Security

Hi all,
I'm using  "Unique-Device-Count" to limit number of devices can use to login with specific account at a moment but it doesn't work.
I've test with some devices, all of them can login at the same time but on clearpass, "Unique-Device-Count"  show as 1 (i think it should be 2 if i test with 2 devices)
Any one can help me resolve this issue?
Many thanks for help

Can you show a screen shot of the enforcement tab of your service

---

@tarnoldwrote:
Can you show a screen shot of the enforcement tab of your service

---

Hi tarnold,

This is my enforcement policy

 

Service all look fine. need to look at the output. Looks like its sending an accept, so its not event stopping on the first line. I dont have a server access at the moment so I cant verify.

What roles are you cacheing and why are you using roles if you have simple enforcement?

Try unchecking cache roles. if you dont need them i would also just uncheck the roles.

Hi tarnold,

I've found the root cause :)

"Unique-Device-Count" like sticky devices with account. That mean if Unique-Device-Count = 1, the first device is recorded with that username.

 

Many thanks for help