Security

 View Only

  • 1.  Comparing different Endpoint Attributes for 802.1x Authentication - ClearPass 6.12.3 and Intune Extension 6.3.5

    Posted Dec 17, 2024 03:01 PM

    Hello everyone,

    We are new users of ClearPass and need help setting up certificate-based authentication using 802.1x for wired clients. Our current setup includes ClearPass version 6.12.3.303963 and the Microsoft Intune Extension 6.3.5.

    The Intune Extension is already populating the Endpoint database with information, and our devices are correctly listed. Our goal is to check if a device is Intune compliant when it connects. To achieve this, we would like to compare certain attributes.

    Is it possible to compare specific attributes?
    We need to compare Input Attributes like "Certificate:Subject-CN" with for Example "Endpoints:Intune Azure AD Device Id". Ist this possible?

    Is there perhaps a better approach to achieve our goal?

    We appreciate any help and guidance!

    Thank you in advance!

    Best regards,
    Marc



  • 2.  RE: Comparing different Endpoint Attributes for 802.1x Authentication - ClearPass 6.12.3 and Intune Extension 6.3.5

    Posted Dec 18, 2024 02:10 PM

    We have a similar structure and one of our attribute check is based on the following; 

    Azure Intune Authentication:Intune Azure AD Registered  EQUALS  true 

    While this is not comparing an attribute, it does allow us to lookup and confirm that the device is one of ours, before allowing it on the network. 

    Thanks,


    Original Message


  • 3.  RE: Comparing different Endpoint Attributes for 802.1x Authentication - ClearPass 6.12.3 and Intune Extension 6.3.5

    Posted Dec 19, 2024 03:20 AM

    Hi Marc.


    You can always test your role mapping or enforcement policies with Simulation.  You can compare two attributes.

    Best, Gorazd



    ------------------------------
    Gorazd Kikelj
    MVP Guru 2024
    ------------------------------

    Original Message


  • 4.  RE: Comparing different Endpoint Attributes for 802.1x Authentication - ClearPass 6.12.3 and Intune Extension 6.3.5

    Posted Dec 19, 2024 07:28 AM
    Thank you both for the quick answers!
     
    Unfortunately, I suspect that I have not expressed myself correctly. Part of our problem is that the devices log into the network with different Mac addresses. Sometimes there are also old Mac addresses in the device database which are synchronized by Intune. 
    How can we ensure that the device is still recognized correctly?
    Our common factor here would be the Intune Device ID, which matches the Certificate CN.
    Is there a way to set the attributes the same or to trigger a synchronization?
     
    Best regards Marc 

    Original Message


  • 5.  RE: Comparing different Endpoint Attributes for 802.1x Authentication - ClearPass 6.12.3 and Intune Extension 6.3.5

    Posted Dec 19, 2024 07:38 AM

    Hi Marc.

    Jumo to the Airheads Broadcasting Channel on Youtube for videos on Intune with Clearpass. You need to add new filters to your query in authentication source to use EntraID for username search.

    More info here. Page 27.

    Best, Gorazd



    ------------------------------
    Gorazd Kikelj
    MVP Guru 2024
    ------------------------------

    Original Message


  • 6.  RE: Comparing different Endpoint Attributes for 802.1x Authentication - ClearPass 6.12.3 and Intune Extension 6.3.5
    Best Answer

    Posted Dec 19, 2024 10:36 AM
    Edited by emzed Dec 20, 2024 08:59 AM

    Yeah, DeviceId will be the best option to match on - we found the following links really good as we started the process of certificates and Intune; 

    https://www.arubanetworks.com/techdocs/NAC/clearpass/integrations/unified-endpoint-management/intune/#appendix-e--scep-certificate-configuration-profile

    https://community.arubanetworks.com/viewdocument/atmosphere23-belgium-brussels-202?CommunityKey=07affbbb-b455-4b3e-be10-01880637640c&tab=librarydocuments

    (about the six one down on AzureAD and Intune by Herman Robers)

    Hope that helps,


    Original Message


  • 7.  RE: Comparing different Endpoint Attributes for 802.1x Authentication - ClearPass 6.12.3 and Intune Extension 6.3.5

    Posted Dec 20, 2024 09:00 AM

    Thank you!

    The named resources solved our problems!

    Regards Marc


    Original Message


Related Content