RADIUS authentication server protocol support update

mlabarr · Dec 24, 2024, 4:18 PM

Looking to see if there is anything in the works to expand/replace inbuilt pfSense protocols for RADIUS to use hardened protocols to address CVE-2024-3596 (blast-radius) vulnerability as all listed protocols are insecure. [system > user manager > authentication servers > radius > radius server settings > protocol]

Looking to comply with MFA vendor Okta:
https://support.okta.com/help/s/article/required-update-radius?language=en_US