This table should help you choose one of two ClearBox server editions.
Feature |
ClearBox TACACS+ RADIUS Server |
ClearBox Enterprise RADIUS Server |
|---|---|---|
| Authentication | ||
| Authentication protocols | PAP, CHAP, MS-CHAP, MS-CHAPv2, ARAP, EAP-MD5 | PAP, CHAP, MS-CHAP, MS-CHAPv2, EAP-MD5, SIP/HTTP digest |
| IEEE 802.1x authentication protocols | – | PEAP (with EAP-MS-CHAPv2 and EAP-TLS), EAP-TLS |
| LDAP directories authentication | + (TACACS server only) | + |
| Authentication against Windows domains and workgroups | + | + |
| Authentication proxy | + | + |
| SQL pre-authentication before forwarding authentication requests | – | + |
| Filtering policies for forwarded packets | Add, remove, change attributes and values | Add, remove, change attributes and values |
| Authentication against SQL data sources | + | + |
| Support for password, stored encrypted in data sources | MD4, MD5, SHA-1 (TACACS server only) | MD4, MD5, SHA-1 |
| MPPE encryption for VPN connections | + | + |
| TACACS+ authentication | + | – |
| Logging authentication failed/accepted requests to a database | + | + |
| Sending authentication failed/accepted requests to a syslog server | + | + |
| Supported data sources | MS SQL Server, MS Access, MySQL, Oracle, any ODBC- and OLE DB-compliant SQL data engine | MS SQL Server, MS Access, MySQL, Oracle, any ODBC- and OLE DB-compliant SQL data engine |
| Authorization | ||
| Authorization with attributes from LDAP directory | – | + |
| Authorization by denied RADIUS attributes | + | + |
| Authorization by required RADIUS attributes | + | + |
| Request attributes available in any SQL query | – | + |
| TACACS+ authorization | + | – |
| Accounting | ||
| Forwarding accounting requests | + | + |
| Logging accounting requests to a database | + | + |
| Logging accounting requests to a text file | + | + |
| TACACS+ accounting | + | – |
| Switching to new server log files daily | – | + |
| Logging discarded packets to a database | – | + |
| Maintaining | ||
| Debug mode | + | + |
| Pre-installed vendor dictionaries | Cisco, Microsoft, Ascend | Cisco, Microsoft, Ascend, Quintum, Colubris, Slipstream, Nomadix, IP3Networks, WISPr |
| Server Watch monitoring service | – | + |
| Configuration | ||
| Server configuration stores | Plain XML file | Plain XML file, SQL database |
| Automatic configuration reloading | – | + |
| Editing server configuration remotly | – | + |
| Server Manager, automatically detecting server activation | – | + |
| Configurator with SQL editor | – | + |
| Selecting a realm by a SQL command | – | + |
| Software developer's kit (SDK) for developing custom solutions based on the ClearBox engine | + | – |