The Inverse team is pleased to announce the immediate availability of 
PacketFence 4.4.0. This is a major release with new features, enhancements and 
important bug fixes. This release is considered ready for production use and 
upgrading from 4.3.0 is strongly advised.

What is PacketFence?

PacketFence is a fully supported, trusted, Free and Open Source Network Access 
Control (NAC) solution. Boasting an impressive feature set, PacketFence can be 
used to effectively secure small to very large heterogeneous networks.

Among the features provided by PacketFence, there are:

Powerful BYOD (Bring Your Own Device) workflows
Simple and efficient guests management
Multiple enforcement methods with Role-Based Access Control (RBAC)
Compliance checks for computers present on your network
Integration with various vulnerability scanners and intrusion detection 
Bandwidth accounting for all devices
A complete overview of the solution is available from the official website:

Changes Since Previous Release

New Features

Added the possibility to search by computer name on the nodes page
Added support for the Anyfi WiFi controller
Show portal profiles directly on the admin gui
Added local account authentication for EAP
Added support for unreg date with dynamic year
Added support for NetGear FSM7328S switches
Added new network profile filter
Added external captive portal support for AeroHIVE
Added external captive portal support for Xirrus
Added support for Dynamic Access lists on the Cisco Catalyst 2960
Added the ability to search switches
Added support for Dlink DES3028 switches
Added reuse 802.1x credential on the portal profile
Added support for Mikrotik access point
Added ability to create local accounts when registering with external 
authentication sources

Added support to configure either NATting or routed mode for inline layer 2 
interfaces from the GUI
Added informational messages in the GUI for inline interfaces
Improvement of Inline Layer 3 (Inline L3 can only be defined behind Inline 
Layer 2 network)
pfbandwidthd is now able to capture on all inline interfaces
Added an option to set the timeout value for LDAP connections in authentication 
FreeRADIUS default configuration should now be more scalable and resilient to 
misbehaving devices
Added the possibility to create rules using the username in OAuth 
authentication sources
Added the RADIUS request to the vlan filter
Moved from using Storable to Sereal to serialize cached data
Refactored portal profile filters to make it easier to extend
Improved support for Dlink DES 3526 switches
Rewrited log format [] for device mac () for switch "" for userID
Improve error handling of web api
Raised ServerLimit on Apache httpd.portal, lowered httpd.portal Timeout and 
KeepAliveTimeout to improve responsiveness under load
Do not overlay the controllerIp if one is already defined when creating a switch
Verify the user roles level before creating a user via the admin gui
Added test iplogs not closed in pftest
Remove direct usage of Apache2 modules in captive portal
Bug Fixes

Fix issue when adding multiple portal profile filters causing the wrong type to 
be picked
Fix issue when a trap is received for a switch that does not implement 
Fix issue when a role is changed in the administration interface and the node's 
access is not reevaluated
Fix issue when a passthrough is not able to be resolved and would generate an 
invalid DNS response
Fix missing files in logrotate file
Fix issue when setting a port in trunk on a Cisco Catalyst 3560, 3750 and 3750G 
would fail
Fix admin roles for bulk actions for nodes/users
Fix issue where person was not updated in the database because of a case (non) 
Fix send user password by email from the GUI
Fix backward compatibility issue for gaming-registration that should redirect 
to device-registration
Fix device-registration and status pages that were not accessible in inline 
mode when doing high-availability
Fix filetype of wireless-profile.mobileconfig not being set properly
Fix issue of iplog entries not being closed
See for 
the complete change log.

See the UPGRADE file for notes about upgrading:

Getting PacketFence

PacketFence is free software and is distributed under the GNU GPL. As such, you 
are free to download and try it by either getting the new release or by getting 
the sources:

Documentation about the installation and configuration of PacketFence is also 

How Can I Help?

PacketFence is a collaborative effort in order to create the best Free and Open 
Source NAC solution. There are multiple ways you can contribute to the project:

Documentation reviews, enhancements and translations
Feature requests or by sharing your ideas
Participate in the discussion on mailing lists 
Patches for bugs or enhancements
Provide new translations of remediation pages

Getting Support

For any questions, do not hesitate to contact us by writing to

You can also fill our online form ( 
and a representative from Inverse will contact you.

Inverse offers professional services to organizations willing to secure their 
wired and wireless networks with the PacketFence solution.

Want excitement?
Manually upgrade your production database.
When you want reliability, choose Perforce
Perforce version control. Predictably reliable.
PacketFence-announce mailing list

Reply via email to