Security

 View Only
last person joined: yesterday 

Enterprise security using ClearPass Policy Management, ClearPass Security Exchange, IntroSpect, VIA, 360 Security Exchange, Extensions and Policy Enforcement Firewall (PEF).
Expand all | Collapse all

Clearpass Guest Access

This thread has been viewed 17 times
  • 1.  Clearpass Guest Access

    Posted Nov 11, 2021 08:35 PM
    Hi Community, 

    Just found that in my work environment, the guest connections could see the resources in the another vlan (i.e. servers) which they should not be...

    Would appreciate, where to check the vlan access and how to bar them..

    Many thanks. 

    Kind Regards,
    Binod

    ------------------------------
    Binod Ranabhat
    ------------------------------


  • 2.  RE: Clearpass Guest Access

    Posted Nov 12, 2021 08:30 AM
    Access is controlled by roles and policies on your controllers.

    ------------------------------
    Gary Naeger
    ------------------------------



  • 3.  RE: Clearpass Guest Access

    Posted Nov 15, 2021 05:08 AM
    What do you exactly mean by 'see the resources'?

    Is that that users can access servers if they know they are there?

    Or is it that servers, printers, show up in the client unsolicited?

    For the access, as explained in the previous answer, that is controlled by the roles / access lists on your access equipment (APs, controllers, switches).

    If it is about servers showing up, that is most likely either DNS or AirGroup. Many services can advertise themselves through DNS (like domain controllers, windows servers). The solution would be to advertise a public DNS server like 1.1.1.1, 8.8.8.8, 9.9.9.9 (or at least a different than your internal DNS). If you see have that already, have a look at Airgroup on the AP or controller and make sure that is either properly configured, or disabled if you don't use it.

    It would help to better understand what you see, and for that, you could work with your Aruba partner or Aruba support to check what is behind what you see happen.

    ------------------------------
    Herman Robers
    ------------------------
    If you have urgent issues, always contact your Aruba partner, distributor, or Aruba TAC Support. Check https://www.arubanetworks.com/support-services/contact-support/ for how to contact Aruba TAC. Any opinions expressed here are solely my own and not necessarily that of Hewlett Packard Enterprise or Aruba Networks.

    In case your problem is solved, please invest the time to post a follow-up with the information on how you solved it. Others can benefit from that.
    ------------------------------