Security

Dear Airhead Community,

I am trying to find out if devices, registred in Microsoft Intune, can be remotely locked or wiped within the ClearPass interface. no more, no less. According to the documentation of the newest ClearPass Intune integration Extension, V4.0 (as in the attachment below) and the CPPM 6.9 Guide i just can't find any information about the possibility to remote wipe/lock these devices. 

Hopefully you guys can help me out.

Yours faithfully,

Roy Kleijnen

Attachment(s)

ClearPass_Integration-Guide_Microsoft-Intune_v2019-03 (1)...pdf   5.20 MB 1 version

Hi Roy,

Yes and No. Let me explain.

Today we use an API to talk to Azure/InTune we refer to as the NAC API V1.2, this API is what we've used for the past 4+ years. Under this API the more advanced and traditional features available from other UEM/MDM's such as Wipe/Lock is not available.

Now to the better news, and great timing by the way.....last week we discussed a number of changes with M/Soft on a number of subjects and one of them was to move to using whats commonly called the GraphAPI, this provides for a vast number of new features which will include remote Lock / Wipe.

So if someone were to be about to set this up and turn it on the old way, would you recommend holding on until this is going or go ahead and make it work and then update it later?  How bad is it going to be to reconfigure?