Environment : This applies to all the versions of CPPM
ClearPass requires access to the following URL for checking for updated plugins:
All versions up to ClearPass 6.3.6 version, ClearPass uses both TCP ports 80 and 443 to download the updates from the ClearPass Software Update portal (clearpass.arubanetworks.com).
All versions starting from ClearPass versions 6.4.0 and newer, ClearPass uses TCP port 443 to download the updates from the ClearPass Software Update portal (clearpass.arubanetworks.com).
If an access control list will be created on a firewall to allow this traffic, please note that the IP address that clearpass.arubanetworks.com resolves to is subject to change. If you find that you are unable to get plugin updates with a valid subscription ID, then make sure this access is allowed.
For Remote Assist feature in ClearPass 6.3, ClearPass needs to be able to open a TCP 443 connection to