Radius Authentication Failing with Ivanti 22.7R2.6

Version Affected:  Radius

Description:  
After upgrading Ivanti ICS to 22.7R2.6, Radius Authentication fails

Cause:  
Ivanti ICS 22.7R2.6 introduced a hardcoded Message-Authenticator requirement
Even when SecureAuth Radius 24.07.03 is installed and the Message-Authenticator checkbox is selected, Authentication will still fail for end users even though the Radius logs show an Access-Accept

This is due to Ivanti 22.7R2.6 having a requirement for the response from Radius to have the Message-Authenticator attribute within it when it is not included, Ivanti will drop the response.
Some SecureAuth Radius versions do not send the Message-Authenticator attribute in the response packet, therefore the correct version needs to be installed

Resolution:  
Upgrade SecureAuth Radius to 24.07.05 or above, see the release notes here -
https://docs.secureauth.com/2212/en/secureauth-radius-server-release-notes.html#version-24-07-05-12

Download link - https://downloads.secureauth.com/resources/radius/SecureAuth-IdP-RADIUS-Agent-24.07.05.exe

SecureAuth Knowledge Base Articles provide information based on specific use cases and may not apply to all appliances or configurations. Be advised that these instructions could cause harm to the environment if not followed correctly or if they do not apply to the current use case.

Customers are responsible for their own due diligence prior to utilizing this information and agree that SecureAuth is not liable for any issues caused by misconfiguration directly or indirectly related to SecureAuth products.