Administrator Guide

100 | Services Dell Networking W-ClearPass Policy Manager 6.6 | User Guide
Adding a W-ClearPass OnConnect Enforcement Service
To add an OnConnect Enforcement service:
1. Navigate to Configuration > Services.
The Services page opens.
2. To add the service, click Add.
The Add Services dialog opens.
3. From the Type drop-down list, select W-ClearPass OnConnect Enforcement (see Figure 63).
Figure 63: Specifying W-ClearPass OnConnect Enforcement
4. Enter the name or label of the OnConnect Enforcement service.
5. Enter the values for any other parameters, including service rules, required for this service.
For a description of all the parameters in the Service page, see Adding Services on page 1.
Associating the W-ClearPass OnConnect Service with an Enforcement Policy
After you create the W-ClearPass OnConnect Enforcement service, you must associate the service with an
enforcement policy.
WMI (Windows Management Instrumentation) configuration is used to retrieve the Loggedin User
information.
Whenever a domain-joined Windows client connects to an OnConnect-enabled port with the domain user
logged in, Authorization attributes for this user are fetched from authorization sources to determine the role of
the user; this information is then used in configuring Policy Enforcement. For details on configuring WMI
credentials, see WMI Credentials Configuration on page 144.
To associate a W-ClearPass OnConnect Enforcement service with an enforcement policy:
1. When finished with the parameter settings on the Add Services > Service page, click Next.
The Services > Enforcement page appears.