Elektron

Commercial; $750

Current Version: 2.1.2376 (October 4, 2009)

Periodik Labs (formerly Corriente Networks LLC) produces Elektron, which is a software-based server that provides RADIUS/802.1X authentication services for Wi-Fi networks.

While version 2.1 is a bugfix release, version 2.0 added/changed the following:

• Authentication Domains - Authentication domains allow you to map users to different authentication sources based on the user's domain. For instance, "[email protected]" can be authenticated against your Active Directory, while "[email protected]" can be authenticated against a remote LDAP server. Even if you have only a single domain, this feature gives you the ability to add support for guest accounts: configure "company.com" to authenticate against your company's user directory, while "guest.company.com" is configured to use Elektron's built-in user database for easy temporary account creation.
• FIPS 140-2 Validated Cryptographic Module - Elektron version 2 uses a cryptographic module that has been tested and validated under the NIST Cryptographic Module Validation Program as meeting requirements for FIPS PUB 140-2, enabling its use in certain government and financial industry applications.
• MAC Address Authentication Simultaneous use of MAC address and standard user account authentication is supported in Elektron version 2, and is fully configurable on a per-access point basis.
• Full Windows Vista Support - Elektron's Windows Vista feature set has been updated to include full support for installation on Vista (including UAC support) and to authenticate Windows Vista clients when installed on any supported platform.
• SNMP - Elektron can be configured to to respond to SNMP management information requests in accordance with the standardized RADIUS MIBs, and to issue SNMP traps is response to a user-configurable set of server events.
• Authorization Policies - Policy support has been enhanced in Elektron version 2, with new support for triggering actions based on string pattern matching of the username, account groups, access points, and MAC addresses. Support for external scripts includes the ability to trigger policies based on the script result, and to have an external script act upon the result of the policy. Also included is greatly simplified configuration of VLAN assignment, one of the most common uses of authorization policies.
• EAP-FAST - Support for Cisco's EAP Flexible Authentication via Secure Tunneling protocol makes its debut in Elektron version 2.
• Least Privilege - Elektron version 2 honors the "principle of least privilege," in which the server performs its normal functions at the lowest possible level of security privilege, closing potential avenues of attacks on your server.