• Added MAC authentication support for Edge-corE 4510
• Added support for Ruckus External Captive Portal
• Support for Huawei S2700, S3700, S5700, S6700, S7700, S9700 switches
• Added support for LinkedIn and Windows Live as authentication sources
• Support for 802.1X on Juniper EX2200 and EX4200 switches
• Added support for the Netgear M series switches
• Added support to define SNAT interface to use for passthrough
• Added Nessus scan policy based on a DHCP fingerprint
• Added support to unregister a node if the username is locked or deleted in Active Directory
• Fortinet FortiGate and PaloAlto firewalls integration
• New configuration parameters in switches.conf to use mapping by VLAN and/or mapping by role

• When validating an email confirmation code, use the same portal profile initially used by to register the device
• Removed old iptables code (ipset is now always used for inline enforcement)
• MariaDB support
• Updated WebAPI method
• Use Webservices parameters from PacketFence configuration
• Use WebAPI notify from pfdhcplistener (faster)
• Improved Apache SSL configuration forbids SSLv2 use and prioritzes better ciphers
• Removed CGI-based captive portal files
• For device registration use the source used to authenticate for calculating the role and unregdate (bugid:1805)
• For device registration, we set the "NOTES" field of the node with the selected type of device (if defined)
• On status page check the portal associated to the user and authenticate on the sources included in the portal profile
• Merge pf::email_activation and pf::sms_activation to pf::activation
• Removed unused table switchlocation
• Deauthentication and firewall enforcement can now be done throught the web API
• Added support to configure high-availability from within the configurator/webadmin
• Changed the way we’re handling DNS blackholing when unregistered in inline enforcement mode (using DNAT rather than REDIRECT)
• Now handling rogue DHCP servers based both on the server IP and server MAC address

• Fixed pfdetectd not starting because of stale pid file
• Fixed SQL join with iplog in advanced search of nodes
• Fixed unreg date calculation in Catalyst captive portal
• Fixed allowed_device_types array in device registration page (bugid:1809)
• Fixed VLAN format to comply with RFC 2868
• Fixed possible double submission of the form on the billing page
• Fixed db upgrade script to avoid duplicate changes to locationlog table

PacketFence is a fully supported, trusted, Free and Open Source network access control (NAC) solution. Boasting an impressive feature set including a captive-portal for registration and remediation, centralized wired and wireless management, 802.1X support, layer-2 isolation of problematic devices, integration with the Snort IDS and the Nessus vulnerability scanner; PacketFence can be used to effectively secure networks – from small to very large heterogeneous networks.


Packet Fence 4.0 introduces a brand new modern, fast and responsive web administrative interface. It also simplifies the definition of authentication sources in one place and allows dynamic computation of roles. The portal profiles can now be entirely managed from the web interface, simplifying their definitions and eliminating possible configuration mistakes. Using a centralized caching system, configuration is now propagated instantaneously – absolutely no downtime required!

Changelog v4.0

New Features

• Brand new Perl-based Web administrative interface using the Catalyst framework
• New violation actions to set the node’s role and deregister it
• Support for scanning dot1x connections for auto-registration by EAP-Type
• Support for auto registering dot1x node based of the EAP-Type
• New searchable MAC Addresses module to query all existing OUI prefixes
• New advanced search capabilities for nodes and users
• New memory object caching subsystem for configuration files
• Ubuntu packages

Enhancements

• Authentication sources can now be managed directly from the GUI
• Roles (previously called categories) are now computed dynamically using authentication sources
• Portal profiles and portal pages are now managed from the GUI
• Fingerprints and User Agents modules are now searchable
• Translated all remediation pages to French
• Updated Brazilian Portuguese and Spanish translations

Full Changelog: here