Security

I have a strange scenario where I am trying to utilise the Clearpass Guest web posture checking facility to posture check wired clients.

I redirect the user to the correct Web Login page and they can login using their AD credentials which are RADIUS checked in a pre-authentication check. This all works as expected.

The client is then scanned using the Onguard disolvable agent and the client passes the scan.

Briefly the scan passed message appears but then the user is redirected back to the initial login page with the error "Required field unavailable" under the Username field on the login form:

I imagine the page is trying to complete the NAS login at this point but as this is just a wired user who has browsed to the web login page there is no NAS.

Anybody have any ideas how to get around this issue?

I basically want to redirect users to a simple page saying posture check passed and then RADIUS CoA will drop the connection. Returning to the web login page implies the posture check failed when in fact it passed.

I have tried multiple vendor settings on the Web Login but none seem to work.

Thanks

Just to add the page I actually want to be shown to the clients is below:

This appears and then the client is automatically redirected to the page shown in my initial post - https://<clearpass>/guest/page.php?healthcheck=2.

Thanks