Data Bites

LDAP Vs. RADIUS

LDAP and RADIUS are often mentioned together because both can play a role in user authentication, but they solve different problems. LDAP, or Lightweight Directory Access Protocol, manages and retrieves identity information from a directory. RADIUS, or Remote Authentication Dial-In User Service, is designed to authenticate and authorize access to networks and services. This article […]

Is RADIUS Secure? Vulnerabilities, BlastRADIUS & Fixes

Network teams treat Remote Authentication Dial-In User Service (RADIUS) as background plumbing until something goes wrong with it. Every Wi-Fi login, VPN session, and switch port authentication can pass through a RADIUS exchange, and that exchange has run on largely the same design since the protocol shipped in the 1990s. Asking “is RADIUS secure” is […]

MAC Address Filtering: Why It’s Not Real Security

A lot of IT teams still flip on MAC address filtering for their Wi-Fi network and call it a day. It feels like a security control: only approved devices get in, everyone else gets bounced. The problem is that the address a filter checks is trivial to fake, and on most modern phones and laptops, […]

What’s My Wi-Fi Security Type? (and Why It Matters)

Your Wi-Fi security type is the protocol, such as WPA2 or WPA3, that encrypts your connection and controls who can join your network. Every device lets you check it in a few taps. Key Points If you’ve typed “what security type is my Wi-Fi” into a search bar, you probably got a warning message, a […]

Why is Microsoft Requiring Security Identifiers (SIDs) on Certificates for NPS Authentication?

In a move aimed at bolstering Windows network security, Microsoft has introduced a new requirement for all certificates used in Network Policy Server (NPS) EAP-TLS authentication: the inclusion of a Security Identifier (SID) as an attribute in the client certificates. This change directly addresses previously reported privilege escalation vulnerabilities and will become mandatory by September […]

How FreeRADIUS Supports MAC Auth Bypass for IoT Security

Let's take a look at how MAC Auth Bypass works and if FreeRADIUS can support MAC Auth bypass

Managed Cloud RADIUS Vs. Microservices

Do RADIUS servers work on a microservice model? Does it compromise security? Is it more affordable? Learn about cloud RADIUS microservice here.

Benefits of A Hosted RADIUS

Find out how to leverage a hosted RADIUS server and what your options are.

Can I Use Azure With A RADIUS Server?

A RADIUS server is essential to network security since it is a gatekeeper, requiring user and device authentication before allowing access to wired networks, VPNs, or Wi-Fi. To carry out this function, an identity database, like Azure AD (Entra ID), one of the most popular cloud-based identity providers available today, must be connected to the […]

Unmatched RADIUS Security

Cloud RADIUS: Why It’s Essential for Modern Networks.

On-premise Remote Authentication Dial-in User Service (RADIUS) is losing relevance since it does not support remote authentication of users and devices. They need VPNs to connect to remote networks, making them vulnerable to threats and MITM attacks. Being physically present in a location requires constant hardware maintenance and security. It is not scalable since it […]