Is there a way to distinguish and notify the end user that is trying to connect to the guest portal (during the Pre-Auth Check) to know why the login is failing as it is shown in access tracker, missing username, wrong password etc.
For now the user get only a general "Invalid username or password" and get confusing for them.
It is generic security best-practice to show a generic message if authentication fails to not give away too much information. If, for example, you would show 'Invalid Username', an attacker can find out if the username is existing first, after that try to find the password.
This behavior is requested by a lot of customers in their security requirements.
I don't think this behaviour can be configured differently for ClearPass Guest.
Thank your for your response.
Anyway since this is a guest network access with a lot of inexperienced user and with a low security profile it would be nice to give some details to them why the login is failing. The procedure of creating an account, waiting for sponsor, waiting for mail etc is somehow complicated.
At Aruba, we believe that the most dynamic customer experiences happen at the Edge. Our mission is to deliver innovative solutions that harness data at the Edge to drive powerful business outcomes.
© Copyright 2021 Hewlett Packard Enterprise Development LPAll Rights Reserved.