diff options
| author | Andreas Steffen <andreas.steffen@strongswan.org> | 2010-10-14 21:20:27 +0200 |
|---|---|---|
| committer | Andreas Steffen <andreas.steffen@strongswan.org> | 2010-10-14 21:20:27 +0200 |
| commit | 8a1353fc0e006bfaa466b8b261db3210694f13bf (patch) | |
| tree | 4ae3a7219f9511a7906f9d1552d7e5f4ecfcc4cc /NEWS | |
| parent | 8d01a80819c2f20a58c8d8fa44239d5641f451b6 (diff) | |
| download | strongswan-8a1353fc0e006bfaa466b8b261db3210694f13bf.tar.bz2 strongswan-8a1353fc0e006bfaa466b8b261db3210694f13bf.tar.xz | |
added TNC support to NEWS
Diffstat (limited to 'NEWS')
| -rw-r--r-- | NEWS | 9 |
1 files changed, 9 insertions, 0 deletions
@@ -21,6 +21,15 @@ strongswan-4.5.0 authentication for client and server. It is compatible to Windows 7 IKEv2 Smartcard authentication and the OpenSSL based FreeRADIUS EAP-TLS backend. +- Implemented the TNCCS 1.1 Trusted Network Connect protocol using the + libtnc library on the strongSwan client and server side via the tnccs_11 + plugin and optionally connecting to a TNC@FHH-enhanced FreeRADIUS AAA server. + Depending on the resulting TNC Recommendation, strongSwan clients are granted + access to a network behind a strongSwan gateway (allow), are put into a + remediation zone (isolate) or are blocked (none), respectively. Any number + of Integrity Measurement Collector/Verifier pairs can be attached + via the tnc-imc and tnc-imv charon plugins. + - Fixed a bug not releasing a virtual IP address to a pool if the XAUTH identity was different from the IKE identity. |