The Inverse team is pleased to announce the immediate availability of 
PacketFence 4.1.0. This is a major release with new features, enhancements and 
important bug fixes. This release is considered ready for production use and 
upgrading from 4.0.6-2 is strongly advised.

What is PacketFence ?

PacketFence is a fully supported, trusted, Free and Open Source Network Access 
Control (NAC) solution. Boasting an impressive feature set, PacketFence can be 
used to effectively secure small to very large heterogeneous networks.

Among the features provided by PacketFence, there are:

Powerful BYOD (Bring Your Own Device) workflows
Simple and efficient guests management
Multiple enforcement methods with Role-Based Access Control (RBAC)
Compliance checks for computers present on your network
Integration with various vulnerability scanners and intrusion detection 
Bandwidth accounting for all devices
A complete overview of the solution is available from the official website:

Changes Since Previous Release

New Features

Portal profiles can now be filtered by switches
Proxy interception support
New pfcmd "fixpermissions" command
Added a "Null" authentication source for simple "Click to connect" portals
Displayed columns of nodes are now customizable
Create a single node or import multiple nodes from a CSV file from the Web 
admin interface
LDAP authentication sources can now filter by group membership using a second 
LDAP query
Extended definition of access durations
FreeRADIUS no longer needs to be restarted after adding a switch
New customizable ACLs for the Web admin interface
Force10 switches support

Improved error messages in RADIUS modules
Simple search for nodes now includes IP address
Search by MAC address for nodes and users now accepts any MAC format
Improved starting delay when using inline mode
Added memcached as a managed service
Added CoA support for Xirrus access point
Improved validation of VLAN management
Updated FontAwesome to version 3.2.1
Each portal profile can now have a different redirection URL
Initial destination URL is now respected with Firefox
An Htpasswd source can now define sponsors
Improved display of pie charts (limit of legend labels and highlight of table 
Creation of users is now performed from the users page (was on the 
configuration page)
Validate file path when saving an Htpasswd authentication source
Improved validation of a sponsor's email address
Allow actions depending on authentication source type
Modified logrotate so it uses copytruncate instead of restarting the services.
Now comes with a corosync compatible barnyard2 init script in addons.
Unreg the node when you come from a secure connection to an open connection
Allow a self-registered node by SMS to go back to the registration page
Sponsor email authentication source can refuse email addresses of the local 
domain (as the email source)
Updated German (de) translation
Bug Fixes

RADIUS configuration files are no longer replaced when updating packages
Fixed match of Htpasswd authentication source (#1714)
Fixed creation of users without a role (#1721)
Fixed expiration date of registration to the end of the day (#1722)
Fixed caching issue when editing authentication sources (#1729)
Allow rules with dashes (#1730)
Fixed vconfig setting the wrong name_type
Fixed help text in Web admin (#1724)
Removed references to unavailable snort rules (#1715)
Fixed LDAP regexp condition not considering all attribute values (#1737)
Fixed sort by phone number and nodes count when performing an advanced search 
on users (#1738)
Fixed users searches not being saved in the proper namespace
Fixed handling of form submit when saving a user search
Fixed self-registration of multiple unverified devices
Fixed duplicate entries in advanced search of nodes
Fixed advanced search by node category
Fixed reordering of conf sections and groups (#1749)
Fixed pid of SMS-registered devices (was "admin" in certain circumstances)
Fixed saving of 'allow local domain' option when disabled in an email 
authentication source
The 'allow local domain' option of the email source will now only affect the 
user who registers by email
Fixed ifoctetshistoryuser command to use the correct query when just a user is 
Fixed network-detection for IE 8
Fixed SQL query of SSID report in Web admin
See the ChangeLog file for the complete list of changes:

See the UPGRADE file for notes about upgrading:

Getting PacketFence

PacketFence is free software and is distributed under the GNU GPL. As such, you 
are free to download and try it by either getting the new release or by getting 
the sources:

Documentation about the installation and configuration of PacketFence is also 

How Can I Help ?

PacketFence is a collaborative effort in order to create the best Free and Open 
Source NAC solution. There are multiple ways you can contribute to the project:

Documentation reviews, enhancements and translations
Feature requests or by sharing your ideas
Participate in the discussion on mailing lists 
Patches for bugs or enhancements
Provide new translations of remediation pages

Getting Support

For any questions, do not hesitate to contact us by writing to

You can also fill our online form ( 
and a representative from Inverse will contact you.

Inverse offers professional services to organizations willing to secure their 
wired and wireless networks with the PacketFence solution.
Rapidly troubleshoot problems before they affect your business. Most IT 
organizations don't have a clear picture of how application performance 
affects their revenue. With AppDynamics, you get 100% visibility into your 
Java,.NET, & PHP application. Start your 15-day FREE TRIAL of AppDynamics Pro!
PacketFence-announce mailing list

Reply via email to