Security

Reply
Highlighted
Contributor I

ClearPass Survey / Consent for employees

Good morning everyone,

We have a customer request to implement a COVID related survey form that would be required for employees to fill out every day before using the wireless.

 

Although this seems like it would be a simple case of MAC Caching, I am having trouble as to how to implement the actual questions within a web login form, since these are AD users (so no self-registration portal). I am trying to avoid having a separate web server / DB with the survey info and would use the Endpoint database attributes to retain user answers (simple questions - last measure temperature, symptons, etc).

 

I was considering using the pre-auth application service to store these, but my issue is how to relay this info from the login form when the user click submit, especially since I do not know html/java very well.

 

Anybody every implement something like this?

 

Thanks!

RK


Accepted Solutions
Highlighted
MVP Guru

Re: ClearPass Survey / Consent for employees

Have not heard people doing this before. What you could try in this case is to redirect people through a MAC Registration process and have them log in to sponsor their own MAC address. Add some additional fields to get your data, which will be stored in the Guest Device Database.

 

You might use the sponsored guest registration flow as well to let users sponsor their-selves and use AD login to link the responses to a specific user.

 

Note that a captive portal will be intrusive for the end-user and for just getting on the network may be too annoying for people to actually use it.

--
If you have urgent issues, please contact your Aruba partner or Aruba TAC (click for contact details).

View solution in original post


All Replies
Highlighted
Frequent Contributor I

Re: ClearPass Survey / Consent for employees

Don't do this. A MAC address is not a user identity.

Highlighted
MVP Guru

Re: ClearPass Survey / Consent for employees

Have not heard people doing this before. What you could try in this case is to redirect people through a MAC Registration process and have them log in to sponsor their own MAC address. Add some additional fields to get your data, which will be stored in the Guest Device Database.

 

You might use the sponsored guest registration flow as well to let users sponsor their-selves and use AD login to link the responses to a specific user.

 

Note that a captive portal will be intrusive for the end-user and for just getting on the network may be too annoying for people to actually use it.

--
If you have urgent issues, please contact your Aruba partner or Aruba TAC (click for contact details).

View solution in original post

Highlighted
Contributor I

Re: ClearPass Survey / Consent for employees

Thanks for the help!

 

And I do agree, a MAC address is not an identity, but would serve a temporary purpose.

 

In the end, we decided to add an external web-page and DB for this function which will be consulted by ClearPass.

 

-RK

Search Airheads
cancel
Showing results for 
Search instead for 
Did you mean: