Security

 View Only
  • 1.  Sponsored Guest - Reject

    Posted Jul 09, 2020 01:31 PM

    Is it possible to create policy to place a client in the Clearpass Blacklist if the Sponsor rejects the access request? Or place it in some sort of DB to be references in policy. 

     

    What I am looking to do is prevent a guest from attempting to either connect to the network or at least prevent from submitting another request if they were rejected. 

     

    I was thinking if we can somehow get the MAC address of the client in the Clearpass Blacklist table, I can then use policy to reference the DB and send Enforcement as HTTP Post to blacklist the user on the controller. This would prevent them from connecting. 

     

    CPPM HTTP Post for controller blacklist...

    https://community.arubanetworks.com/t5/AAA-NAC-Guest-Access-BYOD/Add-blacklist-user-in-controller-from-Clearpass/ta-p/278508



  • 2.  RE: Sponsored Guest - Reject

    Posted Jul 09, 2020 01:57 PM
      |   view attached

    Maybe somehow query the Guest application log for the Reject? If they hit the Mac Auth services (MAc Caching configured), we can then kick in the policy to blacklist on controller.  Screenshot attached.