Security

 View Only
last person joined: 20 hours ago 

Forum to discuss Enterprise security using HPE Aruba Networking NAC solutions (ClearPass), Introspect, VIA, 360 Security Exchange, Extensions, and Policy Enforcement Firewall (PEF).
Back to discussions
Expand all | Collapse all

OnGuard over third party VPN

This thread has been viewed 3 times

  • 1.  OnGuard over third party VPN

    Posted 2 hours ago

    HI there.  I've got a basic OnGuard policy which checks for the latest Windows version and the presence of a couple of security products.  Management now want me to push it out to laptop users who often connect in from home via our Fortinet Forticlient VPN solution.  I installed OnGuard on a test laptop and gave it a try but it does not connect back to the server once Forticlient establishes its link.

    I'm not doing any authentication or looking at the Fortinet VPN in any way, I just want the basics checked.  I can't find anything in the very brief online configuration guides and a search through the posts here hasn't helped either.  I've installed the non VIA client and was hoping all it needed was to be able to reach the server to report back but it looks like something is wrong.  Any ideas?



  • 2.  RE: OnGuard over third party VPN

    EMPLOYEE
    Posted an hour ago

    Please have a look in your OnGuard Settings -> Policy Manager Zones:

    There make sure the client subnet is included (or extend to the VPN IP-pool, or even 0.0.0.0/0 if that's possible), and the ClearPass Server IPs or FQDN are reachable over the VPN.



    ------------------------------
    Herman Robers
    ------------------------
    If you have urgent issues, always contact your Aruba partner, distributor, or Aruba TAC Support. Check https://www.arubanetworks.com/support-services/contact-support/ for how to contact Aruba TAC. Any opinions expressed here are solely my own and not necessarily that of Hewlett Packard Enterprise or Aruba Networks.

    In case your problem is solved, please invest the time to post a follow-up with the information on how you solved it. Others can benefit from that.
    ------------------------------

    Original Message