u/Specialist_Editor245

Hello,

A customer wants to use OnGuard for Captive Portal Guest Networks with ClearPass.
Is it meaningful or practical to implement OnGuard in a guest captive portal scenario?

In this case, does the user need to access two different portals—one for captive portal access and another for agentless OnGuard checks—or can this be handled through a single web interface?

What possible checks can be performed on guest devices using OnGuard in order to grant network access?

Best Regards,

Hi,

I have a question regarding the HTTPS certificate on ClearPass.

-Is it mandatory to install an HTTPS certificate if we want to use the Captive Portal for a guest network?

-What is the purpose of this certificate?

-Does the certificate need to be issued by a public Certificate Authority (CA) for the Captive Portal?

-What would happen if we used a private or internally signed HTTPS certificate instead for the Captive Portal?

Thank you in advance for your clarification.

Best regards,

I need to migrate my WAF configuration from the SG firewall to XGS firewall.

Currently, I have two different policies for the same public server for WAF – one policy for HTTP and one policy for HTTPS – on the SG firewall.

When creating the web server on XGS, there is the Type field in which I can choose either HTTP or HTTPS.

https://preview.redd.it/satn1hsgmt9h1.png?width=1084&format=png&auto=webp&s=3dc1fffc12e9c9f9db9fab0406b0259d4316f495

Do I need to create two web servers for the same domain (HTTP and HTTPS), or does it make sense to create only the HTTPS server and redirect HTTP to HTTPS?

As far as the WAF policy is concerned, do I need to create one policy for HTTPS and just use HTTP for redirection purposes, or do I need to create two policies – one HTTP and one HTTPS?

What is the best practice for XGS?