Saturday, February 20, 2021

I.S.E + Clearpass

I KNOW. This is absolutely ridiculous! A customer is using Cisco I.S.E for wired 802.1x authentication and posturing. They are using Anyconnect client to override any windows settings/GPOs pertaining to the network.

They purchased Aruba controllers, Airwave and Clearpass. I am building an entirely new WLAN infrastructure for them. They want the wireless network to do the same thing that the wired network does.

Simple enough right?

Except, they didn't purchase OnGuard licenses. Ok the question. Is it possible to somehow send any attributes to I.S.E from Clearpass for posturing after the user authenticates successfully?

If this seems like a stupid idea, please don't hesitate to yell at me and call me crazy.



No comments:

Post a Comment