QuestionQ16

Define Onboard Provisioning and Posture Attribute Enforcement

In a network that uses ClearPass and RADIUS CoA, a client first connects without profile information and receives limited access.

How does ClearPass make sure that the client ultimately receives full access?

  • A ClearPass uses the initial connection data to grant full access without further profiling.
  • B ClearPass profiles the client after receiving a DHCP request, terminates the session, and allows the client to re-authenticate with full access.
  • C ClearPass immediately grants full access upon receiving the DHCP request without terminating the session.
Explanation

DHCP data lets ClearPass profile and classify the endpoint after its initial restricted authentication. ClearPass can trigger a RADIUS CoA termination for the active session; the client then authenticates again, allowing policy evaluation to use the new profile and assign full access.

Learn more

Community Discussion

No comments yet. Be the first to start the discussion!