Supplicant Client Provisioning for Windows + NAC - is it supported?

Hello,
I'm testing out a scenario where it would be most interesting to be able to provision a windows laptop from connecting to a Guest SSID with it the wireless settings it would need to access a secure SSID where then it would be Posture assessed. Like when someone brings their laptop from home to work in the company, and you want to make sure the laptop is not carrying any bad stuff, while still assisting the user with its configuration..
As the NAC provisioning rules and the supplicant provisioning rules are done from the same page, I'm having trouble being able to differentiate the initial supplicant client provisioning (SPW) and the posture verification done after the the association to the secure SSID.
The choices that we have on the client provisioning pages seem to be too limited to do this.
Can anyone confirm if this scenario is supported?
Thanks for any insight
Gustavo Novais

Hi Tarik, I managed to do what I wanted - same client being provisioned and NAC'd in two steps, as you were suggesting.
One limitation that I found though is that as soon as you mark a device as registered (part of RegisteredDevices endpoint group), you stop being able to distinguish an iPad from a Windows workstation, if both of them have been registered by the same user - both of them will belong to RegisteredDevices group (assuming initial registration via webguest portal), both of them will have the similar certificate (same common name) and profiling group matching will no longer work.
Do you know if there is any workaround to it? - I can see the common case where people bring their laptop from home as well as their iPad.
A possible way would be to register to two different devRegPortals (two different endpoint groups) depending on the initial profiling option, but I saw no option on the guest portal to be able to choose multiple devRegPortals only self provisioning flow. I guess the best possible way would be to not merge guest portal and provisioning portals and use different authZ rules depending on the initial profiling of the devices, on a separate SSID dedicated to provisioning.
Thanks for your insight
Gustavo Novais

Similar Messages

  • Client app for Windows 8.1/10

    Hi all, for a while I have been working with a client application for Windows Phone 8.1, however, I noticed that there is a difference between coding the parts to binding data. I noticed that the WebClient I use in Windows Phone is not supported on Windows
    8.1. So what is an alternative? Any help is appreciated
    On a side note: Does anyone know of any other UI extensions for Windows 8.1 other than Telerik Primitives?
    Zack Bowling

    Windows.Web.Http.HttpClient is the recommended web client API on both Windows and Windows Phone.
    See
    Connecting to an HTTP server using Windows.Web.Http.HttpClient (XAML).

  • How to play offline content using Smooth Streaming Client SDK for Windows 8.1 and/or Windows Phone 8.1

    Hi there,
    The Smooth Streaming Client SDK for Windows 8.1 at
    https://visualstudiogallery.msdn.microsoft.com/0170c67c-c183-4fee-8dd4-c2b44d710d40 specifies "Offline playback scenarios via Downloader Plugin*". I have been searching the web to find info on how to download content for offline playback scenarios
    using the Downloader Plugin, but can't find nothing, so is there any samples, API docs or blogs out there showing how to do this?
    Sandip Ahluwalia

    Hi Sandip,
    As stated in the sample you linked:
    For feedback and future requests please use IIS.net forum and related forum tread which can be accessed from
    here
    --Rob

  • Oracle Client Download for Windows XP

    Is it possible to get the Oracle Client download for Windows XP?
    Thanks,
    Cherie Machler

    http://download.oracle.com
    http://lmgtfy.com/?q=How+to+Oracle+Client+Download+for+Windows+XP

  • Disabling UTF in Client 2 for Windows Vista

    Hi,
    has anybody disabled UTF-8 support in Novell Client 2 for Windows Vista?
    Is it possible?
    Many thanks for an advice.
    M. Novotny

    Miroslav,
    It appears that in the past few days you have not received a response to your
    posting. That concerns us, and has triggered this automated reply.
    Has your problem been resolved? If not, you might try one of the following options:
    - Visit http://support.novell.com and search the knowledgebase and/or check all
    the other self support options and support programs available.
    - You could also try posting your message again. Make sure it is posted in the
    correct newsgroup. (http://forums.novell.com)
    Be sure to read the forum FAQ about what to expect in the way of responses:
    http://forums.novell.com/faq.php
    If this is a reply to a duplicate posting, please ignore and accept our apologies
    and rest assured we will issue a stern reprimand to our posting bot.
    Good luck!
    Your Novell Product Support Forums Team
    http://support.novell.com/forums/

  • SBS 2008 - Microsoft Azure Active Directory Module for Windows PowerShell - is not supported by your version

    Hi,
    I was following the artigle (http://www.messageops.com/resources/office-365-documentation/ad-fs-with-office-365-step-by-step-guide/) but
    when try to install the 'Office 365 PowerShell Module' shows a msg saying that 'windows azure active directory module for windows powershell is not supported by your version'.
    And according to the blog (http://blogs.office.com/2014/04/15/synchronizing-your-directory-with-office-365-is-easy/) "DirSync can be
    installed on an existing domain controller"
    >>>> Any help is appreciated.
    * Similar issue: http://www.adaxes.com/forum/post7398.html

    Ok Vasil tks for reply, but this server is 64x. I dont get the point.
    Microsoft Windows [Version 6.0.6002]
    C:\Users\Administrator>set
    ALLUSERSPROFILE=C:\ProgramData
    APPDATA=C:\Users\Administrator\AppData\Roaming
    CLIENTNAME=ANJOTEC_NOTE01
    CommonProgramFiles=C:\Program Files\Common Files
    CommonProgramFiles(x86)=C:\Program Files (x86)\Common Files
    COMPUTERNAME=COMPANYBR-SERVER
    ComSpec=C:\Windows\system32\cmd.exe
    FP_NO_HOST_CHECK=NO
    HOMEDRIVE=C:
    HOMEPATH=\Users\Administrator
    lib=C:\Program Files\SQLXML 4.0\bin\
    LOCALAPPDATA=C:\Users\Administrator\AppData\Local
    LOGONSERVER=\\COMPANYBR-SERVER
    NUMBER_OF_PROCESSORS=4
    OS=Windows_NT
    Path=C:\ProgramData\Oracle\Java\javapath;C:\Program Files\HP\NCU;C:\Windows\sys
    em32;C:\Windows;C:\Windows\System32\Wbem;C:\Windows\System32\WindowsPowerShell\
    1.0\;C:\Program Files (x86)\Microsoft SQL Server\90\Tools\binn\;C:\Program File
    (x86)\Microsoft SQL Server\80\Tools\Binn\;C:\Program Files\Microsoft SQL Serve
    \90\DTS\Binn\;C:\Program Files\Microsoft SQL Server\90\Tools\binn\;C:\Program F
    les (x86)\Microsoft SQL Server\90\DTS\Binn\;C:\Program Files (x86)\Microsoft SQ
    Server\90\Tools\Binn\VSShell\Common7\IDE\;C:\Program Files (x86)\Microsoft Vis
    al Studio 8\Common7\IDE\PrivateAssemblies\;C:\Program Files (x86)\ExchangeMapi\
    C:\Program Files (x86)\Common Files\Roxio Shared\DLLShared\;C:\Program Files (x
    6)\Common Files\Roxio Shared\DLLShared\;C:\Program Files (x86)\Common Files\Rox
    o Shared\9.0\DLLShared\;C:\Program Files\Microsoft\Exchange Server\bin;C:\Progr
    m Files\Microsoft\Exchange Server\Scripts
    PATHEXT=.COM;.EXE;.BAT;.CMD;.VBS;.VBE;.JS;.JSE;.WSF;.WSH;.MSC
    PROCESSOR_ARCHITECTURE=AMD64
    PROCESSOR_IDENTIFIER=Intel64 Family 6 Model 30 Stepping 5, GenuineIntel
    PROCESSOR_LEVEL=6
    PROCESSOR_REVISION=1e05
    ProgramData=C:\ProgramData
    ProgramFiles=C:\Program Files
    ProgramFiles(x86)=C:\Program Files (x86)
    PROMPT=$P$G
    PSModulePath=C:\Windows\system32\WindowsPowerShell\v1.0\Modules\
    PUBLIC=C:\Users\Public
    RoxioCentral=C:\Program Files (x86)\Common Files\Roxio Shared\9.0\Roxio Central
    3\
    SESSIONNAME=RDP-Tcp#0
    SystemDrive=C:
    SystemRoot=C:\Windows
    TEMP=C:\Users\Administrator\AppData\Local\Temp\2
    TMP=C:\Users\Administrator\AppData\Local\Temp\2
    USERDNSDOMAIN=COMPANYBR.LOCAL
    USERDOMAIN=COMPANYBR
    USERNAME=administrator
    USERPROFILE=C:\Users\Administrator
    windir=C:\Windows
    C:\Users\Administrator>

  • SQL*PLUS 32 Bit Client needed for Windows 64 Bit

    Hi,
    I have got a 64 Bit Windows OS and an Oracle 11.
    With 32 Bit Applications ( Crystal Reports) I can not run SQL NET Thick, SQL NET Thin and JDBC.
    Oracle 32 Bit Installation is Missing.
    Oracles "Instant Client Downloads for Microsoft Windows (32-bit)" will not do it.
    http://www.oracle.com/technetwork/topics/winsoft-085727.html
    What else to use ?
    Thank You
    Martin Sautter

    Martin.Sautter wrote:
    Hi,
    i used:
    instantclient-basic-nt-11.2.0.2.0.zip (32BitClient)
    instantclient-sqlplus-nt-11.2.0.2.0.zip.
    I did not find an "old", "classic" SQL*PLUs client.What does that mean exactly, classic client?
    Did you unzip the ic sqlplus .zip (the one listed) in the same dir as ic basic?
    After dezipping waht than ?
    No installer, nothing ...That's the beauty of Instant Client, just unzip or move a few files, set PATH if needed, and you have client libraries all "installed" and ready.
    >
    You can give advice ?Generally, required lib files are (n Windows) oci.dll, oraociicusN.dll or oraocieiN.dll (N= e.g. 11). Then for Sql*plus add orasqlplusicN.dll and the .exe from ic-sqlplus package.
    C:\Users\Test\Ora-IClite>dir
    Volume in drive C is OS
    Volume Serial Number is 6E8F-186A
    Directory of C:\Users\Test\Ora-IClite
    2011-12-16  09:30    <DIR>          .
    2011-12-16  09:30    <DIR>          ..
    2011-08-31  11:39                38 ldap.ora
    2011-07-30  12:21           683 008 oci.dll
    2011-07-30  12:21        44 153 856 oraociicus11.dll
    2011-07-30  12:21         1 501 696 Orasqlplusic11.dll
    2011-07-30  12:21           869 376 sqlplus.exe
    C:\Users\Test\Ora-IClite>.\sqlplus user@'localhost/xe'
    SQL*Plus: Release 11.2.0.2.0 Production on Fri Dec 16 09:34:13 2011
    Copyright (c) 1982, 2010, Oracle.  All rights reserved.
    Enter password:Edited by: orafad on Dec 16, 2011 9:35 AM

  • Installing Latest Oracle Client & ODT for Windows 7 64-bit

    I have a Windows 7 64-bit. I would think that using 32-bit Java, 32-bit Oracle Client and 32-bit ODAC would work just fine on this operating system. However, I had no luck getting it to run. Here is what I did and a few reasons why I prefer to never work with Oracle products:
    Installed 32-bit JDK/JRE (1.6 Update 25)
    Installed 32-bit Oracle Client (11g R2) Home 1
    Tested connectivity from SQL Developer successfully
    Installed 32-bit ODT (11g R3) to Home 1 (installer noted upgrades and new installs)
    Failed connectivity from all things windows (ODBC, ADO, ADO.Net)
    Uninstalled 32-bit ODT
    Failed to uninstall 32-bit Oracle Client Home 1 (oraparam.ini file missing among other issues)
    Installed 32-bit Oracle Client (11g R2) Home 2
    Failed to uninstall 32-bit Oracle Client Home 1 (told to use deinstall tool)
    Failed to uninstall 32-bit Oracle Client Home 2 (told to use deinstall tool)
    Failed to run uninstall tool in Home 1 (told to download standalone deinstall tool)
    Uninstalled 32-bit Oracle Client Home 2 (completed successfuly with errors - seriously?)
    Uninstalled 32-bit Oracle Client Home 1 (completed successfully, but couldn't delete folder)
    Oracle.DataAccess and Oracle.Web are still installed in GAC. Uninstall attempts fail (access denied)
    Installed 32-bit Oracle Client (11g R2) Home 1
    Tested connectivity from SQL Developer successfully
    Tested connectivity from .Net 3.5 successfully (using 32-bit 2.0 dll)
    Tested connectivity from .Net 4.0 successfully (using 32-bit 2.0 dll)
    Does anyone have any suggestions on getting Oracle Data Tools for Windows to work before I try that again?

    I realize ODT uses ODP, but installing release 3 upgraded the .Net 2.0 ODP DLLs (which were installed from the Oracle Client 11g Release 2 install) and added the .Net 4.0 DLLs. After that install everything stopped working from Windows land and then it took the better part of two hours to get it back to what it looked like prior to the install. The other thing weird thing I noticed is that although Oracle.DataAccess is registered in the 2.0 GAC I cannot add a reference that way using VS2010. I have to manually add a reference to the file path. Although it still appears I do not have to have the assembly copied locally to run, so the GAC registration seems to be working in that regard.

  • Oracle 9i Client Installation for Windows Server 2003

    Hello All,
    How do I install the 9i client on Win Server 2003? I can't find any instructions...
    Is it just download the 2 files and install in that order?
    http://www.oracle.com/technology/software/products/oracle9i/htdocs/win2k3soft.html
    Thanks!
    Message was edited by:
    user517416

    Have you read the doc linked on the page which you gave ?
    http://download-uk.oracle.com/docs/html/B10924_01/toc.htm
    Moreover, you have the documentation installation guide for Windows :
    http://download-west.oracle.com/docs/html/A95493_01/toc.htm
    Nicolas.

  • Get host name and ip addrees of the client machine for window VISTA

    Hello Friends !!
    I have write the following code to get the ip adress and host name of the client machine ..
    it works fine for windows xp and 2000 but in vista it gives this type of out put.
    host name = 0:0:0:0:0:0:0:1
    ip addresss = 0:0:0:0:0:0:0:1
    what i have to make changes in my code to get the proper ip address and hostname for vista...
    My code is listed below....
    code ::
    InetAddress remoteAddress = null;
    // Setting Host Name...
    request.setAttribute("reportHostIP", request.getRemoteAddr());
    // Setting Host IP Address...
    try
         remoteAddress = InetAddress.getByName(request.getRemoteAddr());
         //This will give you the full qualified domain name of the client
    request.setAttribute("reportHostName", remoteAddress.getCanonicalHostName());
    catch(Exception e)
         logger.error(e.getMessage(), e);
    }

    BIJ001 wrote:
    Is it not IPv6 by any chance?It is. And if I remember correctly, then "0:0:0:0:0:0:0:1" (or "::1" for short) is the IPv6-equivalent to "127.0.0.1", i.e. it's the loopback device.

  • Novell Client for Windows 4.91 SP2 supported on Windows 2008

    Hi Friends
    Can Novell Client for Windows 4.91 SP2 Installed on the Windows 2008 Server. if it can be installed is their any know issues.
    Thanks
    Kaniyath

    Originally Posted by AndersG
    Kaniyath,
    > Can Novell Client for Windows 4.91 SP2 Installed on the Windows 2008
    > Server. if it can be installed is their any know issues.
    >
    1. This is the forum for windows 9x
    2. There is no official client for 2008 (yet), but several posters have
    claimed success with the Vista client.
    - Anders Gustafsson (Sysop)
    The Aaland Islands (N60 E20)
    Discover the Novell forums at http://forums.novell.com
    Novell does not monitor these forums officially.
    Enhancement requests for all Novell products may be made at
    Enhancement Request
    Thanks for the Update, Sorry for posting my query in the wrong forum.

  • After Forefront install clients ask for Windows Genuine Advantage

    Hi,
    I've deployed Forefront clients across the organisation via SCCM however after the deployment every Windows client is saying "Windows Genuine Advantage. Unable to complete Windows validation".
    I can get round the issue by running IE as an admin and revalidating but this has only occurred since the Forefront installs hence posting in this forum. Has anybody had the same issue or know of a system-wide fix, visiting 500 clients to run IE as an admin
    is not an option !
    Many thanks,
    Brian.

    Is the date, time and region of SCCM is the same as clients?
    Are you using any licensing management program?

  • Will MDM for windows phone 8.0 support for windows phone 8.1

    We have successfully implemented MDM solution for windows phone 8.0 . Enrolment and polling working properly.
    Now devices will come for windows phone 8.1 .Will this existing system work for 8.1 also? Or is there any changes need to be done?

    As far as I am aware it will be ok. 8.1 just exposes additional functionality and CSP's available to be manipulated.
    I will double check on that to be 100% sure.

  • How do i download itunes for windows 7, says application support needed, error 2 how do i fix this pls?

    how do i download itunes for windows 7, when i keep getting error report saying i need application support? i tried downloading an "application support" download, still did not work, also says, Error 2

    There are a couple of methods for using more than one iPod on a single computer. Method one which has already been described is to have two Mac or Windows user accounts which by definition would give you two completely separate libraries. Method two is to set your preferences so that either one or both iPods get updated with only certain playlists within one library. Have a look at this article and see what you think and go for whichever you feel suits your needs best: How To Use Multiple iPods with One Computer
    Another option when using a single library is to set one or both of the iPods to manual update: Managing content manually on iPod
    Choosing the update option "automatically update selected playlists only" allows you to create a playlist specifically for each iPod and drag the tracks you want into it. If you tire of the list and want to change it, you just add or remove the songs you don't want. The ones you take out out remain in the library to be used by the other iPod. Make your playlist a Smart playlist and limit the size to just below the advertised capacity of your iPod ( for example, around 3700MB for a 4GB or 1800MB for a 2GB Mini or Nano). You can read more about playlists at these links:
    iTunes: Creating playlists of your favorite songs
    How to create a Smart Playlist with iTunes

  • ITunes for Windows: HiDPI (high resolution) support?

    When will iTunes support high resolution display panels in Windows? It is blurry at 3200x1800 on my laptop.

    Is there a process to update my iTunes. I've used this gear driver and it's worked GREAT for a long time, but when and if I ever update my iTunes it breaks this and I've tried uninstalling/reinstalling gear, reverting back to the same version of iTunes and completely reinstalling both but nothing seems to work. Is there a good process to revert back and reinstall iTunes and the gear driver?

Maybe you are looking for