Security

Reply
Contributor II

Use Clearpass to find older iOS and categorize them

Hi everyone!

 

I've got a request to categorize older iOS devices, using Clearpass and apply a special enforcment profile, just for them :-)

 

I need to do this without using OnGuard.

 

Anyone got some suggestions.

 

b

-b
www.apextechgroup.com
Aruba Employee

Re: Use Clearpass to find older iOS and categorize them


@bhubert wrote:

I've got a request to categorize older iOS devices, using Clearpass and apply a special enforcment profile, just for them :-)

 

I need to do this without using OnGuard.


What is the security on the SSID(s) these devices connect to?


Charlie Clemmer
Aruba Customer Engineering
Guru Elite

Re: Use Clearpass to find older iOS and categorize them

Setup IF-MAP between the controller and ClearPass and then use the raw fingerprint data in role mapping.

Tim Cappalli | Aruba Security
@timcappalli | timcappalli.me | ACMX #367 / ACCX #480
Contributor II

Re: Use Clearpass to find older iOS and categorize them

That's what I was thinking but was hoping to avoid the overhead of using REGEX to parse the data. Setting it up is one thing. Handing it to a helpdesk to maintain is quite another!

Thanks!

b
This message and attachments may contain confidential or privileged information protected by law from further disclosure. If you are not the intended recipient, disclosure, copying, use, or distribution of the information included in this e-mail and attachments is prohibited. If you have received this communication in error, please advise the sender immediately and permanently delete this message and attachments.
-b
www.apextechgroup.com
Guru Elite

Re: Use Clearpass to find older iOS and categorize them

You can just use a contains operator in the role map.

Tim Cappalli | Aruba Security
@timcappalli | timcappalli.me | ACMX #367 / ACCX #480
Contributor II

Re: Use Clearpass to find older iOS and categorize them

The requirement is to prevent those older device types from connecting at all, to any SSID.

-b
www.apextechgroup.com
Search Airheads
cancel
Showing results for 
Search instead for 
Did you mean: