[PacketFence-devel] ANN: PacketFence 5.7.0

[Ludovic Marcotte]

The Inverse team is pleased to announce the immediate availability of
PacketFence 5.7.0. This is a major release with new features,
enhancements and important bug fixes. This release is considered ready
for production use and upgrading from previous versions is strongly advised.


What is PacketFence ?

PacketFence is a fully supported, trusted, Free and Open Source Network
Access Control (NAC) solution. Boasting an impressive feature set,
PacketFence can be used to effectively secure small to very large
heterogeneous networks.

Among the features provided by PacketFence, there are:

* powerful BYOD (Bring Your Own Device) capabilities
* state-of-the art devices fingerprinting with Fingerbank
* multiple enforcement methods including Role-Based Access Control
(RBAC) and hotspot-style
* compliance checks for endpoints present on your network
* integration with various vulnerability scanners, intrusion detection
solutions, security agents and firewalls
* bandwidth accounting for all devices

A complete overview of the solution is available from the official
website:http://www.packetfence.org/about/overview.html


Changes Since Previous Release

*New Features*

* DNS based enforcement as a new enforcement mode for routed networks
* Captive portal authentication now supports SAML authentication
* It is now possible to search for nodes that are online based on
RADIUS accounting
* Integration with Suricata MD5 extraction module to scan against
OPSWAT Metascan online scanner

*Enhancements*

*

Support for floating devices on HP ProCurve switches

* RADIUS CoA support added to Brocade switches
* The NULL authorization source can now be combined with other sources
* Added possibility to trigger Firewall Single Sign-On when an
endpoint changes status
* The username on a captive portal will no longer be stripped unless
required otherwise
* Improved UDP reflector documentation
* Improved vendor specific attributes in radius filters
*

Now able to specify on which LDAP attribute we should match for
SponsorEmail

* Now able to strip a username in LDAP source even if not present in
RADIUS request

*Bug Fixes (bug Id is denoted with #id)*

* Fixed incorrect provisioning that ignored broadcast state of
provisioned SSID
* Present a login page without login form when a blackhole source is
used on the portal profile (#1021)
* Fixed incorrect provisioning templates that required entering a
password twice (#1119)
* Fixed ambiguous SQL accounting stored procedure that could return
duplicate results
* Fixes incorrect IPv6 DHCP processing in pfdhcplistener

Seehttps://github.com/inverse-inc/packetfence/commits/packetfence-5.7.0for
the complete change log.

See the UPGRADE file for notes about
upgrading:https://github.com/inverse-inc/packetfence/tree/packetfence-5.7.0/UPGRADE.asciidoc


Getting PacketFence

PacketFence is free software and is distributed under the GNU GPL. As
such, you are free to download and try it by either getting the new
release or by getting the
sources:http://www.packetfence.org/development/sourcecode.html

Documentation about the installation and configuration of PacketFence is
also available:http://www.packetfence.org/documentation/


How Can I Help ?

PacketFence is a collaborative effort in order to create the best Free
and Open Source NAC solution. There are multiple ways you can contribute
to the project:

* Documentation reviews, enhancements and translations
* Feature requests or by sharing your ideas
*

Participate in the discussion on mailing lists
(http://www.packetfence.org/support/community.html)

* Patches for bugs or enhancements
* Provide new translations of remediation pages


Getting Support

For any questions, do not hesitate to contact us by writing
***@inverse.ca <mailto:***@inverse.ca>

You can also fill our online form (http://www.inverse.ca/#contact) and a
representative from Inverse will contact you.

Inverse offers professional services to organizations willing to secure
their wired and wireless networks with the PacketFence solution.