Skip to main content
martyyy
Explorer III
Feb 7, 2025 2:16 AM UTC
Solved

Require Message-Authenticator from NAD

Hi,


Due to recent vulnerabilities in radius, we would like to enable Message-Authenticator on our clearpass server.
After enabling this option in clearpass, we get errors in clearpass that the radius packet received from FortiGate-1100E (v7.2.8 build1639 (Mature) is without Message-Authenticator as below.

Is it possible to enable this?

 

Source RADIUS
Level ERROR
Category Authentication
Action Unknown
Description
Failed to decode RADIUS packet - Received packet from x.x.x.x without Message-Authenticator

TIA :) 

rbraha
rbrahaAnswer
Staff
Feb 7, 2025 10:46 AM UTC

Hi @martyyy 

 

You will need to upgrade FTG to version 7.2.10 ,please check the release notes below.

 

https://docs.fortinet.com/document/fortigate/7.2.10/fortios-release-notes/5880/radius-vulnerability

1 reply

rbraha
Staff
rbrahaAnswer
Staff
Feb 7, 2025 10:46 AM UTC

Hi @martyyy 

 

You will need to upgrade FTG to version 7.2.10 ,please check the release notes below.

 

https://docs.fortinet.com/document/fortigate/7.2.10/fortios-release-notes/5880/radius-vulnerability

Thought Leadership. Security Summit. Thursday, November 12th, PGA National Resort, Palm Beach Gardens, FL.
Security Operations Summit: Modernize SecOps. Operate AI-Native.AMER: November 4 | 9:00 AM PST. India and SAARC: November 5 | 10:00 AM IST. EMEA: November 5 | 10:30 AM CET. APAC: November 5 | 11:00 AM SGT