Security

Hi everyone,

I'm setting up the page in ClearPass Guest to show posture results, everything is working fine, but when my enforcement policy prompts the client to show the posture results page, it opens the page to the IP address of my CPPM server. If I accept the certificate error, it does display the page correctly. I have a cert loaded that works correctly if I manually change the IP to FQDN. Where do I define this in the server configuration?

Thanks!

Nick

Do you have the FQDN properly set in the Server Manager -> Server Configuration -> <your server>?

Alternatively, you may configure the fqdn that Onguard connects to under Agent and Software updates -> Onguard settings -> Policy Manager Zones.

I'd think if both are set correctly, you should be redirected to the fqdn in most cases.

------------------------------
Herman Robers
------------------------
If you have urgent issues, always contact your Aruba partner, distributor, or Aruba TAC Support. Check https://www.arubanetworks.com/support-services/contact-support/ for how to contact Aruba TAC. Any opinions expressed here are solely my own and not necessarily that of Hewlett Packard Enterprise or Aruba Networks.

In case your problem is solved, please invest the time to post a follow-up with the information on how you solved it. Others can benefit from that.
------------------------------

Thanks for the response!

In the OnGuard settings, would I set the "Override Server IPs" field to the fqdn of the server?

Additionally, If I have a subscriber server as well, would I set two FQDNs in that field?

CPPM01: CPDATA1.xxx.net
CPPM02: CPDATA2.xxx.net

Does this seem correct?

Nick

Original Message:
Sent: Oct 11, 2024 10:26 AM
From: Herman Robers
Subject: ClearPass Posture Results Page - Incorrect URL

Do you have the FQDN properly set in the Server Manager -> Server Configuration -> <your server>?

Alternatively, you may configure the fqdn that Onguard connects to under Agent and Software updates -> Onguard settings -> Policy Manager Zones.

I'd think if both are set correctly, you should be redirected to the fqdn in most cases.

------------------------------
Herman Robers
------------------------
If you have urgent issues, always contact your Aruba partner, distributor, or Aruba TAC Support. Check https://www.arubanetworks.com/support-services/contact-support/ for how to contact Aruba TAC. Any opinions expressed here are solely my own and not necessarily that of Hewlett Packard Enterprise or Aruba Networks.

In case your problem is solved, please invest the time to post a follow-up with the information on how you solved it. Others can benefit from that.
------------------------------