Security

last person joined: 18 hours ago 

Forum to discuss Enterprise security using HPE Aruba Networking NAC solutions (ClearPass), Introspect, VIA, 360 Security Exchange, Extensions, and Policy Enforcement Firewall (PEF).
Back to discussions
Expand all | Collapse all

CPPM Service - Service Rule Authentication option

This thread has been viewed 2 times

  • 1.  CPPM Service - Service Rule Authentication option

    Posted Oct 16, 2013 06:39 PM

    Hi,

     

    I was wondering if there was a trick to using the 'Authentication' option when using it to define a 'Service Rule'. I have been messing around with it and have yet to be successful.

    Aruba_Serivce_Service_Rule_0001.png

    It doesn't seem to matter what I use the authentication request always bypasses this service.

    I tried to set the value to a specific Authentication source that I know my test user can authenticate from but the service is never hit.

     

    I suspect I am using this option incorrectly.

     

    I was thinking that perhaps this value cannot be used because the 'Authentication' information shows up in the 'Computed Attributes' portion of the Access Tracker details. Whereas the Radius:IETF is in the 'RADIUS Request' portion.

     

    I read some of this post in which cjoseph provides some great details about how the CPPM processes an authentication request and applies a service to it and I think this should work. But I am obviously missing something!

     

    Can anyone shed some light on where I am going wrong?

     

    Thank you,

     

    Cheers

     

     



  • 2.  RE: CPPM Service - Service Rule Authentication option
    Best Answer

    EMPLOYEE
    Posted Oct 16, 2013 07:24 PM

    You should not use that attribute, because the Authentication Source is only known after successful authentication takes place.  This should not be used in the Service Tab, which decides if an incoming authentication is going to be "Serviced" or not.



  • 3.  RE: CPPM Service - Service Rule Authentication option

    Posted Oct 16, 2013 07:58 PM

    Fair enough.

     

    Thank you!