Access and Security

• 1 Access and Security
  • 1.1 Access Control
    • 1.1.1 Application Control
      • 1.1.1.1 Viewing an Application Control Summary
      • 1.1.1.2 Creating an Application Control Policy
      • 1.1.1.3 Implementing an Application Control Policy
      • 1.1.1.4 Application Signature Packages
      • 1.1.1.5 Creating a User-Defined Application
    • 1.1.2 Firewall Profile
      • 1.1.2.1 Managing a Firewall Profile
    • 1.1.3 L3 Access Control
      • 1.1.3.1 Create an L3 Access Control Policy
        • 1.1.3.1.1 Creating an L3 Access Control Policy Rule
    • 1.1.4 L2 Access Control
    • 1.1.5 Creating an L2 Access Control Service
    • 1.1.6 URL Filtering
      • 1.1.6.1 Viewing a Summary of URL Filters
      • 1.1.6.2 Enabling URL Filtering on the WLAN
      • 1.1.6.3 Enabling URL Filtering on the Controller
      • 1.1.6.4 Managing URL Filtering Licenses
    • 1.1.7 Device Policy
      • 1.1.7.1 Creating a Device Policy
        • 1.1.7.1.1 Creating the Device Policy Rules
        • 1.1.7.1.2 Summary
      • 1.1.7.2 Configuring Application Controls
    • 1.1.8 Users and Roles
      • 1.1.8.1 User Roles
      • 1.1.8.2 Local Users
      • 1.1.8.3 Subscription Package
      • 1.1.8.4 Limitations of Applying Role Policies to Users
    • 1.1.9 Guests
      • 1.1.9.1 Working with Guest Passes
      • 1.1.9.2 Guest Pass
        • 1.1.9.2.1 SmartZone Guest Pass Self Registration
        • 1.1.9.2.2 Admin Generated Guest Passes
          • 1.1.9.2.2.1 Step 1: Create a Guest Access Service
          • 1.1.9.2.2.2 Step 2: Create a Guest Access WLAN
          • 1.1.9.2.2.3 Step 3: Generate a Guest Pass
          • 1.1.9.2.2.4 Step 4: Send Guest Passes to Guest Users
          • 1.1.9.2.2.5 Generating Guest Passes from an Imported CSV
      • 1.1.9.3 Guest Pass Template
        • 1.1.9.3.1 Creating a Guest Instruction HTML Template
        • 1.1.9.3.2 Creating a Guest Instruction SMS Template
    • 1.1.10 Dynamic PSK
      • 1.1.10.1 Generating Dynamic PSKs
      • 1.1.10.2 Importing Dynamic PSKs
      • 1.1.10.3 Viewing Dynamic PSKs
      • 1.1.10.4 Dynamic PSK3
        • 1.1.10.4.1 Configuring Internal DPSK3
        • 1.1.10.4.2 Configuring External DPSK3
    • 1.1.11 Blocked Clients
      • 1.1.11.1 Creating Blocked Client
      • 1.1.11.2 Creating a Client Isolation Allowlist
      • 1.1.11.3 Creating a Time Based Access Table
    • 1.1.12 Time Based Access
    • 1.1.13 Wireless Intrusion Detection and Prevention Services (WIDS/WIPS)
      • 1.1.13.1 Wireless Intrusion Detection and Prevention System
      • 1.1.13.2 Configuring a Rogue Classification Policy
  • 1.2 Working with Hotspots and Portals
    • 1.2.1 Creating a Guest Access Portal
    • 1.2.2 Working with Hotspot (WISPr) Services
      • 1.2.2.1 Creating a Hotspot (WISPr) Portal
    • 1.2.3 Working with Hotspot 2.0 Services
      • 1.2.3.1 Creating a Hotspot 2.0 WiFi Operator Profile
      • 1.2.3.2 Creating a Hotspot 2.0 Identity Provider
      • 1.2.3.3 Creating a Hotspot 2.0 WLAN Profile
      • 1.2.3.4 Creating a Hotspot 2.0 Venue Profile
    • 1.2.4 Creating a Web Authentication Portal
    • 1.2.5 Creating a UA Blocklist Profile
    • 1.2.6 Creating a Portal Detection and Suppression Profile
    • 1.2.7 Creating Network Segmentation Profile on the vSZ Controller
    • 1.2.8 Ethernet Profiles
  • 1.3 Authentication, Authorization, and Accounting (AAA)
    • 1.3.1 Authentication
      • 1.3.1.1 Authentication Support Matrix
      • 1.3.1.2 Creating Proxy Authentication AAA Servers
        • 1.3.1.2.1 Tunnel Support for URL Redirection
          • 1.3.1.2.1.1 Configuring URL Redirection
        • 1.3.1.2.2 RADIUS Service Options
        • 1.3.1.2.3 Testing AAA Servers
      • 1.3.1.3 Enabling ECDSA Certificates Support for RADIUS with Transport Layer Security (TLS)
      • 1.3.1.4 Vendor-Specific Attribute (VSA) Profile
      • 1.3.1.5 Creating a Vendor-Specific Attribute Profile
      • 1.3.1.6 Associating a VSA Profile to a WLAN Configuration
      • 1.3.1.7 Viewing RADIUS Proxy Settings
      • 1.3.1.8 Creating Non-Proxy Authentication AAA Server
      • 1.3.1.9 Non-Proxy (Social Login)
      • 1.3.1.10 Creating Social Media Login Profile
      • 1.3.1.11 Creating Realm Based Authentication Profile
      • 1.3.1.12 Fast Initial Link Setup (FILS)
      • 1.3.1.13 Create Fast Initial Link Setup (FILS) Realm Profile
    • 1.3.2 Authorization
    • 1.3.3 Accounting
      • 1.3.3.1 Creating Non-Proxy Accounting AAA Servers
      • 1.3.3.2 Creating Proxy Accounting AAA Servers
    • 1.3.4 Creating Realm Based Proxy
  • 1.4 AP Security
    • 1.4.1 Restricted Access Overview
      • 1.4.1.1 Creating a Restricted AP Access Profile
      • 1.4.1.2 Configuring a Restricted Access via Access Point
      • 1.4.1.3 Configuring a Restricted Access via Templates
      • 1.4.1.4 Enabling Restricted AP Access Profile