is it possible to have radius accounting info sent to our Checkpoint firewalls so we can enforce username based poicies?
We are currently using Clearpass to facilitate BYOD and are using .1x for authentication. We need to be able to enforce the same user based FW policies to personal devices as we do corp, but as we arent seeing username ID on our firewalls, we cant.
Is it possibe? Our onnly alternative is to seperate BYOD devices and Corp onto their own subnets, rahter than simply controlling access via user roles, but isnt this a somewhat outdated approach?