desktop exposed to the whole internet. - Tap the new info button on any rule for a plain description of exactly what it matches. Works with or without Apple Intelligence. Smarter firewall logs - Firewall logs are now fully parsed: interface names, ports, services and the matching rule are shown for every entry. - A new Insights section highlights repeated blocked attempts and port scans, even without Apple Intelligence. iPhone Duo and iPad - A sidebar puts every screen one tap away on the unfolded iPhone Duo and on iPad. - The dashboard spreads into two columns and keeps clear of the fold. pfSense compatibility - Encrypted configuration backups now match pfSense exactly, so backups made in the app restore in pfSense and vice versa. - Rule statistics and new rules support the rule labels used by pfSense 2.9 and 26.03 or later. - WireGuard live status works with current WireGuard packages, and Flush DNS Cache works again. Security and reliability - App Lock now covers open sheets and dialogs, and Siri shortcuts that change the firewall ask for Face ID and confirmation first. - Fewer simultaneous SSH logins, so pfSense Login Protection is far less likely to lock you out, and stalled connections now time out properly. - Scheduled Network Health runs in the background on its own, even with update alerts off. Fixes - New rules with "any" as the source or destination now keep their port (previously the port was dropped). - Rule, port forward and gateway switches always show the right state after deleting or reordering. - Deleting an alias that rules still use is now refused instead of breaking the next filter reload. - Editing an alias keeps each entry's description with the right entry. - Schedules created by pfAdmin now end their connections on time, and overnight windows cover the whole night. - Top Talkers shows the real source of inbound connections; the ARP table, Dynamic DNS addresses, temperature and uptime now display correctly. - Wake-on-LAN reaches LAN devices, and site-to-site OpenVPN and IPsec tunnels report the right status. - Unencrypted backup files are deleted after sharing, and large config comparisons no longer run out of memory. - Packet capture: Follow Stream no longer loses data, and IPv6 and port filters match correctly. - Layout polish across the dashboard, interfaces, packages and certificates.