release , a free system for network access control (NAC) that can be used to organize centralized access and effectively protect networks of any size. The system's code is written in Perl and is licensed under GPLv2. Installation packages for RHEL and Debian.
PacketFence supports centralized network user login over wired and wireless channels with activation through a web interface (captive portal). It integrates with external user databases via LDAP and Active Directory, blocks unwanted devices (e.g., disallowing mobile devices or access points), scans traffic for viruses, detects intrusions (integrating with Snort), audits configurations and software on computers within the network. There are tools for integration with hardware from popular manufacturers like Cisco, Nortel, Juniper, Hewlett-Packard, 3Com, D-Link, Intel, and Dell.
Key innovations:
- A new web interface has been introduced, built using the libraries and ;
- A new Security Events module has been added for analyzing security-related incidents (replacing the Violations module);
- Package formation for Debian 9 has begun (previously, packages were created only for Debian 8);
- The data storage scheme in the database has been modernized;
- Rewritten services in Go for WMI, Nessus, and Rapid7 have been included;
- Support for Cisco ASA VPN has been added in the Captive portal (web interface for wireless network login);
- Support for Let’s Encrypt certificates has been added in the Captive portal and RADIUS;
- Support for Fortinet VPN has been added. Support for 802.1X and CoA has been added for Fortinet FortiSwitch switches;
- A new DHCP filter has been implemented, allowing the return of arbitrary attributes in OFFER and ACK messages. It is now possible to enable DHCP and DNS services only on specific network interfaces;
- Modules for supporting Aruba Instant Access switches and PICOS have been included. Support for Aerohive access points with switch ports has been added. Support for VoIP has been added for Dell switches.
Source: opennet.ru
