Skip to content
Ooops - Navigation options above may not work on this device, please switch to Desktop layout if you need them.
If you just need to contact me privately click here

FreePBX MFA Finally Free

Posted by NoelB on
In breaking news, Sangoma have announced that Multi Factor Authentication for FreePBX, a commercial module with a hotly contentious ongoing yearly fee, will from April 1 2025, be completely free - kind of, for FreePBX users.

It's good to see Sangoma starting to take the open source FreePBX security seriously - unlike they've been doing in the past where you got security by paying for it. I wonder if this means they'll render my age old hack on asterisk to secure chan_spy useless in a near future update too, one can only hope, but since most their coding is now outsourced to, you guessed it - india, who the hell knows, their abilities thus far have failed to impress anybody, and you know the saying... pay peanuts get monkeys.

To get this, you need to login to portal.sangoma.com order it this way, don't worry the cost is still 0, its just how they seem to be treating it for now, but currently, you can only get it for $0 on a one year licence, now does this mean you need to renew every year, assumedly for $0? I believe so in the interim, and the free 25yr licence should be available in the future.

If you still only get the 1yr free licence when you need to renew and forget in time, my reading of it seems to indicate it will just cease MFA and revert to normal login process, the initial uptakers on this with 1yr licence may find you'll have to re purchase it for the 25yr licence - still for free, but this is still not formally clear what the process will be.


Related Articles

Trackbacks

No Trackbacks

Comments

Display comments as Linear | Threaded

Chris on :

It does make one wonder if the one year license is a ploy to get people using it and then in a year or two, take the freeness away and restart charging again for MFA, they honestly should have just made it open source, it's not like MFA is any trade secret, Google shows you how to add it to any website.

So caveat emptor.

NoelB on :

Thanks for resubmitting your comment Chris, problem I think looks like its resolved, comes down to php and errorhandler, they probably removed that code as well as disable_functions and upload tmp dir ... damn jackasses

Add Comment

E-Mail addresses will not be displayed and will only be used for E-Mail notifications.
Enclosing asterisks marks text as bold (*word*), underscore are made via _word_.
Standard emoticons like :-) and ;-) are converted to images.
Form options

Multiple DNSBL checks will be performed on submission of your comments.
Accepted comments will then be subject to moderation approval before displaying.