Technical Requirements

LDAP

LDAP compliant directory server

MySQL

v4.2 or higher User information stored in a single table:

• Username

• Password

• Group Membership

• Expiration

• Password encoding (if applicable)

Secure LDAP

• Public CA

• Self-Signed Certificate

• Copy of organizations Trusted Root Cert in PEM or Base64 format

• Copies of other server certificates may also be needed

Aruba

Wireless Controllers

Cisco1

Cisco, CiscoCatalyst, ASA

Windows

Server 2003 or higher

Windows Server 2003 or newer Requires installation of NAC DHCP Syslog Relay service Minimum 700 MB disk space

Other 2

Bluecat, Infoblox, Lucent, SonicWALL

Operating System

Windows Vista or newer OSX 10.6 or newer3

Domain Managed

Required

Other

Domain Controller IP’s and IP’s necessary for login scripts must be exempted from NAC policy enforcement

RADIUS Accounting

Required

RADIUS Authentication

User Account Based

RADIUS Controller

Required

NAC Appliance will need IP address(es) and shared secret are required to be configured

Google

Google Apps for Business/Education

More Information: https://support.google.com/a/answer/6087519?hl=en&ref_topic=6304963

Azure AD

Azure AD Premium

More Information: https://azure.microsoft.com/en-us/documentation/articles/active-directory-saas-custom-apps/

Duo Two-Factor

Duo Access Gateway

More Information: https://duo.com/docs/dag#add-a-cloud-application-to-duo-access-gateway

Okta

More Information: http://developer.okta.com/standards/SAML/setting_up_a_saml_application_in_okta

OneLogin

More Information: https://support.onelogin.com/hc/en-us/articles/202673944-How-to-Use-the-OneLogin-SAML-Test-Connector

Dell One Identity Cloud Access Manager

More Information: http://documents.software.dell.com/dell-one-identity-cloud-access-manager/8.1.1/configuration-guide/adding-a-web-application/saml-federation

Gluu

More Information: https://www.gluu.org/docs/integrate/outbound-saml/

Other

Must Support SAML 2.0

VMWare Version

ESXi 5.1 or newer

Virtual Hardware Version

Minimum version 8

CPU

16 vCPUs (2-3Ghz)

Memory

32 GB Minimum

Hard Drive Storage

500 GB Minimum

Appliance Scalability

Up to 25,000 Devices

Network Interface

Gigabit NIC

VMWare Version

ESXi 5.1 or newer

Virtual Hardware Version

Minimum version 8

CPU

8 vCPUs (2-3Ghz)

Memory

16 GB Minimum

Hard Drive Storage

300 GB Minimum

Appliance Scalability

Up to 10,000 Devices

Network Interface

Gigabit NIC

VMWare Version

ESXi 5.1 or higher

ESXi 5.1 or higher

Virtual Hardware Version

Version 8 or higher

Version 8 or higher

CPU

4 vCPUs (2-3Ghz)4

8 vCPUs (2-3Ghz)

Memory

16 GB Minimum5

16 GB Minimum5

Hard Drive Storage

300 GB Minimum6

300 GB Minimum6

Appliance Scalability

25,000 (per Enforcer/Manager)

Network Interface

Gigabit NIC

Server

Microsoft Server 2012 R2

Hyper-V Version

Hypervisor Generation 2

CPU

4 vCPUs (2-3Ghz)

Memory

16 GB Minimum

Hard Drive Storage

300 GB Minimum

Appliance Scalability

Up to 10,000 Devices

Network Interface

Gigabit NIC

Operating System

Windows Vista or newer

Service Pack

NA

Memory

1 GB

CPU

Single Core 1.6Ghz

Hard Drive Storage

100 MB

Administrative Rights

No

Operating System

10.6 or newer

Memory

1 GB

CPU

Single Core 1.6Ghz

Hard Drive Storage

100 MB

Administrative Rights

Yes (for installation only)

Internet Explorer

v9+

Mozilla Firefox

v35+

Google Chrome

v40+

Safari

v6.1.6+

Mozilla Firefox

v35+

Google Chrome

v40+

Android

2.1 or newer

Blackberry

NA

Does not support Secure BYOD Onboarding but step by step instructions available

ChromeOS

Any

iOS

v4.0 or newer

Linux

Most major platforms

Requires Python

Mac OS X

OS X 10.5 or newer

OS X 10.4 does not support Secure BYOD Onboarding but step by step instructions available

Nokia

NA

Does not support Secure BYOD Onboarding but step by step instructions available

Windows

Windows XP or newer

Windows RT is also supported

Windows Phone/ Windows Mobile

NA

Does not support Secure BYOD Onboarding but step by step instructions available

802.1X Authentication (supplicant)

802.1X

MAC Authentication (no supplicant)

802.1X, MAB

MAC Authentication (no supplicant) with Identity

802.1X, MAB, COA, Redirect-URL or VLAN Assignment plus upstream Layer3 Redirect/PBR

Layer2 Network Access Assignment

802.1X, MAB, COA, Filter/VSA or VLAN Assignment

Layer2 Network Access Quarantine

802.1X, MAB, COA, Redirect-URL or VLAN Assignment plus upstream Layer3 Redirect/PBR

Vendor

OS/Firmware Requirements

Aerohive

HM-6 - HiveManager HiveOS 6.4.r1, 6.6.r3 or higher, AP HiveOS 6.4r1, 6.5.r3, 6.6.r2 or higher HM-NG - HiveManager HiveManagerNG 11.13 or higher, AP HiveOS 6.5.r5 or higher

Cisco

AireOS - 7.2 or later IOS-XE (Catalyst 9800 VM) - tested on 16.12.2s

Extreme

Identifi - Tested on V2110 VM controller 10.41.02.0014 WiNG - Tested on VX9000 VM controller 5.9.7.0-011R

HPE-Aruba

ArubaOS 6.1.3.4 or later (Instant) - InstantOS 6.4.0.2-4.1 or later

Juniper-Mist

Certified on AP version 0.6.18694

Meraki

Certified on beta build (July 2016)

Ruckus

ZoneDirector - 9.10 or later SmartZone -

Ubiquiti

Unifi - Cloudkey (controller) - Unifi 5.12.35, AP Unifi 4.3.20.11298

Xirrus

Xirrus - APs connected to XMS-Cloud

Other

Contact OPSWAT Support

Layer 2 Wired

Vendor

OS/Firmware Requirements

Aruba

ArubaOS - tested on ArubaOS 7.4.1.7 ArubaOS-Switch - tested on WC.16.10.0002

Cisco

LAN base or better (i.e. not LAN Lite)

Dell

N-Series - OS6 6.2.0.5 or later S-Series - OS9 9.13 or later

Extreme

Summit Gen1 - tested on ExtremeXOS 30.6.1-Patch1-11

Juniper

EX Series switches - 15.1R3 or later

Meraki

Certified on MS 11.31

Ruckus/Arris

ICX - 8.0.20 or later

Other

Contact OPSWAT Support

Layer 3 Wired

Vendor

OS/Firmware Requirements

Alcatel-Lucent

6850/6900 - Platform, license and OS image must support sFlow or Netflow and Policy-Based Routing (PBR) 9700 - Platform, license and OS image must support sFlow or Netflow and Policy-Based Routing (PBR)

Brocade/Ruckus/Arris

ICX - Platform, license and OS image must support sFlow or Netflow and Policy-Based Routing (PBR)

Brocade/Extreme

MLX - Platform, license and OS image must support sFlow or Netflow and Policy-Based Routing (PBR)

Cisco

Catalyst - (IOS) - Platform, license and OS image must support sFlow or Netflow and Policy-Based Routing (PBR) Catalyst - (IOS-XE) - Platform, license and OS image must support sFlow or Netflow and Policy-Based Routing (PBR) Nexus - (NX-OS) - Platform, license and OS image must support sFlow or Netflow and Policy-Based Routing (PBR)

Dell

N-Series/OS6 - Platform, license and OS image must support sFlow or Netflow and Policy-Based Routing (PBR) S-Series/OS9 - Platform, license and OS image must support sFlow or Netflow and Policy-Based Routing (PBR)

HP

3800 - Platform, license and OS image must support sFlow or Netflow and Policy-Based Routing (PBR) 5400/8200 - Platform, license and OS image must support sFlow or Netflow and Policy-Based Routing (PBR)

Other

Contact OPSWAT Support

Hardware

Aerohive, Aruba, Cisco, Cisco Meraki, Ruckus, Xirrus, Other - Contact OPSWAT Support

Minimum Version

Aruba Wireless Controller 6.3 or later, Cisco Wireless Controller 7.2, or later Cisco Meraki AP’s firmware (July 2016 or Later), HiveManager 6.4.r1, or later HiveManager NG Ruckus ZoneDirector 9.13 preferred (9.10 or later supported), Ruckus Cloud Managed Wi-Fi Xirrus Cloud Management System

Controller Modes

Aerohive HiveManager 6 Enterprise Mode, HiveManager NG, Aruba – Policy Enforcement Firewall (PEF) License, Cisco – Central Switching, Cisco Meraki, Ruckus, Ruckus AP’s connected to Cloud Managed Wi-Fi, Xirrus AP’s connected to the Xirrus Cloud Management System

Layer3 Authentication and Enforcement/Quarantine

Platform, license and OS image must support sFlow or Netflow and Policy-Based Routing (PBR)

Exinda

v6.0 or higher

iBoss

v6.0 or higher

Palo Alto

v5.0 or higher

Procera

SonicWALL

v6.0 or higher

Syslog

Any

Must support LEEF, CEF or Key-Value Format

RADIUS Accounting

NA