Exceptions for client classification policy

  • 1
  • Question
  • Updated 5 months ago
So I have a client classification policy setup that is moving all Android/Apple iOS/iPad devices to a different user profile.  However there is a need to exclude some clients so they don't get redirected to the other user profile (these clients also use static IP's).  I am unable to find such an option, is this something that can be done in HM?  


Thank you
Photo of Ali

Ali

  • 20 Posts
  • 0 Reply Likes

Posted 5 months ago

  • 1
Photo of Carsten Buchenau

Carsten Buchenau, Champ

  • 356 Posts
  • 117 Reply Likes
Hmmm.... out of the top of my head, I would do the following workaround:

- Clone your default user profile, e.g. name it "Dummy", and same settings (only the attribute-id must be different)
- Create either or:
   - A MAC address object with all MAC addresses that should be excluded
   - A device domain object with all IP addresses that should be excluded
- Now add a client classification rule before your existing rule, matching either on your MAC address or device domain object, and assign the user profile "Dummy".

That should do the job, me thinks...
Photo of Ali

Ali

  • 20 Posts
  • 0 Reply Likes
Thank you Carsten for the reply, I actually proposed a better solution with a different SSID for these devices with PPSK and allowing only one device per PPSK.  Your suggestion should work also but managing MAC addys and IP's might become a bit to much.  Thanks so much again for your help.
Photo of Carsten Buchenau

Carsten Buchenau, Champ

  • 356 Posts
  • 117 Reply Likes
Ha! Of course... if you can do it with PPSK, that’s even better. You could even run it under 1 SSID and combine both technics. In the end it comes down to what is most managable in your environment.
Photo of Ali

Ali

  • 20 Posts
  • 0 Reply Likes
Thank you that is correct, I'm really hoping to just get it done with PPSK and be done with it lol.