QuestionQ74

Define Onboard Provisioning and Posture Attribute Enforcement

A user experiences intermittent network disconnects while their device undergoes health checks through the OnGuard persistent agent. After every disconnection, the device must re-authenticate.

What primary mechanism causes these disconnections and ensures appropriate network access?

  • A ClearPass processes the Enforcement Profile and sends a RADIUS CoA terminate session message to the NAD, causing the client to disconnect and re-authenticate.
  • B The OnGuard agent sends a disconnect signal to the device after completing each health check.
  • C The network switch automatically resets the port after detecting a posture change in the device
Explanation

ClearPass evaluates the device’s posture result through its enforcement policy and can apply a RADIUS Change of Authorization enforcement profile to the network access device (NAD). A terminate-session CoA ends the current client session, requiring the client to reconnect and authenticate so that access is granted under the appropriate updated policy.

Learn more

Community Discussion

No comments yet. Be the first to start the discussion!