Is RADsec (RADIUS over TLS) not natively supported in R82?

[Yasushi_Kono1]

I am trying to figure out a solution by which I could integrate a RADIUS server into the CP architecture by using RADIUS over TLS (tcp 2083). Is someone there you could get it run? 

Another idea which came into my mind is the deployment of a Proxy Server (RadSec Proxy). But, this is just an idea and is yet to be approved.

Thanks a lot in advance!

Yasushi

[simonemantovani]

there are no references within the documentation about Radius over TLS, so it seems to be not supported also in R82.

[the_rock]

I believe you are indeed correct, its not natively supported in R82, but maybe someone from CP can confir, for sure.

[Lesley]

R82.10, not sure what this is what you are looking for:

Gaia OS Security

• In Gaia Clish, you can configure the number of hashing rounds for new passwords.

  Hashing rounds determine the number of iterations a hashing algorithm performs on a password before storing it. This process is used to enhance security by making it more computationally expensive for attackers to crack passwords through brute force attacks.

• Added the Bcrypt hash for password encryption of local users in the Gaiaos

• External RADIUS authentication servers can now be configured to use CHAP (Challenge-Handshake Authentication Protocol) or PAP (Password Authentication Protocol).

[PhoneBoy]

Not supported to the best of my knowledge.

[HeikoAnkenbrand]

@Yasushi_Kono1 

No — RADsec (RADIUS over TLS) is not natively supported in Check Point firewall software version R82.

I hadn't seen it in the roadmap either until R82.20 and R82.30.