The Inverse team is pleased to announce the immediate availability of
PacketFence v9. This is a major release with new features, enhancements
and bug fixes. This release is considered ready for production use and
upgrading from previous versions is strongly advised.
What is PacketFence?
PacketFence is a fully supported, trusted, Free and Open Source Network
Access Control (NAC) solution. Boasting an impressive feature set,
PacketFence can be used to effectively secure small to very large
heterogeneous networks.
Among the features provided by PacketFence, there are:
* powerful BYOD (Bring Your Own Device) capabilities
* state-of-the art devices fingerprinting with Fingerbank
* multiple enforcement methods including Role-Based Access Control
(RBAC) and hotspot-style
* compliance checks for endpoints present on your network
* integration with various vulnerability scanners, intrusion detection
solutions, security agents and firewalls
* bandwidth accounting for all devices
A complete overview of the solution is available from the official
website:https://packetfence.org/about.html
Changes Since Previous Release
*New Features*
* New web interface based on Vue.js and Bootstrap 4
* Let's Encrypt SSL certificates support for captive portal and RADIUS
* Cisco ASA VPN support with the captive portal
* Fortinet VPN support
* DHCP Filter to reply custom attributes in the OFFER and/or ACK
(deprecate old DHCP Filter)
*
Add 802.1X and CoA support for Fortinet FortiSwitch
* Add module to support PICOS white box switches
* Support for Aerohive access point with switch port
* Support for Aruba Instant Access switch module
* Debian 9 (Stretch) support
*Enhancements*
*
Now including timeout when authorizing a web-auth user on an
Ubiquiti UniFi controller
* Now providing defaults for the Apache filters
* Allow to configure the RADIUS attributes and their lookup order for
extracting the username
* conf/stats.conf has a default file now
* VoIP configuration parameter in node_cleanup task to bypass VoIP devices
* Adding/removing passthroughs doesn't require to restart pfdns
anymore (#3127)
*
Added support for RADIUS disconnect on Ruckus SmartZone
* Disable Microsoft Active Directory join operating system check option
* Disable DNS lookup in MariaDB configuration
* Enable performance_schema if needed
* Display local account in the captive portal during registration if
applicable (#3615)
* Exception for portal detecion URL in pfdns
* Added support for Ruckus roles
* sms_carrier 'id' column is now auto-increment (#1270/PR#3684)
* Better logging for haproxy-portal that allows to identify missing
passthroughs
* Allow to skip management node in portal load-balancing when running
in a cluster
* DHCP and DNS services can be enabled on a specific interface
* VoIP support for Dell switches
*Bug Fixes*
* Fixed the systemd logic in pfdhcp
* Fixed winbindd respawning extremely fast when failing to start
* Fixed winbindd processes not being killed on latest version of Samba
* Allow disabling processing of IPv6 packets in the pfdhcplistener
* fixed untainted variable (#3920)
* fixed on-registration scanning (#3963)
* Set the realm in the RADIUS request when doing machine authentication
* Keep connections to the unified API alive
* Fixed the documentation and the form for the Juniper SRX firewall
Seehttps://github.com/inverse-inc/packetfence/compare/packetfence-8.3.0...packetfence-9.0.0for
the complete change log.
See the UPGRADE file for notes about
upgrading:https://github.com/inverse-inc/packetfence/tree/packetfence-9.0.0/UPGRADE.asciidoc
Getting PacketFence
PacketFence is free software and is distributed under the GNU GPL. As
such, you are free to download and try it by either getting the new
release or by getting the sources:https://packetfence.org/download.html
Documentation about the installation and configuration of PacketFence is
also available:https://packetfence.org/support/index.html#/documentation
How Can I Help?
PacketFence is a collaborative effort in order to create the best Free
and Open Source NAC solution. There are multiple ways you can contribute
to the project:
* Documentation reviews, enhancements and translations
* Feature requests or by sharing your ideas
*
Participate in the discussion on mailing lists
(https://packetfence.org/support/index.html#/community)
* Patches for bugs or enhancements
* Provide new translations of remediation pages
Getting Support
For any questions, do not hesitate to contact us by writing
tosupp...@inverse.ca <mailto:supp...@inverse.ca>
You can also fill our online form (https://inverse.ca/#contact) and a
representative from Inverse will contact you.
Inverse offers professional services to organizations willing to secure
their wired and wireless networks with the PacketFence solution.
--
Ludovic Marcotte
lmarco...@inverse.ca :: +1.514.755.3630 :: https://inverse.ca
Inverse inc. :: Leaders behind SOGo (https://sogo.nu), PacketFence
(https://packetfence.org) and Fingerbank (https://fingerbank.org)
_______________________________________________
PacketFence-devel mailing list
PacketFence-devel@lists.sourceforge.net
https://lists.sourceforge.net/lists/listinfo/packetfence-devel
