Security

Is there a way to only allow corporate smart devices to connect to our wireless network?  Our MDM provider is Airwatch and we have it setup in Clearpass where only Airwatch provisioned smart devices are allowed to connect to the wireless.  However, we are moving away from Airwatch and possibly going to Intune.  There is no integration with Intune just yet.  Is there another way we can only allow the corporate owned devices to connect?  we also use Onboarding which is tied to a backend AD group but that wont block personal devices from connecting.. ideas?

As long as you have some type of information in ClearPass or an externally accesible source that has ownership information, you can use it to make a decision.

so we need to find something unique on all the corporate devices?

You need to either maintain a MAC list, an SQL database, add attributes to the endpoints or some other authoritative source of information.

so we could add all the corp devices MAC addresses to Clearpass and would have to add it to that list when we enroll new devices? and only that list would be able to connect?

InTune integration can be done with an SQL query. See the attached doc.