RADIUS Integration
RADIUS (Remote Authentication Dial In User Service) is a networking protocol that provides centralized authentication, authorization management for users who connect and use a network service.
How to configure
Go to Settings → Authentication Sources → Radius Integration
In order to configure RADIUS, fill out the necessary information on the configuration page:
- Server Address : Network address of the RADIUS server.
- Port: The port on which the RADIUS server listens for authentication related communication.
- Secret: The secret value that is required for RADIUS communication. Must be the same that is configured on the RADIUS server.
- Timeout: Communication with RADIUS is stateless and utilizes UDP, the timeout value represents the duration in seconds to wait for a response from the RADIUS server before closing a request as failed.
- Authentication Protocol: The authentication protocol to utilize while requesting authentication from the RADIUS server.
Managed File Transfer currently supports the following authentication protocols:
- PAP: Password Authentication Protocol, this is the least secure of the protocols as it sends out the password in plain text without any kind of encryption. It is not recommended to utilize it.
- CHAP: Challenge-Handshake Authentication Protocol, more secure than PAP.
- MSCHAP: Like CHAP, but with a different hashing algorithm.
- EAP: Extended Authentication Protocol
- EAP-MD5: CHAP over EAP.
Authentication
On Managed File Transfer's authentication screen RADIUS will be available as the administrator sets up the connection with their RADIUS instance. When a RADIUS user first authenticates, a new local user will be created with corresponding username and with User role.
When updating MetaDefender Managed File Transfer, RADIUS will not be added to the global Trusted Network setting. The administrator has to manually set it up. Trusted Network List
