Unifi blocking non compliant devices

[nicholab]

Has anyone implemented blocking of uncompliant devices with Unifi? I would be keen to know if anyone has linked Intune compliance to their Unifi switches to dynamically block access.

[ZeroHour]

I am not sure how exactly that would be implemented tbh.

[DalekSec]

I am not sure how exactly that would be implemented tbh.

 

This, as far as i'm aware there is not integration between Intune and UniFi.

 

It may be you're able to disable actions on the device if it goes non-complaint such as turn off WiFi on the device etc.

[Sibrows]

Is there anything that could be done within RADIUS?

 

It’s a few years since I’ve played with UniFi and RADIUS

[MatthewL]

The only way I'm aware it could be done is with a NAC solution such as PacketFence for example.

[dmj]

Is there anything that could be done within RADIUS?

 

It’s a few years since I’ve played with UniFi and RADIUS

 

I think that's probably the way to do it: get the device details from RADIUS then do an API call to inTune to check it meets the requirements before proceeding.

Danger with this approach is that if the API call fails then the default would be to block authentication.

 

Another method would be a periodic script to check InTune for a mac blocklist and update the UniFI using that.