Security

last person joined: yesterday 

Forum to discuss Enterprise security using HPE Aruba Networking NAC solutions (ClearPass), Introspect, VIA, 360 Security Exchange, Extensions, and Policy Enforcement Firewall (PEF).
Back to discussions
Expand all | Collapse all

Guest Access - Timeout/Reauth

This thread has been viewed 2 times

  • 1.  Guest Access - Timeout/Reauth

    Posted Jun 21, 2016 10:22 AM

    Our guest wifi is configured in conjunction with ClearPass so that a guest needs to be sponsored by an employee before being let on.  We’ve been receiving complaints that after the guest has been sponsored and they lock their laptop or go to lunch, their session goes idle and when they attempt to log back in, the credentials that were provided no longer work.  They have to go through the sponsorship process again.  Is there a way to change the timer (either on the controller or in ClearPass) so that sessions do not timeout so quickly and stay active for the length of time they were sponsored for (1 hour, 1 day, 1 month or 1 year)?



  • 2.  RE: Guest Access - Timeout/Reauth

    EMPLOYEE
    Posted Jun 21, 2016 02:45 PM
    You should use mac caching for guests in ClearPass so that you do not have to enable timers, which can introduce it's own considerations.


    #AirheadsMobile


  • 3.  RE: Guest Access - Timeout/Reauth

    EMPLOYEE
    Posted Jun 21, 2016 02:45 PM
    You should use mac caching for guests in ClearPass so that you do not have to enable timers, which can introduce it's own considerations.


    #AirheadsMobile


  • 4.  RE: Guest Access - Timeout/Reauth

    Posted Jun 21, 2016 03:08 PM

    There are 2 options to do:

     

    1. Use the form field to edit and configure the expire time to set the timer validation of whatever the value we need for expiraton for the self registration user requiring sponsor approval. 

    2. Use the guest mac caching to set or cache the timer from when the user authenticated maintain the authenticated role for "X" number of time.

     

    I see the option 1 is easy compared to option 2.

     

    Thank you

    Sriram