The Inverse team is pleased to announce the immediate availability of PacketFence v6.4.0. This is a major release with new features, enhancements and important bug fixes. This release is considered ready for production use and upgrading from previous versions is strongly advised.

     What is PacketFence?

PacketFence is a fully supported, trusted, Free and Open Source Network Access Control (NAC) solution. Boasting an impressive feature set, PacketFence can be used to effectively secure small to very large heterogeneous networks.

Among the features provided by PacketFence, there are:

 * powerful BYOD (Bring Your Own Device) capabilities
 * state-of-the art devices fingerprinting with Fingerbank
 * multiple enforcement methods including Role-Based Access Control
   (RBAC) and hotspot-style
 * compliance checks for endpoints present on your network
 * integration with various vulnerability scanners, intrusion detection
   solutions, security agents and firewalls
 * bandwidth accounting for all devices

A complete overview of the solution is available from the official website:

     Changes Since Previous Release

*New Features*


   Added Mojo Networks WiFi equipment support (PR#1765)

 * Made Web admin reports more interactive (PR#1731)
 * Support authentication through Eduroam (PR#1642)
 * Allow to create different portal templates based on the browser
   locale (PR#1638)


 * Improved IP log performance (PR#1832 / PR#1828 / PR#1790)
 * Added fault tolerance on RADIUS monitoring scripts (PR#1831)
 * Improved the database and maintenance backup script (PR#1830)
 * Added password caching support for Novell eDirectory (PR#1829)
 * Improved caching of LDAP users data (PR#1826)
 * Improved clustering documentation (PR#1825)
 * Added RADIUS command line interface support on port 1812 (PR#1817)
 * Removed useless htaccess file search for each HTTP request (PR#1806)

   Turned off HTTP KeepAlive to avoid connections holding onto Apache
   processes (PR#1801)

 * Added Cisco MSE documentation (PR#1799)
 * Ability to query 'iplog_archive' table for detailed IP/MAC history
 * Now also display the status for sub services from the Web interface
   (#1040 /PR#1792)
 * Requests made with username 'dummy' will not be recorded in the
   RADIUS audit log anymore (PR#1789)
 * More lightweight p0f processing (PR#1788)
 * Removed useless logging in pfdns.log (PR#1782)
 * Added an activation timeout on sponsor source (PR#1777)
 * Improved captive portal logging (PR#1769)
 * Allow the OAuth landing page template to be customizable (PR#1767)
 * Use RESTful call for RADIUS accounting instead of Perl (#1760)
 * Optimized getting node information from the database (PR#1753)
 * New action generateconfig for pfcmd service command (PR#1744)
 * Added memory limitation for httpd.portal processes (PR#1738)
 * Added predefined search in RADUIS audit log and DHCP Option 82 log
 * Improved display of fingerprinting informations in the nodes search
 * Allow captiveportal::Form::Authentication to be customize (PR#1666)
 * Default config overlay for switches.conf, profiles.conf,
   pfqueue.conf and violations.conf (PR#1647)
 * Optimized queries for finding open violations (PR#1718)

*Bug Fixes*

 * Fixed floating devices in active/active clusters (PR#1800)

   Fixed and improved syntax ofpfcmd ipmachistory(#1794)

 * Fixed wrong bandwidth calculation on RADIUS accounting (#1733)
 * Fixed empty Calling-Station-Id in RADIUS accounting (PR#1756)
 * Make sure connection caches are cleared after forking (#1748 / #1749
   / PR#1751)
 * Added a workaround for DHCP clients that do not respect short lease
   times (#1673)
 * Added namespace parameter in WMI rule (PR#1633)
 * Fixed non-working switch ranges with external portal (#1574 / PR#1613)
 * Joining a domain will sometimes return a 500 even though it
   succeeded (#1821/#1818)
 * Cisco WLC ignores our CoA requests but accepts our Disconnect
   Requests (#1819)
 * pfdetect: pipe is closing when no content (#1814)

   Conditionis a Phonein RADIUS audit log is not working properly (#1813)


   Condition AutoRegistration in RADIUS audit log is not working
   properly (#1812)

 * Configurator: Status on the services doesn't work (#1811)
 * Invalid SQL for iplog_cleanup_sql (#1802)
 * Added request cache support (#1775)
 * Added stack trace logging (#1774)
 * Removed redundant SQL indexes (#1773)
 * Removed unused code in pf::locationlog (#1772)
 * Fixed missing fields in RADIUS audit log (#1395)
 * Fixed RADIUS audit log hours selection (#1364)

See the complete change log.

See the UPGRADE file for notes about upgrading:

     Getting PacketFence

PacketFence is free software and is distributed under the GNU GPL. As such, you are free to download and try it by either getting the new release or by getting the sources:

Documentation about the installation and configuration of PacketFence is also available:

     How Can I Help?

PacketFence is a collaborative effort in order to create the best Free and Open Source NAC solution. There are multiple ways you can contribute to the project:

 * Documentation reviews, enhancements and translations
 * Feature requests or by sharing your ideas

   Participate in the discussion on mailing lists

 * Patches for bugs or enhancements
 * Provide new translations of remediation pages

     Getting Support

For any questions, do not hesitate to contact us by writing <>

You can also fill our online form ( and a representative from Inverse will contact you.

Inverse offers professional services to organizations willing to secure their wired and wireless networks with the PacketFence solution.

Ludovic Marcotte  ::  +1.514.755.3630  ::
Inverse inc. :: Leaders behind SOGo (, PacketFence 
( and Fingerbank (

PacketFence-devel mailing list

Reply via email to