Select a service from the drop-down list that defines what type of service can be configured.

Enter the name of the service.

Provide additional information that helps to identify the service.

Select this check box to monitor network access activity without enforcement.

Check these boxes to access the additional configuration tabs:

Authorization

Posture Compliance

Audit End-hosts

Profile Endpoints

Accounting Proxy

Service Rule

Select the match condition for this service:

Matches ANY

Matches ALL of the following conditions

Select Click to add to select the service rule type.

Select the name of the service rule from the drop-down list.

Select an appropriate operator from the list of operators for the data type of the attribute.

Enter the value or select the value from the drop-down list. The value list depends on the Type and Operator selected.

Select the name of the service rule from the drop-down list.

Select an appropriate operator from the list of operators for the data type of the attribute.

Select authentication methods using the Select to Add field. The authentication methods available for this service depend on the 802.1X 802.1X is an IEEE standard for port-based network access control designed to enhance 802.11 WLAN security. 802.1X provides an authentication framework that allows a user to be authenticated by a central authority. supplicants and the type of authentication methods you choose to deploy.

Policy Manager automatically selects the appropriate method for authentication, when a user attempts to connect. The common types, which are automatically selected include the following examples:

EAP Extensible Authentication Protocol. An authentication protocol for wireless networks that extends the methods used by the PPP, a protocol often used when connecting a computer to the Internet. EAP can support multiple authentication mechanisms, such as token cards, smart cards, certificates, one-time passwords, and public key encryption authentication.  PEAP Protected Extensible Authentication Protocol. PEAP is a type of EAP communication that addresses security issues associated with clear text EAP transmissions by creating a secure channel encrypted and protected by TLS.

EAP Extensible Authentication Protocol. An authentication protocol for wireless networks that extends the methods used by the PPP, a protocol often used when connecting a computer to the Internet. EAP can support multiple authentication mechanisms, such as token cards, smart cards, certificates, one-time passwords, and public key encryption authentication.  FAST

EAP Extensible Authentication Protocol. An authentication protocol for wireless networks that extends the methods used by the PPP, a protocol often used when connecting a computer to the Internet. EAP can support multiple authentication mechanisms, such as token cards, smart cards, certificates, one-time passwords, and public key encryption authentication.  TLS Transport Layer Security. TLS is a cryptographic protocol that provides communication security over the Internet. TLS encrypts the segments of network connections above the Transport Layer by using asymmetric cryptography for key exchange, symmetric encryption for privacy, and message authentication codes for message integrity.

EAP Extensible Authentication Protocol. An authentication protocol for wireless networks that extends the methods used by the PPP, a protocol often used when connecting a computer to the Internet. EAP can support multiple authentication mechanisms, such as token cards, smart cards, certificates, one-time passwords, and public key encryption authentication.  TTLS

EAP Extensible Authentication Protocol. An authentication protocol for wireless networks that extends the methods used by the PPP, a protocol often used when connecting a computer to the Internet. EAP can support multiple authentication mechanisms, such as token cards, smart cards, certificates, one-time passwords, and public key encryption authentication.  MSCHAPV2

The order of authentication is significant, when a client tries to perform an 802.1X 802.1X is an IEEE standard for port-based network access control designed to enhance 802.11 WLAN security. 802.1X provides an authentication framework that allows a user to be authenticated by a central authority. authentication. Policy Manager proposes the first authentication method configured. However, the client can accept the authentication method proposed by Policy Manager and continue authentication or send a Negative-Acknowledgment (NAK Negative Acknowledgement. NAK is a response indicating that a transmitted message was received with errors or it was corrupted, or that the receiving end is not ready to accept transmissions.) and propose a different authentication method. If the newly proposed authentication method is also configured, then the authentication proceeds, otherwise authentication fails.

If most of the clients in the network use a specific authentication method, that authentication method should be configured first in the list. This would reduce the number of RADIUS Remote Authentication Dial-In User Service. An Industry-standard network access protocol for remote authentication. It allows authentication, authorization, and accounting of remote users who want to access network resources.  packets exchanged.

For more information, see the following:

Adding and Modifying Authentication Methods

Adding and Configuring Authentication Sources.

Specify the authentication sources using the Select to Add field.

This can be one or more instances of the following list of authentication sources:

AD_avenda313 [Active Directory Microsoft Active Directory. The directory server that stores information about a variety of things, such as organizations, sites, systems, users, shares, and other network objects or components. It also provides authentication and authorization mechanisms, and a framework within which related services can be deployed.]

Admin User Repository

Denylist Repository

Endpoints Repository

Guest Device Repository

Guest User Repository

http_3702

HTTP Hypertext Transfer Protocol. The HTTP is an application protocol to transfer data over the web. The HTTP protocol defines how messages are formatted and transmitted, and the actions that the w servers and browsers should take in response to various commands._Auth_Source

Insight Repository

Local User Repository

Onboard Devices Repository

Social Login Repository

Time Source

NOTE: When you attempt to specify more than 23 Services authentication sources, the following error message is displayed: No. of Authentication Sources cannot exceed 23.

Select the check box to preprocess the username (to remove prefixes and suffixes) before authenticating and authorizing against the authentication source.

Select a role mapping policy from the drop-down list.

Policy Manager ships a number of preconfigured roles.

NOTE: A service can be configured without a role-mapping policy, but only one role-mapping policy can be configured for each service.

For information on configuring role-mapping policies, see Configuring a Role and Role-Mapping Policy.

Role Mapping Policy Details

Provide additional information about the selected role-mapping policy.

Specify the role to which Policy Manager defaults when the role-mapping policy does not produce a match.

Select this check box to use cached roles and posture attributes from previous sessions.

Select the preconfigured enforcement policy from the drop-down list. This is mandatory.

If you do not have any preconfigured enforcement policies, click Add New Enforcement Policy to create a new enforcement policy.

Enforcement Policy Details

Displays additional information about the selected enforcement policy.

Displays a default profile applied by Policy ManagerPolicy Manager.