PacketFence 9.0 Network Access Control Release

Took place Release Packet Fence 9.0, a free network access control (NAC) system that can be used to provide centralized access and effectively secure networks of any size. The system code is written in Perl and spreads licensed under GPLv2. Installation packages prepared by for RHEL and Debian.

PacketFence supports the provision of centralized user login to the network via wired and wireless channels with the ability to activate via the web interface (captive portal). It supports integration with external user databases via LDAP and ActiveDirectory, it is possible to block unwanted devices (for example, blocking the connection of mobile devices or access points), checking traffic for viruses, intrusion detection (integration with Snort), auditing the configuration and software stuffing of computers on the network. There are tools for integration with equipment from popular manufacturers such as Cisco, Nortel, Juniper, Hewlett-Packard, 3Com, D-Link, Intel and Dell.

Main innovations:

• A new web-interface is proposed, built using libraries Vue.js и Bootstrap 4;
  

• Added a new Security Events module for analyzing events related to security violations (replaced the Violations module);
• Started packaging for Debian 9 (previously packages were created only for Debian 8);
• The scheme of data storage in the DBMS has been modernized;
• Includes rewritten Go services for WMI, Nessus and Rapid7;
• Support for Cisco ASA VPN has been added to the Captive portal (web interface for logging into the wireless network);
• Added ability to use Let's Encrypt certificates in Captive portal and RADIUS;
• Added support for Fortinet VPN. Added support for 802.1X and CoA for Fortinet FortiSwitch switches;
• A new filter for DHCP has been implemented that allows you to configure the return of arbitrary attributes in OFFER and ACK messages. Added the ability to enable DHCP and DNS services only on certain network interfaces;
• Includes modules to support Aruba Instant Access and PICOS switches. Added support for Aerohive access points with switch ports. Added VoIP support for Dell Switches.

Source: opennet.ru