Configuring RADIUS Agent settings in the Forcepoint Security Manager

Using RADIUS Agent | Web Protection Solutions |v8.4.x, v8.5.x | 29-Apr-2022

Use the Web > Settings > General > User Identification page to review and edit RADIUS Agent configuration information.

To edit settings for a RADIUS Agent instance:

Use the Transparent Identification Agents table to select the IP address or host name of the RADIUS Agent instance that you want to configure.

If you have installed a new RADIUS Agent instance that does not appear in the list, click Add Agent, then select RADIUS Agent from the drop-down list.

Under Basic Agent Configuration, enter the RADIUS Agent IPv4 address or host name.


	Note Hostnames must start with an alphabetical character (a-z), not a numeric or special character. Hostnames containing certain extended ASCII characters may not resolve properly. To avoid this issue, enter an IP address instead of a hostname.

Enter the Port that RADIUS Agent should use to communicate with other web protection components. The default is 30800.

To establish an authenticated connection between Filtering Service and RADIUS Agent, select Enable authentication, and then enter a Password for the connection.

Next, customize global RADIUS Agent settings. By default, changes that you make here affect all RADIUS Agent instances. Settings marked with an asterisk (*), however, can be overridden in an agent's configuration file to customize the behavior of that agent instance (see Custom configuration for a RADIUS Agent instance and RADIUS Agent initialization parameters).

Under RADIUS Server, enter the RADIUS server address or name. If you provide the IP address, use IPv4 address format.

RADIUS Agent forwards authentication requests to the RADIUS server, and must know the identity of this machine.

If your network includes a RADIUS client, enter the RADIUS client address or name. If you provide the IP address, use IPv4 address format.

Your web protection software queries this machine for user logon sessions.

Enter the User entry timeout interval, used to determine how often RADIUS Agent refreshes its user map. Typically, the default query value (24 hours) is best.

Use the Authentication Ports and Accounting Ports settings to specify which ports RADIUS Agent uses to send and receive authentication and accounting requests. For each type of communication, you can specify which port is used for communication between:

RADIUS Agent and the RADIUS server (authentication default 1645; accounting default 1646)

RADIUS Agent and the RADIUS client (authentication default 12345; accounting default 12346)

When you are finished making configuration changes, click OK to return to the Settings > User Identification page, then click OK again to cache your changes. Changes are not saved until you click Save and Deploy.