Security

last person joined: yesterday 

Forum to discuss Enterprise security using HPE Aruba Networking NAC solutions (ClearPass), Introspect, VIA, 360 Security Exchange, Extensions, and Policy Enforcement Firewall (PEF).
Expand all | Collapse all

Android Onboarding with QuickConnect

This thread has been viewed 17 times
  • 1.  Android Onboarding with QuickConnect

    Posted Jul 15, 2018 06:57 AM

    Hello All,

     

    We have an open network where users initially connect to onboard their devices.

     

    I have allowed access to the below URLs so users can download the quickconnect APP for the playstore, the issue is some users can and some can't.

     

     *.ggpht.com

    *.play.googleapis.com

    *.gvt1.com

    www.googleapis.com

    android.clients.google.com

    play.google.com

     

     

    Another problem is when allowing these URLs, users can access youtube through the APP !!!

     

    is there anyway to resolve this issue ?

     

    also if there is a way to upload the APK on clearpass and change the download URL in the onboard page to go to clearpass instead of the google play

     

     

    Thanks



  • 2.  RE: Android Onboarding with QuickConnect
    Best Answer

    EMPLOYEE
    Posted Jul 15, 2018 10:04 AM
    Be sure you're using the most up to date list.

    https://github.com/aruba/clearpass-cloud-service-whitelists/blob/master/onboard/onboard_android.md

    Due to the way Google has implemented their CDNs, some Google sites will be accessible.


  • 3.  RE: Android Onboarding with QuickConnect

    Posted Jul 15, 2018 10:15 AM

    Thanks so much for the reply.

     

    I will try and test it out and let you know, but is there a way to block youtube as well ?

     

    and do you recommend uploading the APK to clearpass and customizing the page to download locally from clearpass (lot of work and no documentation) ?

     

     



  • 4.  RE: Android Onboarding with QuickConnect

    EMPLOYEE
    Posted Jul 15, 2018 10:17 AM
    No you can't.

    Uploading the APK is not recommended as users have to bypass security restrictions on their device. Please do not do this.


  • 5.  RE: Android Onboarding with QuickConnect

    Posted Jul 15, 2018 10:20 AM

    Ok sounds good, will not think about the APK thing.

     

    I know not aruba issue, google way but youtube access before authenticating is really disappointing.