Access Profiles Setup

The Access Profiles feature allows administrators to define VLAN assignments or other access controls for devices connecting to the network. Access Profiles are assigned to devices based on rules that match their group membership and compliance status.

To create Access Profiles,

1. Log into the MetaDefender IT Access console as an administrator
2. Navigate to Secure Access and then RADIUS NAC
3. Click on Access Profiles tab
4. Click Add Profile button to add new Profile
   • Provide detailed information:
     • Name: Name of the Access Profiles, for example: “Compliance Staff”
     • Define attributes for each profile

On the Access Profiles screen, you will find profiles for supported vendors such as Aruba, Cisco, and potentially others. Additionally, there is a default profile called "Other." If the access profile of a device does not match any of the supported vendor profiles, it will automatically be assigned to the "Other" profile.

This categorization helps in organizing and managing access profiles based on vendor-specific settings and configurations. The supported vendor profiles may have pre-configured attributes and templates tailored to the requirements of those specific devices (Ex: Aruba-User-Role, Cisco-AVPair). Devices that do not match any of the supported vendors will still have a default profile assigned to them, allowing for basic access control and management.

A sample role that will assign a specific VLAN is provided below. This example with work for VLAN assignment on most Vendors. For more details on the types of information that should be included in each profile, please consult your vendor’s documentation, or the NAC RADIUS-based Enforcement setup document for your specific vendor.

Managing Access Profiles

1. Log into the MetaDefender IT Access console as an administrator

2. Navigate to Secure Access and then RADIUS NAC

3. Click on Access Profiles tab

4. On Access Profiles details:

   • To add a new Attribute for a Profile:

     • Click on Add Attribute Set button
     • Select an Attribute that match with the supported Vendor
     • Fill in the corresponding Operator & Value

   • To delete an Attribute of a Profile: Click on Delete icon

   • To active/ inactive a Profile: Click on the Toggle button to switch to a desire status

5. Click on Save to apply changes.