Firmware update for NAICE. Version 1.3

03 November 2026

Firmware update

Version: 1.3

The firmware and detailed description of the product capabilities are available in the Downloads or on the product page.

Features

endpoint compliance checking with information security requirements (Posture), including
- silent client for Windows OS (versions 10, 11) and Linux-based OS (Ubuntu, Astra Linux 1.7/1.8 and RED OS 8)
- a set of preinstalled check types (depending on the OS type): anti-malware software, OS attributes, file integrity control, personal firewall status, OS processes, system services, system registry, executable scripts, installed software, connected USB devices
- ability to configure the trust period for check results and the period for repeated background compliance checks
- treating compliance status as a mandatory condition for network access
- viewing compliance check reports in the NAICE WEB interface
extended support for dynamic RADIUS CoA (Change of Authorization), including
- manual sending of a CoA request for a session selected in the session log
- automatic response to endpoint profile changes
- automatic response to endpoint compliance status changes with respect to information security requirements
flexible configuration of RADIUS CoA for devices from different vendors, including configuration of the following scenarios:
- re-authentication - re-authentication without breaking the network session
- port shutdown - shutdown of the switch port
- port bounce - reload of the switch port
- disconnect-request - termination of the current network session without changing the port state
two-factor authentication (2FA) for network users when logging in to network devices via the TACACS+ protocol, including
- using a TOTP code or a backup code as the second factor
- entering the TOTP code directly in the device command-line interface (ASCII Dialog mode)
- support for an alternative scenario where the second factor is verified as the enable password (for devices without ASCII Dialog support)
- self-service 2FA setup/reset on the "My Access" portal
network user "My Access" portal - a separate new WEB interface for performing operations on your own account
- self-service password change (for local accounts)
- self-service setup/reset of two-factor authentication (TOTP and backup codes)
network user password policies (for local accounts)
- password complexity requirements, validity period
- mandatory change on first login
- application of the policy during TACACS+ and RADIUS (802.1x) authentication and portal authorization
- blocking access to services when the password is expired or a change is required
- ability to set a password as an NT password hash without disclosing it to the administrator
- email notifications to network users about password expiration with a configurable schedule
portal authorization support for access points (AP) and the Ubiquiti UniFi controller, including
- integration with the controller HTTP/HTTPS API with login/password authentication
- support for Ubiquiti "site" identifiers
the licensing scheme for guest portal features has changed - the feature moves from the Advanced level to a separate Portal option

Enhancements

security risk warning on the main menu when default RADIUS, HTTPS certificates are in use
certificate chain support in the certificate manager
support for legacy TLS 1.0/1.1 versions in the RADIUS configuration (enabled as needed, 1.2 by default)
RED OS version for the OVA/QCOW2 image updated from 7.3 to 8 (images are provided upon request)
PostgreSQL version updated from 17 to 18
display of the Inner authentication protocol for EAP-TTLS in the RADIUS sessions table
populating MAB attributes when the RADIUS Calling-Station-Id attribute is missing (specifically for the Avaya 56xx series switches)
populating the SSID from the RADIUS Called-Station-Id attribute in the Huawei format (specifically for the Huawei AirEngine 6760-X1 access point)