AAA, NAC, Guest Access & BYOD

Question: When i switch from one user to another, no 802.1x received by ClearPass (so nothing sent by Windows machine) and new user doesn’t appear in Access Tracker. Is this the expected behavior in Windows 7? This way, even OnGuard will not authenticate the new user again and no health check for the new user.

Environment : This applies to all the versions of CPPM

Solution:

OnGuard Agent will authenticate and preform health checks for new user also but we do not support 'switch user' case because of the following reason:

Posture Cache is based on Mac Address so Server will store and use same Posture Result for both the users as both are connecting from same IP and Mac Address.

This means for 2nd user, Server will grant access based on health state of first user.

In this case, 2 instances of OnGaurd Agent (frontend - ClearPassOnGuard.exe) will be running, one for each user. 

Here Test 20 and test are two users of the same machine.