Processing RADIUS traffic

Using RADIUS Agent | Web Security Solutions | Version 7.7, 7.8

RADIUS Agent acts as a proxy that forwards RADIUS messages between a RADIUS client and a RADIUS server (or multiple clients and servers, depending on the network configuration). RADIUS Agent does not authenticate users directly. Instead, the Agent identifies remote users authenticated by a RADIUS server and associates them with IP addresses, so Websense software can apply policies to and report on those users.

When properly configured, RADIUS Agent captures and processes RADIUS protocol packets of the following types:

Access-Request: Sent by a RADIUS client to request authorization for a network access connection attempt.

Access-Accept: Sent by a RADIUS server in response to an Access-Request message; tells the RADIUS client that the attempted connection is authorized and authenticated.

Access-Reject: Sent by a RADIUS server in response to an Access-Request message; tells the RADIUS client that the attempted connection is rejected.

Accounting-Stop-Request: Sent by a RADIUS client to tell the RADIUS server to stop tracking activity for a specific user.