Security

last person joined: 14 hours ago 

Forum to discuss Enterprise security using HPE Aruba Networking NAC solutions (ClearPass), Introspect, VIA, 360 Security Exchange, Extensions, and Policy Enforcement Firewall (PEF).
Expand all | Collapse all

Clearpass Enforcement for Mobile Apps

This thread has been viewed 0 times
  • 1.  Clearpass Enforcement for Mobile Apps

    Posted Sep 29, 2014 06:30 AM

    Hi Team,

     

    Good evening.

     

    For Clearpass, can we configure an enforcement or rule which redirects mobile guest users to install a mobile Application after they have logged into the captive portal?

     

    To make it clearer, the flow of the scenario is:

     

    1. Mobile users (using android or iphone), connects to the Guest SSID.

    2. Once Mobile users have logged in or registered using the captive portal, Appstore(for Iphones) or Playstore (for Android) will load showing the application to install. If the device already has the app, it will not load the Appstore or Playstore.

    3. After installing the application, only then can user be able to use the connection.

     

    Is the flow above understandable?

     

    I know that after captive portal authentication we can direct the user to a webpage, but I am not sure if Clearpass can do the function above.

     

    Regards,

    Ricardo 

     

     



  • 2.  RE: Clearpass Enforcement for Mobile Apps
    Best Answer

    EMPLOYEE
    Posted Sep 29, 2014 07:27 AM
    There is no way for ClearPass to detect whether or not the app is already installed but you can definitely change the redirect to point to an App store. It would require some php magic to detect the OS and send to the right one.


  • 3.  RE: Clearpass Enforcement for Mobile Apps

    Posted Oct 07, 2014 03:40 AM

    Hi Tim,

     

    Good afternoon.

     

    Very sorry for the late reply.

     

    Thanks for the information and will see how I can accomplish this in clearpass.

     

    Also for detecting the mobile OS, isn't it possible to get that information by enabling Profiling?

     

    Again thanks for your reply.

     

    Regards,

    Ricardo Palma Jr.



  • 4.  RE: Clearpass Enforcement for Mobile Apps

    Posted Oct 12, 2014 07:15 AM

    detecting the mobile OS shouldn't be a problem. certainly when you can have the DCHP requests send to the ClearPass.

     

    your second option isn't possible like Tim mentions. you could consider showing a general landing page asking to install. but enforcing will be dificult.



  • 5.  RE: Clearpass Enforcement for Mobile Apps

    EMPLOYEE
    Posted Oct 12, 2014 10:13 AM
    You'll want to check the OS via user agent with php so you won't have to create multiple captive portals.