Security

Hello, i hope everyone is having a great day,

I am trying to use a different Posture Policy for a single test machine, i tried creating another WebAuth service with the following config, but its not working

This service order is prior to the general OnGuard_Service, but when i test, its not matching at all

Is there any other solution

Thanks

Hi

If you check the Input attributes of the request you will probably see that the MAC address isn't presented as an attribute in a web-based authentication. (If I remeber correct)

Thus you are not matching the service filter.

What are you trying to achive?

The web based authentication only report the Posture status to ClearPass, who trigger an Dynamic Authorization (CoA). In the following 802.1x authentication the status is utilized to assign roles and enforcement profiles.

Hello, i hope everyone is having a great day,

I am trying to use a different Posture Policy for a single test machine, i tried creating another WebAuth service with the following config, but its not working

This service order is prior to the general OnGuard_Service, but when i test, its not matching at all

Is there any other solution

Thanks

Hello, i hope everyone is having a great day,

I am trying to use a different Posture Policy for a single test machine, i tried creating another WebAuth service with the following config, but its not working

This service order is prior to the general OnGuard_Service, but when i test, its not matching at all

Is there any other solution

Thanks

Hi man,

Easiest way to fix this is to basically TAG (Role) the machine via your 802.1X authentication service, and use cached roles and attributes and utilize the role to trigger the posture policy for the endpoint. 

 And the service could be triggered by the username, or the MAC address as you can see here.

Hopefully this clarifies your issue.

Cheers,

Vigan

Hello, i hope everyone is having a great day,

I am trying to use a different Posture Policy for a single test machine, i tried creating another WebAuth service with the following config, but its not working

This service order is prior to the general OnGuard_Service, but when i test, its not matching at all

Is there any other solution

Thanks

Hi man,

Easiest way to fix this is to basically TAG (Role) the machine via your 802.1X authentication service, and use cached roles and attributes and utilize the role to trigger the posture policy for the endpoint. 

 And the service could be triggered by the username, or the MAC address as you can see here.

Hopefully this clarifies your issue.

Cheers,

Vigan

Hello, i hope everyone is having a great day,

I am trying to use a different Posture Policy for a single test machine, i tried creating another WebAuth service with the following config, but its not working

This service order is prior to the general OnGuard_Service, but when i test, its not matching at all

Is there any other solution

Thanks