Firmware update for NAICE. Version 1.2

Version: 1.2

The firmware and detailed description of the product capabilities are available in the Downloads or on the product page.

• two-factor authentication for administrators in the WEB interface using:
  • one-time codes from an authenticator app (TOTP)
  • one-time codes from email (Email OTP)
• user lockout policies
  • number of login attempts
  • lockout duration
  • time window during which failed attempts are counted before lockout
• monitoring of active RADIUS user sessions
  • with activity time update via Accounting Update packets
  • session termination via Accounting Stop or TTL
• limitation on the number of connections from a single network user account based on active session monitoring data
• EAP-TTLS protocol support
• certificate upload via WEB interface
  • RADIUS server certificates
  • interface and portal security certificates
• ability to specify a list of IP addresses and subnets allowed to access the WEB interface
• ability to specify a computer account in MS AD bound to each NAICE node in the WEB interface
• ability to set the automatic password change period for a computer account in MS AD via the WEB interface
• support of Debian 13 and OVA/QCOW2 based on Debian 13

• OVA/QCOW2 in a high-availability configuration
• retrieval of group hierarchy and user membership determination from MS AD
• generation of the resulting RADIUS authorization packet
• ability to authenticate users within a single MS AD global catalog regardless of the domain in which NAICE is connected
• SMTP notifications for deletion and disabling of administrator accounts
• individual Captcha configuration for each portal with adjustable difficulty level

• display of "Unknown NAS" and "Incorrect radius secret" errors in the connection log
• session save performance for TACACS+ and RADIUS database
• errors in connection validation when creating/editing an external LDAP source