topic Radius 2.0 in Spark Firewall (SMB)

Radius 2.0

John_Fleming — Sat, 05 Mar 2022 14:25:34 GMT

Are the SMB devices ever going to get radius 2.0 support? I spent a good deal of time trying to figure out why I was getting auth denied only to find the root cause was 16 character limit (I'm using google 2FA so really its 10 + 6 for pass code) as SMB only supports v1.0 radius.

Re: Radius 2.0

Chris_Atkinson — Sat, 05 Mar 2022 15:53:55 GMT

Hi John I've asked internally if this is planned for the upcoming R81.x alignment.

Currently it requires RFEs per sk13740.

Re: Radius 2.0

the_rock — Sat, 05 Mar 2022 15:46:54 GMT

Definitely not supported as of yet...when it will be, no clue. Maybe you can double check with your local SE.

Re: Radius 2.0

John_Fleming — Sat, 05 Mar 2022 16:04:41 GMT

Cool deal. I'm sure adding in this feature could positively effect 10s of people, which should be enough to justify the programing, QA and support costs associated with possibly breaking something in the process.

Thanks for asking!

Re: Radius 2.0

Chris_Atkinson — Sun, 06 Mar 2022 07:33:59 GMT

Hi John,

Which version/build are you currently testing with?

Re: Radius 2.0

John_Fleming — Sun, 06 Mar 2022 15:06:32 GMT

R80.20.35 (992002613) on 1500

Re: Radius 2.0

Chris_Atkinson — Sun, 06 Mar 2022 15:18:21 GMT

Thanks will be in touch.

Re: Radius 2.0

Ruan_Kotze — Mon, 07 Mar 2022 06:16:03 GMT

The R81 release cannot come quick enough. Apart from RADIUS 2.0 the lack of NTLM v2 (rendering AD query unusable) as well as Identity Collector support has been a big challenge for us in certain deployments.

Re: Radius 2.0

Chris_Atkinson — Mon, 07 Mar 2022 06:51:44 GMT

Identity Collector support is expected with R81.x with a view of the Microsoft hardening their are few alternatives.

Re: Radius 2.0

John_Fleming — Fri, 18 Mar 2022 01:13:52 GMT

Thanks for the new image Chris, I just logged in with a 20 character password and radius worked fine!

I'm not sure if I should be sharing the build info, but if its ok I'll let Chris share details.