RE: 802.1x certificate authentication

2016-09-23 Thread Turner, Ryan H
Ying, My contact information is below. I have a powerpoint from a presentation I made over our experiences. It isn't something I am going to publish to the list, but I will send it to people that email me directly. Happy to help you on this journey. There are a lot of pitfalls. Ryan Turne

RE: 802.1x certificate authentication

2016-09-23 Thread Ying Zhang
This is very good information. We are currently in the process of RFP for a NAC solution. Anything we should watch out for with regards to the onboarding platform? Any information you could share would be very much appreciated. Thanks. Ying Enterprise Network Architect Information Technolog

RE: 802.1x certificate authentication

2016-09-23 Thread Turner, Ryan H
There is more to it than just the onboarding platform. Regardless of what onboarding platform you use, the actual onboarding SSID and associated captive portal is extremely important at reducing helpdesk calls. We've gone through several iterations over a few years and think we finally got it

RE: 802.1x certificate authentication

2016-09-22 Thread Muraca, Peppino P.
This is great information, I have been worried that this will create a ton of support calls. The key seems to make sure the onboarding system is a good one, we are also a cloudpath shop, but are hoping to get to clearpass. -Pino Peppino Muraca Sr. Network Administrator Stonehill College 508-565

Re: 802.1x certificate authentication

2016-09-21 Thread Curtis K. Larsen
The Android experience is still good in my opinion, just weaker than iOS when you incorporate the Play Store. (I think ISE links to the Play Store too). Luckily, Cloudpath has the option of directly downloading the certs instead of requiring the app from the Play Store. Of course, a profile b

RE: 802.1x certificate authentication

2016-09-21 Thread Turner, Ryan H
Android is definitely 'the' problem. In our stats, you can see that they are only 10% of the clients we onboard, but are closer to 90% of the trouble tickets. We were a Cloudpath customer and made the switch to SecureW2 (the android experience was a big reason). Ryan -Original Message---

Re: 802.1x certificate authentication

2016-09-21 Thread Curtis K. Larsen
We've been offering EAP-TLS for about 2 years. It's been the only supported option for BYOD for just over a year. Personally, I think the user experience is pretty good across all devices (Android is weaker but still not bad). I've heard rumblings that Android might be changing to a profile