QuestionQ53

Define Onboard Provisioning and Posture Attribute Enforcement

A company wants to ensure all BYOD devices complete a health check before receiving full network access. It plans to use ClearPass OnGuard for this purpose.

Given a guest network in which devices first connect to an open guest SSID before full authentication, which agent should it use?

  • A The dissolvable agent, because it does not require the client to have an IP address before performing health checks.
  • B The dissolvable agent, because it can perform health checks via a captive portal without requiring pre-installed software.
  • C The persistent agent, because it can operate independently of the network connection type.
Explanation

The dissolvable OnGuard agent is designed for portal-based posture assessment and can be launched through the captive portal without preinstalled software. This fits guest or BYOD devices that initially join an open SSID and must pass a health check before being granted full access. ClearPass web-login settings support requiring a guest to pass a health check before network access and selecting client-scanning agents.

Learn more

Community Discussion

No comments yet. Be the first to start the discussion!