Security

last person joined: yesterday 

Forum to discuss Enterprise security using HPE Aruba Networking NAC solutions (ClearPass), Introspect, VIA, 360 Security Exchange, Extensions, and Policy Enforcement Firewall (PEF).
Expand all | Collapse all

Redirect to a webpage when user device limit is reached

This thread has been viewed 2 times
  • 1.  Redirect to a webpage when user device limit is reached

    Posted Jul 31, 2017 05:55 PM

    Is there a way to redirect to a webpage in which it tells him that the device limit has been reached.   Int his case the user of guest just got a limit of 2 devices

     

    Right now i got it that if it hit the policy that says that you are using more than 2 devices insteada of putting deny access i put that it should give it a role that has a captive portal that redirect to a webpage that show him the error...

     

    But looks like its too much just to redirect to a page.  IS there another or better way just to redirect when the user limit of devices have been reached?



  • 2.  RE: Redirect to a webpage when user device limit is reached

    EMPLOYEE
    Posted Aug 01, 2017 06:45 AM

    Please see the thread here:  http://community.arubanetworks.com/t5/Security/clearpass-Concurrent-Session/td-p/297391

     

    Responding with a custom "reply-message" attribute is available in ArubaOS 6.5 and above..



  • 3.  RE: Redirect to a webpage when user device limit is reached

    Posted Aug 01, 2017 08:38 AM

    Hello Collin!

    Thanks for reply but the client cannot go to 6.5... they got some legacy controllers, some 3400s 

    I tried doing this but didnt work 

    https://community.arubanetworks.com/t5/AAA-NAC-Guest-Access-BYOD/How-to-display-custom-error-messages-on-a-weblogin-page/ta-p/271994

     

    Then someone on TAC told me a easier way to send a custom message which was the way i said in first message, but was just wondering if there is if thats was the only way.   The only thing with the way the tac told me is that it input a entry on my my endpoint database with social media information, and if the user go to IT department to get his device added because he changed his laptop or trablet or whatever, they might need to manually blacklist the user and then unblacklist so accelerate the process.  I mean it has another role that the only thing that does is showing the error message and  he wont get the login again untile he change of role, thats the only downside i see of that. 

    The thing i like is that it shows a nice message.

    I just wanted to have different options to show the client.

     

    Cheers

    Carlos



  • 4.  RE: Redirect to a webpage when user device limit is reached

    Posted Aug 02, 2017 04:15 PM

    Hi Cdelarosa,

     

    when you tried this : https://community.arubanetworks.com/t5/AAA-NAC-Guest-Access-BYOD/How-to-display-custom-error-messages-on-a-weblogin-page/ta-p/271994

    W
    as the app auth hitting the service ? if so, what was the output of it ? Was it applying the right enforcement profile ?

    Cheers,