How to get Client Classification Policy to apply before CWP?

  • 1
  • Question
  • Updated 3 years ago
I have 2 different SSIDS that send users into a blackhole if they are 1. on a mobile device, or 2. if they are not on a Chromebook.   My goal is to use the CWP as a error screen if their device is not supported on the SSID.

The CWP works, and I have gotten the client classification policy to work, but the problem is that, the CWP shows up no matter weather they are classified to do so or not, so the two systems don't work together.

1. Chromebooks only SSID:   default is to go to a Blackhole profile, unless they are on a Chromebook which then sends them to the appropriate profile. 

2. No Mobile:  the default profile is the correct one, unless they are on mobile which then sends them to a black hole.

My goal is to just show an error screen if they are on an SSID that they are not supposed to be on.
Photo of Bjorn Behrendt

Bjorn Behrendt

  • 5 Posts
  • 0 Reply Likes

Posted 3 years ago

  • 1
Photo of Roberto Casula

Roberto Casula, Champ

  • 231 Posts
  • 111 Reply Likes
Instead of using CWP, which will always get displayed as it's a property of the SSID rather than the user profile, have a look at the redirect option in the user profile's IP firewall policy (available in recent releases). This would allow you to redirect those users to an external URL.
Photo of Mike Kouri

Mike Kouri, Official Rep

  • 1030 Posts
  • 271 Reply Likes
Roberto is (as usual) exactly correct.