Security

last person joined: yesterday 

Forum to discuss Enterprise security using HPE Aruba Networking NAC solutions (ClearPass), Introspect, VIA, 360 Security Exchange, Extensions, and Policy Enforcement Firewall (PEF).
Back to discussions
Expand all | Collapse all

[IAP] Allow access to Google Play for Android Onboarding devices

This thread has been viewed 5 times

  • 1.  [IAP] Allow access to Google Play for Android Onboarding devices

    Posted Feb 02, 2015 10:27 AM

    Hi,

     

    I've been trying to configure IAP to allow access to google play.

     

    I've this:

     

    wlan walled-garden
    white-list "android.clients.google.com"
    white-list ".ggpht.com"
    white-list "play.google.com"

     

    and this:

     

    wlan access-rule BYOD-Provision
    index 7
    captive-portal external profile BYOD
    rule XXXXXXXXXXX 255.255.255.255 match tcp 80 80 permit
    rule XXXXXXXXXXX 255.255.255.255 match tcp 443 443 permit
    rule XXXXXXXXXXX 255.255.255.255 match udp 53 53 permit
    rule alias *.android.clients.google.com match any any any permit
    rule alias *.ggpht.com match any any any permit
    rule alias *.play.google.com match any any any permit
    rule any any match any any any deny

     

    But it seams that I'm not able to download the Quick Connect Client.

     

    Any help Please?



  • 2.  RE: [IAP] Allow access to Google Play for Android Onboarding devices

    Posted Feb 02, 2015 11:47 AM

    Try adding these:

    2015-02-02 11_46_29-Switch General Configuration.png



  • 3.  RE: [IAP] Allow access to Google Play for Android Onboarding devices

    Posted May 08, 2015 06:26 AM

    Hi!

     

    This was abandoned for a while so I'm trying this again.

     

    I can access play store (search for apps and everything) but can't download apps...



  • 4.  RE: [IAP] Allow access to Google Play for Android Onboarding devices

    Posted May 08, 2015 06:52 AM
    Have you run a packet capture to identify which domains are being hit when you try and download?
    May i suggest using either F12 on Chrome to see which domains are being hit or install Firebug on Firefox which will allow you to see domains being hit.
    If all your domains are whitelisted and you still cannot download, you may need to run a pcap to identify further what is going on


  • 5.  RE: [IAP] Allow access to Google Play for Android Onboarding devices

    Posted Dec 08, 2016 05:48 PM

    Following are the rules for onboarding android devices on IAP:

     

    Please note the ".*"

     

    wlan access-rule ONBOARD-PREAUTH

    index 10

    captive-portal external profile ONBOARD_CP

    rule alias gw.symcb.com match any any any permit

    rule alias android.clients.google.com match any any any permit

    rule alias .*ggpht.com match any any any permit

    rule alias .*googleapis.com match any any any permit

    rule alias .*gvt1.com match any any any permit

    rule alias .*googleusercontent.com match any any any permit

    rule any any match any any any deny