Security

Wondering how to best manage the devices we have that dont support .1x and/or arent in AD, our device count runs into 4 figures and may account for around 10% of wired connections, and it just gives me a headache thinking about static hosts lists!

 

Although I would suspect that even dedicated nac soultions would have this issue which would involve device profiling or dealing with hug mac address lists!

This is exactly the use case for the devices database in guest. Users or IT can register devices.

See this how-to:
http://community.arubanetworks.com/t5/AAA-NAC-Guest-Access-BYOD/How-To-Advanced-MACTrac-designs-in-ClearPass-November-MHC/td-p/217291

Perhaps I should have made clear that this was for printers, network adapters, IP phones, and many other devices that basically isnt a pc or laptop.

 

Thanks

Yes, same response. Unless you don't care about identity or ownership of the devices, then you can just use the profile feature. 

Sent from Nine