Security

I have a Guest captive portal setup in Clearpass with sponsor approval, but I want to limit who can be a sponsor.
Is there a way to require authentication based on an LDAP security group when a sponsor browses to the approval page on the email they get?

Or maybe some other method?

As it sits right now anyone can add themselves or their desk neighbor as the approver and approve from their Desktop on the LAN.

------------------------------
David Myers
------------------------------

In the guest reg config, you could enable "Require sponsors to provide credentials prior to sponsoring" . The sponsors would be required to log in as an operator and you can lock down the access in policy conditions.

------------------------------
Mathew George
------------------------------

I totally missed that option; was right in front of my face. I will give that a try. Thank you!

------------------------------
David
------------------------------

Original Message:
Sent: Feb 10, 2022 04:53 PM
From: Mathew George
Subject: Limit who can approve Guest Access

In the guest reg config, you could enable "Require sponsors to provide credentials prior to sponsoring" . The sponsors would be required to log in as an operator and you can lock down the access in policy conditions.

------------------------------
Mathew George
------------------------------