Security

Reply
MVP
Posts: 2,923
Registered: ‎10-25-2011

Onguard with non supported devices

Hello, im configuring something simple.

 

A guest portal which does a verification just if its has a antivirus or not

This work great for Windows, MACOS 

 

But if i try to connect an android it says that its not suppported.   Im aware is not supported but there is a way to not to scan in the same SSID the android devices?, i mean  not to scan the android devices but to scan the windows and mac os deivces?

 

 

Cheers

Carlos

----------------------------------------------------
Product Manager - Aruba Networks
Alternetworks Corp
Aruba
Posts: 1,368
Registered: ‎12-12-2011

Re: Onguard with non supported devices

Why not use the endpoint DB as an authz source and then use logic like:

 

IF DEVICE TYPE = Computer AND OS FAMILY MATCHES_ANY WIndows/OSX, then send back the role for the OnGuard portal.

 

For everything else, just hand out a restricted role that will allow what you require based on policy.

Seth R. Fiermonti
Consulting Systems Engineer - ACCX, ACDX, ACMX
Email: seth@hpe.com
-----
If you found my post helpful, please give kudos
MVP
Posts: 2,923
Registered: ‎10-25-2011

Re: Onguard with non supported devices

It doesnt matter that on the SSID on the selft registration i got  Require a successful OnGuard health check?


Sorry i just kind of lost with clearpass i have been doing really simple things so far.

 

Cheers

Carlos

----------------------------------------------------
Product Manager - Aruba Networks
Alternetworks Corp
Aruba
Posts: 1,537
Registered: ‎06-12-2012

Re: Onguard with non supported devices

You will need to create two captive portals. One with OnGuard and one without. In the controller you will then setup two roles so when the device first connects it will get a role based on the device type. You will need to create that rule in the service.

 

Here is an example of my MDM service. You will need to do the opposite just like Seth suggested.

 

Screen Shot 2014-10-22 at 6.09.38 PM.png

Thank You,
Troy

--Give Kudos: found something helpful, important, or cool? Click Kudos Star in a post.

--Problem Solved? Click "Accepted Solution" in a post.
MVP
Posts: 2,923
Registered: ‎10-25-2011

Re: Onguard with non supported devices

Thank you

----------------------------------------------------
Product Manager - Aruba Networks
Alternetworks Corp
Search Airheads
Showing results for 
Search instead for 
Did you mean: