Security

last person joined: 21 hours ago 

Forum to discuss Enterprise security using HPE Aruba Networking NAC solutions (ClearPass), Introspect, VIA, 360 Security Exchange, Extensions, and Policy Enforcement Firewall (PEF).
Expand all | Collapse all

What are my options to stop employees from using Guest access?

This thread has been viewed 2 times
  • 1.  What are my options to stop employees from using Guest access?

    Posted Apr 20, 2015 01:27 PM

    I am looking for any ideas on how to setup/configure our guest network so it limits employees from using it. Currently we have Clearpass in place and will be setting up airwave.

     

     



  • 2.  RE: What are my options to stop employees from using Guest access?

    EMPLOYEE
    Posted Apr 20, 2015 01:30 PM
    You can set a custom attribute in the database once they connect to your secure network to stop them from going back to the guest network.


    Thanks,
    Tim


  • 3.  RE: What are my options to stop employees from using Guest access?

    Posted Apr 20, 2015 01:33 PM

    Tim,

    Thanks for your reply. Would I want to add the custom attribute in the mobility controller or clearpass?

     

    Thanks,

    Jake



  • 4.  RE: What are my options to stop employees from using Guest access?

    EMPLOYEE
    Posted Apr 20, 2015 01:36 PM
    ClearPass. Take a look at the guide in the post above.


    Thanks,
    Tim


  • 5.  RE: What are my options to stop employees from using Guest access?
    Best Answer

    EMPLOYEE
    Posted Apr 20, 2015 01:48 PM

    I'm not sure which Guide/Post Tim is referring to here, but here is a little tidbit...

     

    RADIUS Deny Access on the MAC Caching profile will trigger the client to get the default AAA role on the controller (captive portal).

     

    RADIUS Drop Access on the MAC Caching profile will drop the user from that SSID. No default AAA profile, no captive portal.

     

    Hope that helps.

     

     



  • 6.  RE: What are my options to stop employees from using Guest access?