Security

 View Only
last person joined: 7 hours ago 

Enterprise security using ClearPass Policy Management, ClearPass Security Exchange, IntroSpect, VIA, 360 Security Exchange, Extensions and Policy Enforcement Firewall (PEF).
Expand all | Collapse all

ClearPass Guest User Fields / Variables

This thread has been viewed 16 times
  • 1.  ClearPass Guest User Fields / Variables

    Posted Aug 12, 2022 08:12 AM
    Hello everyone!

    I've been playing around with using some of the Guest User fields in ClearPass to forward some information, and one thing has been bugging me.

    Generally in ClearPass we can use variables referencing the connection, authentication, and authorization sources, but in some examples we see references directly to the database.

    Such as with Guest User when we update fields I've seen examples with both cases below. Same as for Endpoints. Now, it seems to me that the first example is a reference to the SQL Authentication source, which is filtered to specific attributes. The second example references the dictionary attributes directly.

    %{Authorization:[Guest User Repository]:xxxxxx}

    %{GuestUser:XXXXXX}

    In essence both seem to access the same information. If this is true, why use the first example? Is it just to filter or alter the field through SQL before referencing it? What do you guys generally see in use?

    Cheers,
    RK


  • 2.  RE: ClearPass Guest User Fields / Variables
    Best Answer

    EMPLOYEE
    Posted Aug 17, 2022 04:17 AM
    I've seen either in use. I believe there are similar cases where the short name (GuestUser) is filled by other sources if there is nothing in the 'raw' (Authorization:[Guest User Repository]) source. Either should work in general, and I don't have a big preference for one or the other.

    ------------------------------
    Herman Robers
    ------------------------
    If you have urgent issues, always contact your Aruba partner, distributor, or Aruba TAC Support. Check https://www.arubanetworks.com/support-services/contact-support/ for how to contact Aruba TAC. Any opinions expressed here are solely my own and not necessarily that of Hewlett Packard Enterprise or Aruba Networks.

    In case your problem is solved, please invest the time to post a follow-up with the information on how you solved it. Others can benefit from that.
    ------------------------------



  • 3.  RE: ClearPass Guest User Fields / Variables

    Posted Sep 07, 2022 06:27 AM
    Thanks for the input Herman!

    Sincerely,
    RK