Security

Hi all,

New Clearpass Guest Install version 6.7 with a sonicwall redirection.

We are correctly redirected to authentication page but we have an error message : "Invalide user name or password".

All flows are open between Clearpass and Sonicwall.

Topology :

Connection page configuration :

User page configuration :

Sonicwall guest services configuration :

Authentication error :

'Service Classification failed' means that you didn't have a matching service defined in the ClearPass services.

From the log, you can also see that the incoming request is of the type WebAuth, and you don't have any WebAuth services defined.

Did you follow some integration guide? From this point, I would add a WEBAUTH service and see what comes into ClearPass then,

What is not clear to me is how the actual authentication will happen in this situation. There are basically two methods for guest authentication. First is where the access device will do a RADIUS authentication against ClearPass, second is where the client will do a WebAuth against ClearPass and ClearPass then sends a RADIUS CoA (Change of Authorization) to the access device to allow traffic. This last method is often combined with a MAC authentication.

We choose the Radius authentication and now, we have a loop after authentication succeed.

The Radius service is match we are accepted BUT we are loop with the authentication page.

Service Captive Portal Authentication - RADIUS :

Tracker authentication :

Any idea ?

You can see that the authentication is happening from the ClearPass itself (127.0.0.1 / localhost). What you likely see here is a WebAuth to the ClearPass that authenticates.

Again, I'm not aware of how the integration with SonicWall would work, but there are the two basic options I explained earlier. Which of those is used here?

Have you found an integration document that you followed?