[PacketFence-devel] ANN: PacketFence v6.4.0

[Ludovic M. <lma...@in...>]

The Inverse team is pleased to announce the immediate availability of 
PacketFence v6.4.0. This is a major release with new features, 
enhancements and important bug fixes. This release is considered ready 
for production use and upgrading from previous versions is strongly advised.


      What is PacketFence?

PacketFence is a fully supported, trusted, Free and Open Source Network 
Access Control (NAC) solution. Boasting an impressive feature set, 
PacketFence can be used to effectively secure small to very large 
heterogeneous networks.

Among the features provided by PacketFence, there are:

  * powerful BYOD (Bring Your Own Device) capabilities
  * state-of-the art devices fingerprinting with Fingerbank
  * multiple enforcement methods including Role-Based Access Control
    (RBAC) and hotspot-style
  * compliance checks for endpoints present on your network
  * integration with various vulnerability scanners, intrusion detection
    solutions, security agents and firewalls
  * bandwidth accounting for all devices

A complete overview of the solution is available from the official 
website:https://packetfence.org/about.html


      Changes Since Previous Release

*New Features*

  *

    Added Mojo Networks WiFi equipment support (PR#1765)

  * Made Web admin reports more interactive (PR#1731)
  * Support authentication through Eduroam (PR#1642)
  * Allow to create different portal templates based on the browser
    locale (PR#1638)

*Enhancements*

  * Improved IP log performance (PR#1832 / PR#1828 / PR#1790)
  * Added fault tolerance on RADIUS monitoring scripts (PR#1831)
  * Improved the database and maintenance backup script (PR#1830)
  * Added password caching support for Novell eDirectory (PR#1829)
  * Improved caching of LDAP users data (PR#1826)
  * Improved clustering documentation (PR#1825)
  * Added RADIUS command line interface support on port 1812 (PR#1817)
  * Removed useless htaccess file search for each HTTP request (PR#1806)
  *

    Turned off HTTP KeepAlive to avoid connections holding onto Apache
    processes (PR#1801)

  * Added Cisco MSE documentation (PR#1799)
  * Ability to query 'iplog_archive' table for detailed IP/MAC history
    (PR#1793)
  * Now also display the status for sub services from the Web interface
    (#1040 /PR#1792)
  * Requests made with username 'dummy' will not be recorded in the
    RADIUS audit log anymore (PR#1789)
  * More lightweight p0f processing (PR#1788)
  * Removed useless logging in pfdns.log (PR#1782)
  * Added an activation timeout on sponsor source (PR#1777)
  * Improved captive portal logging (PR#1769)
  * Allow the OAuth landing page template to be customizable (PR#1767)
  * Use RESTful call for RADIUS accounting instead of Perl (#1760)
  * Optimized getting node information from the database (PR#1753)
  * New action generateconfig for pfcmd service command (PR#1744)
  * Added memory limitation for httpd.portal processes (PR#1738)
  * Added predefined search in RADUIS audit log and DHCP Option 82 log
    (PR#1716)
  * Improved display of fingerprinting informations in the nodes search
    (PR#1709)
  * Allow captiveportal::Form::Authentication to be customize (PR#1666)
  * Default config overlay for switches.conf, profiles.conf,
    pfqueue.conf and violations.conf (PR#1647)
  * Optimized queries for finding open violations (PR#1718)

*Bug Fixes*

  * Fixed floating devices in active/active clusters (PR#1800)
  *

    Fixed and improved syntax ofpfcmd ipmachistory(#1794)

  * Fixed wrong bandwidth calculation on RADIUS accounting (#1733)
  * Fixed empty Calling-Station-Id in RADIUS accounting (PR#1756)
  * Make sure connection caches are cleared after forking (#1748 / #1749
    / PR#1751)
  * Added a workaround for DHCP clients that do not respect short lease
    times (#1673)
  * Added namespace parameter in WMI rule (PR#1633)
  * Fixed non-working switch ranges with external portal (#1574 / PR#1613)
  * Joining a domain will sometimes return a 500 even though it
    succeeded (#1821/#1818)
  * Cisco WLC ignores our CoA requests but accepts our Disconnect
    Requests (#1819)
  * pfdetect: pipe is closing when no content (#1814)
  *

    Conditionis a Phonein RADIUS audit log is not working properly (#1813)

  *

    Condition AutoRegistration in RADIUS audit log is not working
    properly (#1812)

  * Configurator: Status on the services doesn't work (#1811)
  * Invalid SQL for iplog_cleanup_sql (#1802)
  * Added request cache support (#1775)
  * Added stack trace logging (#1774)
  * Removed redundant SQL indexes (#1773)
  * Removed unused code in pf::locationlog (#1772)
  * Fixed missing fields in RADIUS audit log (#1395)
  * Fixed RADIUS audit log hours selection (#1364)

Seehttps://github.com/inverse-inc/packetfence/commits/packetfence-6.4.0for 
the complete change log.

See the UPGRADE file for notes about 
upgrading:https://github.com/inverse-inc/packetfence/tree/packetfence-6.4.0/UPGRADE.asciidoc


      Getting PacketFence

PacketFence is free software and is distributed under the GNU GPL. As 
such, you are free to download and try it by either getting the new 
release or by getting the sources:https://packetfence.org/download.html

Documentation about the installation and configuration of PacketFence is 
also available:https://packetfence.org/support/index.html#/documentation


      How Can I Help?

PacketFence is a collaborative effort in order to create the best Free 
and Open Source NAC solution. There are multiple ways you can contribute 
to the project:

  * Documentation reviews, enhancements and translations
  * Feature requests or by sharing your ideas
  *

    Participate in the discussion on mailing lists
    (https://packetfence.org/support/index.html#/community)

  * Patches for bugs or enhancements
  * Provide new translations of remediation pages


      Getting Support

For any questions, do not hesitate to contact us by writing 
tos...@in... <mailto:su...@in...>

You can also fill our online form (https://inverse.ca/#contact) and a 
representative from Inverse will contact you.

Inverse offers professional services to organizations willing to secure 
their wired and wireless networks with the PacketFence solution.

-- 
Ludovic Marcotte
lma...@in...  ::  +1.514.755.3630  ::  http://inverse.ca
Inverse inc. :: Leaders behind SOGo (http://sogo.nu), PacketFence (http://packetfence.org) and Fingerbank (http://fingerbank.org)