The Inverse team is pleased to announce the immediate availability of PacketFence v10.3 - a major release bringing tons of improvements! This release is considered ready for production use and upgrading from previous versions is strongly advised.
Roles Inheritance and Dynamic ACLs
PacketFence v10.3 features roles inheritance. This is particularly useful for dynamic ACLs that can be combined based on the user or device’s hierarchy - allowing greater micro-segmentation. This is one of the foundation element for the upcoming v11 release.
The administrative GUI of PacketFence has received massive improvements for the 10.3 release. Most components were rewritten to use Vue.js’ Composition API making them more reusable and a lot more scalable. This results in tenfolds of performance improvements in the GUI for a greater user experience.
Automated Integration Tests
More automated tests were added in PacketFence v10.3 through Venom. More specifically, a WiFi test covering MAC authentication and WPA2 Enterprise EAP-PEAP as well as a test covering our PKI infrastructure were added. These extend the automated tests coverage in PacketFence further to ensure greater quality and stability for each new release.
SCEP Support in PKI
Included in v11, PacketFence’s PKI now fully supports the Simple Certificate Enrollment Protocol (SCEP) protocol. This new feature greatly enhances interoperability with MDM and other security solutions handling certificates deployment on endpoints.
… and more!
PacketFence v10.3 now also supports Netflow/sFlow on management interface, Stripe integration was upgraded to API v3, SecurityOnion integration was updated for v2.3, Aruba/HP web-based authentication on switches was added as well as Meraki DPSK support, MariaDB was upgraded to v10.2 and much more!
Here’s the complete list of changes included in this release:
Static routes management via admin gui
Aruba CX support
Aruba 2930M Web Authentication and Dynamic ACL support (#6158)
Meraki DPSK support
Support for Ruckus SmartZone MAC authentication in non-proxy modes (#6201)