Thank you in advance, my google-fu is lacking... We've got two Aruba 7210 controllers and Clearpass and everything works ok for user auth for our 802.1x SSID....the problem comes in when we want to say, "allow THIS iPad on the wifi but not this other one."....we have iPads, android phones, iphones, windows laptops, TI-82 calculators (jk), etc. but we do not currently have a MDM solution to easily put certs,etc on these devices. Our clearpass endpoint database is filling up with tons of devices and I see where you can mark them "known" or "unknown" but I don't see how to give the user/device a different role based on the device they are on. Also, can we do anything with "device profiling" so it is a little more secure than just mac-address authentication only? Hope that makes sense, thanks.
#7210