Security

Hello everyone,

We are new users of ClearPass and need help setting up certificate-based authentication using 802.1x for wired clients. Our current setup includes ClearPass version 6.12.3.303963 and the Microsoft Intune Extension 6.3.5.

The Intune Extension is already populating the Endpoint database with information, and our devices are correctly listed. Our goal is to check if a device is Intune compliant when it connects. To achieve this, we would like to compare certain attributes.

Is it possible to compare specific attributes?
We need to compare Input Attributes like "Certificate:Subject-CN" with for Example "Endpoints:Intune Azure AD Device Id". Ist this possible?

Is there perhaps a better approach to achieve our goal?

We appreciate any help and guidance!

Thank you in advance!

Best regards,
Marc

We have a similar structure and one of our attribute check is based on the following; 

Azure Intune Authentication:Intune Azure AD Registered  EQUALS  true 

While this is not comparing an attribute, it does allow us to lookup and confirm that the device is one of ours, before allowing it on the network. 

Thanks,

Hi Marc.

You can always test your role mapping or enforcement policies with Simulation.  You can compare two attributes.

Best, Gorazd

Hi Marc.

Jumo to the Airheads Broadcasting Channel on Youtube for videos on Intune with Clearpass. You need to add new filters to your query in authentication source to use EntraID for username search.

More info here. Page 27.

Best, Gorazd

Yeah, DeviceId will be the best option to match on - we found the following links really good as we started the process of certificates and Intune; 

https://www.arubanetworks.com/techdocs/NAC/clearpass/integrations/unified-endpoint-management/intune/#appendix-e--scep-certificate-configuration-profile

https://community.arubanetworks.com/viewdocument/atmosphere23-belgium-brussels-202?CommunityKey=07affbbb-b455-4b3e-be10-01880637640c&tab=librarydocuments

(about the six one down on AzureAD and Intune by Herman Robers)

Hope that helps,

Thank you!

The named resources solved our problems!

Regards Marc