Security

Hello,

We are using onguard - 6.6.9.  Sometimes we get a client that has passed the checks and is healthy.  The clearpass server lists the response as healthy and the agent agrees.

 

However the client stays on the quarantined vlan.  I fixed this on my personal laptop by uninstalling the clearpass onguard and reinstalling it.

 

I read the troubleshooting guide, but nothing specific for this.

 

Any ideas?

Is this wireless or wired ? Are you sending a CoA? When it is healthy how are you assigning /returning the VLAN?



Thank you

Victor Fabian

Pardon typos sent from Mobile

hey

 

it is a wireless and wired.  But we use 99% wireless, so havent heard of issues with wired.

 

Unhealthy clients start at vlan2, a vlan on the controller

 

When healthy it does a terminate session and an agent bounce (bounce client: true, macs seemed to only respond to an agent bounce)  and uses the allow access enforcement profile. RADIUS Accept.  This is the default vlan of the HP wifi controller wireless service.

 

Works most of the time.

I recommend you use one or the other , meaning dont use terminate session and bounce client at the same time