Security

last person joined: yesterday 

Forum to discuss Enterprise security using HPE Aruba Networking NAC solutions (ClearPass), Introspect, VIA, 360 Security Exchange, Extensions, and Policy Enforcement Firewall (PEF).
Expand all | Collapse all

Issues with iOS/Android activations during onboarding of new devices

This thread has been viewed 0 times
  • 1.  Issues with iOS/Android activations during onboarding of new devices

    Posted Jun 15, 2016 03:39 AM

    This has been an ongoing issue for a long time now, and I really need to nail it!

     

    Ive posted before about android devices, and despite being supplied with a "difinitive" list (below link) of goole servers that could be used during the device activation process, Im unable to complete the setting up of a new google account  -  the page simply doesnt show on the device.  So we have to either hotspot the device to setup a google account, or set it up online before trying to onboard.  

     

    http://community.arubanetworks.com/t5/AAA-NAC-Guest-Access-BYOD/Android-Google-account-setup-not-being-permitted/m-p/253998#M23824

     

    We also have a similar issue with iOS devices, that wont connect to the Activation servers, despite having a 17.*.*.* whitelist.  Ive also added the akamaitechnologies.com domain, which does yield occasional success, so I can only conclude there must be other cdn's that I need to whitelist.  Ive not been able to find a list of these, unsuprisinlgy!

     

    This does only affect brand new devices that need to activate during the onboarding process, but as they can be bought in the dozens, it is causing a bit of an issue.

     

    Anyone have this issue, or found a fix, rather than the workaround we are using?



  • 2.  RE: Issues with iOS/Android activations during onboarding of new devices

    EMPLOYEE
    Posted Jun 15, 2016 04:03 AM

    Please try only these three:

     

    netdestination ND-GOOGLEPLAY
    name android.clients.google.com
    name *.gvt1.com
    name *.ggpht.com



  • 3.  RE: Issues with iOS/Android activations during onboarding of new devices

    Posted Jun 15, 2016 04:40 AM

    Those 3 are already part of the list...

     

    We also need the client to be able to download the quickconnect app, which may not happen if we limited to just these 3...

     

    It all used to work when we first set this up, so google must have changed how the process is completed.  When you click on the option to create a new account, rather than get the page where you can specify a new emal addres,, we just see a blank page.