Authentication

As organizations move toward cloud-based, hybrid, and remote environments, managing secure network access has become more complex. At the core of this challenge is RADIUS (Remote Authentication Dial-In User Service), a protocol that has quietly enabled secure authentication and policy enforcement for decades. In this article, we’ll explain how RADIUS works, what makes it indispensable…

What is adaptive authentication? Adaptive authentication is a dynamic security approach that evaluates a range of contextual and behavioral signals during an authentication attempt and adjusts the required security measures based on the assessed level of risk. Unlike traditional authentication methods that treat all login attempts equally, adaptive authentication is built around the idea that…

What are Portnox Cloud RADIUS and FreeRADIUS? Portnox Cloud RADIUS is a cloud-native, fully managed RADIUS-as-a-service offering. It’s part of the broader Portnox Cloud platform, purpose-built to support modern authentication use cases like passwordless login, device trust, and Zero Trust access policies—without on-prem infrastructure. FreeRADIUS, on the other hand, is a powerful, open-source RADIUS server…

What is Broken Authentication in Cybersecurity? Broken authentication is a security vulnerability that occurs when an attacker exploits weaknesses in an application’s authentication process to gain unauthorized access to accounts or sensitive information. It is one of the most critical security flaws and has been consistently featured in the OWASP Top 10 list of web…

What is a server certificate? A server certificate is a digital document that verifies the identity of a server in a network. It plays a critical role in establishing secure, encrypted connections over the internet or within a network by helping clients verify that they are communicating with the legitimate server they intended to reach,…

How can organizations ensure that passwordless authentication is safe for remote workforces? To ensure passwordless authentication is safe for remote workforces, organizations must implement a combination of technologies, policies, and training. The foundation of passwordless authentication lies in leveraging more secure alternatives such as biometrics (fingerprints or facial recognition), hardware tokens, or mobile-based authentication apps.…

What is PKI? Public Key Infrastructure (PKI) is a framework that provides security measures for communications over networks such as the Internet. PKI relies on the use of digital certificates, which are electronic documents that use a digital signature to bind a public key with an identity – information such as the name of a…

Understanding RADIUS Servers Learn about the features & benefits of RADIUS servers. So what is a RADIUS server, really? If the RADIUS protocol were a person, it would be an old man shaking his cane and yelling at kids to get off his lawn. RADIUS stands for Remote Authentication Dial-In User Service, which should give…

Everything You Need to Know About MAC Authentication Bypass (MAB) Businesses are implementing security measures to stop the access of unauthorized devices for their network security. MAB is one such non-traditional measure of allowing access to connect a network. It mainly fills the gap left by 802.1X, which only allows access to devices that supports…

What does a certificate authority do? A certificate authority (CA) is a trusted third-party organization that issues digital certificates used to verify the identity of individuals, organizations, and devices on the internet. The primary function of a certificate authority is to validate the identity of an entity requesting a digital certificate, such as a website…

What is LDAP and why is it used? LDAP (Lightweight Directory Access Protocol) is a protocol used to access and manage directory services. It is a client-server protocol that enables access to a central database that contains information about users, groups, network resources, and other objects within an organization. LDAP is used for various purposes,…

How does certificate based Wi-Fi authentication work? Certificate-based Wi-Fi authentication is a method of authentication that uses digital certificates to establish the identity of a user or device on a Wi-Fi network. Here’s how it works: First, the Wi-Fi network administrator sets up a certificate authority (CA) server, which issues digital certificates to authorized users…