IIS logs (Internet Information Service) in ClearPass

[andresp]

Are there any IIS logs in clearpass? Having an issue Onboarding devices from external context server (JSS/JAMF).

Works fine from internal network but not from the ourside (having jss as a proxy server to request certificate on behalf of client)

[cappalli]

Sorry, not sure what an ISS log is?

Are you trying to use ClearPass Onboard or the built-in endpoint sync?

[andresp]

Sorry meant to say IIS.

Built-in enpoint sync works just fine with JAMF as a context server. Also onboarding from our internal network works just fine:

-Devcice conects to our Guest Network

-Registers to JAMF (MDM) and gets profiles deployed

-JAMF gets a certificate for the device from CPPM

-Device conects to Production network via certificate

The issue is when the decive is onboarded from an outsite network like a hot-spot, JAMF is having an issue getting a certificate assiged by our ClearPass server for the client.

[cappalli]

ClearPass does not use IIS.

Do you have SCEP proxy enabled?
What do you see in the Application Log?

[andresp]

Yes, SCEP is enable as proxy (we have an AirWatch server working just fine)

Application log doesnt show much but going to test with one of the devices and get a most recent aplicatiopn log....

[cappalli]

Best to work with Aruba TAC to debug in realtime.

[efisher214]

International Space Station clearly ;-)


#AirheadsMobile