Corp Secure Contractor

Allow Full Access

Secure Corp BYOD Access

Allow internet Only Access

ClearPass receive a timeout attempt when trying the Remote Lao AD server first No
further processing will occur until the Remote Lab AD server is marked as "Down" by the
Administrator

ClearPass try either server Backup 1 or Backup 2 depending on which has responded
the fastest in prior attempts to authenticate ClearPass win then receive a result of Active
Directory Authentication failed No further processing will occur

ClearPass receives a timeout attempt when trying the Remote Lab AD server first. It will
then try the server Backup 1 and Backup 2: both will send a result authentication failed

ClearPass receives a timeout attempt when trying the Remote Lab AD server first It will
then try the server Backup 1 and receive a result of Active Directory Authentication failed
No further processing will occur

Identifies clients that are not security compliant

Initiates the Auto-Remediation process

Controls access to network resources

Denies access to unhealthy clients

indicates the Health Status of the Client

The guest account is created in a disabled state with the "Log In" button grayed out

The guest account is not yet created and remains in a disabled state There is not "Log
in" button yet displayed

The guest account is created in disabled state, the "Log In" button will appear only after
the sponsor approval process is completed

The guest account is created in an enabled state with the Tog in" button functional

Profiling

Posture

Captive Portal

Onboard

DHCP Collectors

Network Functions

Active Collectors

ClearPass Air Monitors

This removes the reliance on the known or unknown status for MAC authentication.

All clients with unknown endpoints will be granted guest access regardless of
authorization

Client attempts will fail without an additional Authentication method applied.

All clients with known endpoints will be granted guest access regardless of
authorization.

Cisco Device Sensor

Exchange Plugging agent

3rd part MDM

DNS fingerprinting

NAD ARP listening handler