Re: [WIRELESS-LAN] [EXT] [WIRELESS-LAN] Password reset/change guidance

2019-11-06 Thread Coehoorn, Joel
I'd love to "stand up an onboarding system", but so far the cost has been far too much for us relative to the user experience. The UX hasn't been there because the better options want to use sms and 2 of the top 5 cellular carriers have poor coverage on our campus. We can help students and employe

Re: [WIRELESS-LAN] Clearpass /AD /Palo fw

2019-11-06 Thread Trenton Hurt
I’m seeing timeouts during initial auth against ad. Clearpass trues dcerpc on port 49195 but the fw sees it like clearpass is trying to reuse some old tcp session and doesn’t allow it even though have allow all or even tried pet based rules with all the ports specified from Aruba docs. After the

Re: [EXT] [WIRELESS-LAN] Password reset/change guidance

2019-11-06 Thread Sweetser, Frank E.
Personally, I'm a big fan of leveraging certificates for wireless authentication. It completely decouples the username and password once you're past the provisioning process, but you can still tie your RADIUS server into AD to reject people with locked out accounts if you want. Machines on a d

RE: Wi-Fi in the Elevator Car

2019-11-06 Thread Stephen Belcher
We use Fluidmesh to create a wireless bridge between a base unit at the top of the shaft and a mobile unit on top of the car. This setup is used for security cameras with no issue. We have tested Wi-Fi and it also works although we don't have any in production at the moment. It's fairly inexpe

Password reset/change guidance

2019-11-06 Thread Kovich Greg
Hello WLAN Community, A customer of ours has been using a captive portal to authenticate students to WiFi (Alcatel-Lucent branded Aruba gear). When a student forgets or does not reset their password there is a link on the CP to accomplish that… unfortunately, there have been problems with the va

Re: [WIRELESS-LAN] Clearpass /AD /Palo fw

2019-11-06 Thread Michael Davis
What PanOS version?  We saw one case where the palo was delivering fragments in reverse order which wasn't technically incorrect, but some devices didn't like it. On 11/5/19 6:32 PM, Hurt,Trenton W. wrote: Hello Any folks using clearpass for radius auth against AD with a palo fw in between?