This only makes me sadder that I'm being forced to dump PF for Aruba Clearpass.
We need fine tuned AirPlay control for our Aruba rig, and as far as I can tell,
only Clearpass does it.
<sigh> Thank you Inverse for a great product and great support.
Tim Palmer
From: Francis Lachapelle <[email protected]<mailto:[email protected]>>
Date: Tue, 6 May 2014 20:42:22 -0400
To:
<[email protected]<mailto:[email protected]>>,
<[email protected]<mailto:[email protected]>>,
<[email protected]<mailto:[email protected]>>
Subject: [PacketFence-announce] ANN: PacketFence 4.2.0 released
The Inverse team is pleased to announce the immediate availability of
PacketFence 4.2.0. This is a major release with new features, enhancements and
important bug fixes. This release is considered ready for production use and
upgrading from 4.1.0 is strongly advised.
What is PacketFence?
PacketFence is a fully supported, trusted, Free and Open Source Network Access
Control (NAC) solution. Boasting an impressive feature set, PacketFence can be
used to effectively secure small to very large heterogeneous networks.
Among the features provided by PacketFence, there are:
* Powerful BYOD (Bring Your Own Device) workflows
* Simple and efficient guests management
* Multiple enforcement methods with Role-Based Access Control (RBAC)
* Compliance checks for computers present on your network
* Integration with various vulnerability scanners and intrusion detection
solutions
* Bandwidth accounting for all devices
A complete overview of the solution is available from the official website:
http://www.packetfence.org/about/overview.html
Changes Since Previous Release
New Features
* New 'Apply violation' bulk action
* The same bulk actions for nodes are now available for users
* New WRIX data management
*
Added PacketFence provisioning agent for Android
* Support Hotspot for Cisco WLC and Aruba IAP
* Support for Huawei AC6605 wireless controller
* Support for Enterasys V2110 wireless controller
* Support for Juniper EX2200 and EX4200 switches
* Inline layer 3 support
* New pfbandwidthd daemon for inline layer 3 accounting
* New violation type based on time usage from RADIUS accounting information
* New violation type based on bandwidth usage from pfbandwidthd information
* New Mirapay online payment as a billing option
* Billing tiers can now be defined with a real usage duration (instead of
simply a timeout)
* Billing: A confirmation email is sent when purchasing a tier
* New status page with options to extend the network access (when billing
is enabled with access duration) and to unregister any node associated to the
current user
* Integration of mod_qos in the Apache configuration of the captive portal
* New pfcmd "cache" command
* New pfcmd "configreload" command
Enhancements
* Mandatory fields during registration are now configured per portal profile
* Expanded fields for person field
* Allow pfcmd error/warning/success messages colors to be configurable
* Allow rules on username for null authentication sources
* Landing page of Web admin interface now depends on the user's access
rights
* Reevaluate access when changing the role of multiple nodes (#1757)
* Each portal profile can now use its own set of locales
* Added a new URI filter for portal profiles
* Switches configuration page is now paginated
* LLDP support for 3Com 4000 Series
* Multiple DNS server in the network configuration
* Allow alias interface as captive portal
* MAC Authentication support for Enterasys D2 switch
* Added support for JSON-RPC and msgpack RPC over HTTP for webservices
* Made msgpack the default RPC for RADIUS
* Improved performance of webservices by preloading Perl modules
* Regexp filter for LDAP source is now case-insensitive
* Improved maintenance database script
* Preserve and restore the URL fragment when the web session expires in Web
admin (#1780)
* Logging is now separated and configurable for each service
* Added missing 'redirect_url' paramater when editing a violation in the
Web admin
* Complete rewrite of captive portal as a Catalyst application
* Added a section documenting eduroam support to the Admin guide
* Controller IP address can be determined dynamically
* Added a file backing for the cache to decrease cache misses
* Allow advanced search of nodes by OS type (#1790)
* The PF RPC client can be configured in the conf/radiusd/radiusd.conf
*
Added PacketFence RADIUS dictionary
Bug Fixes
* Fixed retrieval of ifIndex in Cisco Catalyst 2950 module
* Fixed Snort and Suricata services management
* Fixed issue when saving a users search in Web admin
*
Fixed JavaScript error with IE8 on Web admin users page
* Fixed Web admin access restrictions for users and nodes creation
* Fixed SQL query of connection types report in Web admin
* Fixed blank page with WISPr on OS X
* Fixed nodes simple search by IP address
* Fixed access reevaluation when changing the status of a pending node
* Fixed network access for users with no "set role" action (#1778)
* Fixed conversion of wildcards to regular expressions in domains
passthroughs
* Fixed display of last IP address of nodes when end_time is in the future
* Fixed XSS issues in Web admin
* Fixed extractSsid for Cisco Aironet and Cisco Aironet WDS
See the ChangeLog file for the complete list of changes:
https://github.com/inverse-inc/packetfence/tree/packetfence-4.2.0/ChangeLog
See the UPGRADE file for notes about upgrading:
https://github.com/inverse-inc/packetfence/tree/packetfence-4.2.0/UPGRADE.asciidoc
Getting PacketFence
PacketFence is free software and is distributed under the GNU GPL. As such, you
are free to download and try it by either getting the new release or by getting
the sources: http://www.packetfence.org/development/sourcecode.html
Documentation about the installation and configuration of PacketFence is also
available: http://www.packetfence.org/documentation/
How Can I Help?
PacketFence is a collaborative effort in order to create the best Free and Open
Source NAC solution. There are multiple ways you can contribute to the project:
* Documentation reviews, enhancements and translations
* Feature requests or by sharing your ideas
*
Participate in the discussion on mailing lists
(http://www.packetfence.org/support/community.html)
* Patches for bugs or enhancements
* Provide new translations of remediation pages
Getting Support
For any questions, do not hesitate to contact us by writing to
[email protected]<mailto:[email protected]>
You can also fill our online form (http://www.inverse.ca/about/contact.html)
and a representative from Inverse will contact you.
Inverse offers professional services to organizations willing to secure their
wired and wireless networks with the PacketFence solution.
------------------------------------------------------------------------------
Is your legacy SCM system holding you back? Join Perforce May 7 to find out: •
3 signs your SCM is hindering your productivity • Requirements for releasing
software faster • Expert tips and advice for migrating your SCM now
http://p.sf.net/sfu/perforce_______________________________________________
PacketFence-announce mailing list
[email protected]<mailto:[email protected]>
https://lists.sourceforge.net/lists/listinfo/packetfence-announce
------------------------------------------------------------------------------
Is your legacy SCM system holding you back? Join Perforce May 7 to find out:
• 3 signs your SCM is hindering your productivity
• Requirements for releasing software faster
• Expert tips and advice for migrating your SCM now
http://p.sf.net/sfu/perforce
_______________________________________________
PacketFence-users mailing list
[email protected]
https://lists.sourceforge.net/lists/listinfo/packetfence-users
