Security

 View Only
last person joined: 21 hours ago 

Forum to discuss Enterprise security using HPE Aruba Networking NAC solutions (ClearPass), Introspect, VIA, 360 Security Exchange, Extensions, and Policy Enforcement Firewall (PEF).

ClearPass NAC and hoteling space

This thread has been viewed 5 times
  • 1.  ClearPass NAC and hoteling space

    Posted 2 hours ago

    Hi all,

     

    I'm wondering how everyone handles onboarding their clients to wired 802.1X networks.  Specifically, we are seeing the growth of hoteling and open office style buildings that have static docking stations set up for users to walk in, find their spaces, and connect their USB-C ports for monitors and networking.

     

    We are using ClearPass NAC in combination with 802.1X (PEAP) and captive portal (MAC Auth) authentication methods.  The issue we are seeing is that if the devices don't have 802.1X enabled (i.e., Windows), users will be redirected to our captive portal for authentication.  However, on the ClearPass side, it will see the docking stations' MAC addresses, causing user tracking problems.  Also, Windows tends to store the 802.1X settings at the NIC / adapter level, which is troublesome and requires our users to reconfigure their 802.1X settings every time they switch their workstation.

     

    Any insights are welcome!

     

    Jason