HPE6-A68 · Question #178
Why can the Onguard posture check not be performed during 802.1 x authentication?
The correct answer is C. Onguard uses HTTPS, so an additional service must be created. OnGuard uses HTTPS to send posture information to the ClearPass appliance. For OnGuard to use HTTPS, it must have access to the network. If a customer requires 802.1x authentication on the wired switch, a separate 802.1x authentication must be used prior to the OnGuard posture…
Question
Why can the Onguard posture check not be performed during 802.1 x authentication?
Options
- AHealth Checks can not be used with 802.1x
- BOnguard uses RADIUS, so an additional service must be created .
- COnguard uses HTTPS, so an additional service must be created .
- DOnguard uses TACACS, so an additional service must be created.
- E802.1x is already secure, so Onguard is not needed
How the community answered
(54 responses)- A6% (3)
- B4% (2)
- C76% (41)
- D2% (1)
- E13% (7)
Explanation
OnGuard uses HTTPS to send posture information to the ClearPass appliance. For OnGuard to use HTTPS, it must have access to the network. If a customer requires 802.1x authentication on the wired switch, a separate 802.1x authentication must be used prior to the OnGuard posture check. In this example, an 802.1x PEAP-EAP-MSCHAPv2 authentication is completed first. A separate WebAuth service must be setup with posture checks to use the OnGuard agent. ClearPass and Dell Networking Switches (August 2013), page 21
Topics
Community Discussion
No community discussion yet for this question.