What is the LoginTC RADIUS Connector 4.0.0?
June 27, 2023 •
Starting in July of 2023, LoginTC will be rolling out our brand new LoginTC RADIUS Connector to all existing and new clients — the LoginTC RADIUS Connector 4.0.0.
If you’re an existing customer of LoginTC, you can upgrade to the new connector by following our step-by-step upgrade guide.
Keep reading to learn more about what our new RADIUS Connector can do!
What are the new features of the LoginTC RADIUS Connector 4.0.0?
Below we break down what all the new updates are, and how they’ll benefit you as an administrator of LoginTC.
Multi-IP address support
Before: If you had multiple VPNs, you were required to create multiple configurations, one for each RADIUS client IP address.
Now: In the new LoginTC RADIUS Connector, you can create one endpoint that works for multiple RADIUS client IP addresses. You can even use an IPv4 CIDR block to input a range of IP addresses.
Benefits:
- This allows for greater flexibility as you expand your MFA usage.
- Makes administering the solution for multiple RADIUS clients much easier to manage.
Offline upgrades
Before: When you wanted to upgrade, the appliance required online access to public package repositories. The upgrade process also required you to SSH into the appliance and copying and pasting shell commands.
Now: Upgrades are performed by uploading an upgrade package file through the web-based connector administration panel. Included in the upgrade package file are all the system and software packages required to upgrade the operating system and the LoginTC software running on it.
Benefits:
- The appliance no longer requires open internet access to remote public package repositories to perform upgrades.
- The offline upgrade feature has allowed us to remove the requirement for outbound TCP port 80 to be open during installation and upgrades.
- This puts control back in your hands, and ensures your appliance is locked down at all times, making for safer and faster deployments.
Improved endpoint configuration tests
Before: The endpoint configuration test functionality only supported direct authentication mode (LoginTC Push authentication).
Now: The endpoint configuration test functionality now supports all the authentication modes. This includes Direct, Challenge, Challenge Interactive, and Iframe and modes. This allows you to exactly see how the authentication process will look for your end users before making any changes to your environment.
Benefits:
- Configuration testing will match what your end users will see.
- This allows you to support your end users better, without touching existing infrastructure.
Logs access
Before: Past logs could only be accessed by accessing the appliance file system through the console.
Now: Logs are accessible directly from the connector web-based administration panel. You can see current logs (updated in real time) and logs for the previous 7 days.
Benefits:
- Logs are more accessible and less time consuming to gather.
- Gives you faster insights into how the appliance is being used, which keeps you better protected from potential threats.
Syslog configuration
Before: You were required to configure syslog logging directly on the appliance operating system.
Now: You can configure remote syslog logging directly in the web-based administration panel, allowing you to send logs to your SIEM systems for analysis.
Benefits:
- Removes the need to configure syslog settings on the operating system.
- Allows for streamlined syslog configuration.
Reusable and testable user directories
Before: User directories had to be re-configured each time you added a new endpoint configuration.
Now: User directories exist independently from specific endpoints. They can be tested directly, and used to deploy multiple endpoints without having to re-configure the same information across all endpoints.
Benefits:
- This makes the deployment of new endpoints much simpler.
- Allows you to scale your use of MFA quickly and efficiently.
Native cloud deployments
Before: Deploying to AWS and Azure was a manual process done using ad-hoc installation scripts.
Now: We’ve added the LoginTC RADIUS Connector to the AWS Marketplace and the Azure Marketplace, enabling you to easily deploy the LoginTC RADIUS Connector to your cloud infrastructure.
Benefits:
- This improves ease of access to AWS and Azure connections, and makes cloud deployments simpler.
Geo-location improvements
Before: The geo-location policies used a non-configurable RADIUS attribute (Calling-Station-Id) to send the end-user IP address.
Now: We’ve introduced the ability to configure which RADIUS attribute is used to gather end-user access IP address for geo-location policies. For example, Palo Alto VPNs use the “PaloAlto-Client-Source-IP” vendor-specific attribute. In our new connector, you can now use that or other vendor-specific attributes.
Benefits:
- This means you can now apply geo-policies more accurately.
- Our geo-policies are available on more applications.
Integrated with your LoginTC organization
Before: When adding a new endpoint, you were required to enter the LoginTC application details manually every time.
Now: The list of available LoginTC applications is populated automatically, and you can simply select which LoginTC application you want to connect the new endpoint to.
Benefits:
- Provides a simpler and more accurate configuration process.
- Increased interoperability with your LoginTC organization.
Long term system support
Before: The LoginTC RADIUS Connector appliance used an operating system that will be going out of support starting July, 2024.
Now: The LoginTC RADIUS Connector appliance now uses a new operating system that will be supported for many years.
Benefits:
- This update ensures that you will have continued, secure, uninterrupted service for many years.
How to get the LoginTC RADIUS Connector 4.0.0
If you’re an existing customer of LoginTC, you can upgrade to the new connector by following our step-by-step upgrade guide.
If you’re not yet a LoginTC customer but want to get access to these new features, reach out to our sales team here.