Security

Every time I create a device, it will trigger a WebAuth in ClearPass. Anyone has the same issue? Or it's as per design? It's a bit annoying when the 'reject' record showing in the Access Tracker.

Thanks.

It is by design. It allows you to trigger a Disconnect Message or Change of Authorization in case the user connected the device before registering it and therefore is stuck in a captive portal role.

You can also use it to update external systems via the ClearPass Exchange framework.

Thank you Tim! It's really helpful.

BTW, do you know how to limit the device number an Operator can create?

You can set the account limit in the operator profile.

Please note that this is total for both guest user accounts and device registrations. (Limit of 10 = 7 guest users, 3 devices || 5 guest users, 5 devices, etc).

Great. Thanks!