Next Generation RADIUS for Today's Networks

RADIUS servers have long been a mainstay of dial-up and VPN access control. In fact these servers have diligently handled simple authentications while the user community, networks and security requirements have evolved. The emergence of wireless mobility, network access control (NAC), and the need to enforce authorization rights across many services has exceeded the capabilities of current-generation RADIUS servers.

Today's identity-based network access requirements are driving the need for a next-generation RADIUS server. Avenda's eTIPS platform includes a RADIUS server in a hardened, and feature rich, easy to use appliance-based platform.

The Avenda Difference

Cluster multiple eTIPS appliances to scale to tens of thousands of users. Manage all configurations from a single management console. The eTIPS appliance is manageable from your favorite SNMP-based management tool. Track and audit all changes in configuration.

View session/accounting logs from a single management console. Built-in historical and on-demand reporting and analytics satisfy audit and compliance requirements. Reports can be generated for an individual appliance or for all appliances in the cluster, all from a central management console. 3-Click drill down feature for helpdesk troubleshooting displays session details right down to the log snippet for a session.

Built from the ground up, eTIPS uses a stripped-down and hardened Linux operating system to keep sensitive user data and policies safe. The physical appliance includes tamper resistant software and interfaces.

An easy to use web based management interface allows eTIPS to be managed from anywhere in the organization. Ease of use features include: common deployment templates, such as 802.1X wireless and wired, MAC Authentication and Web Authentication, simulation and monitoring tools, real-time access tracker to track all sessions.

A built-in library of dictionaries provides attribute definitions for all popular vendors and equipment. Access method independent policies (802.1X Wired vs. Wireless vs. VPN vs. Web Authentication) can be written using attributes from these dictionaries.

User lookup and credential checking capability allows customers to deploy a single RADIUS service and integrate it with any number and type of user directories. Explicit business rules can now be written that allow identity attributes to be retrieved from more than a single identity store.

All RADIUS tasks related to user and endpoint authentication and authorization, and enforcement across multiple access methods are managed from a single platform which ensures accurate change management, logging and reporting.

For detailed information about supported RADIUS features, see eTIPS Techsheet.