Thanks all for the answers.
I have two problems with this scenario:
1) On ClearPass 6.3 the active connection doesn't work. Endpoint Database is not updated at all. Only if you restart "Async network services" under Servcie Control on the Publisher of the Cluster will trigger the retrieval from Activate Service, otherwise the database is not being updated. Also, even I have the Activate Connetion under Endpoint Context Server with a device filter to retieve only RAP devices , CPPM is getting alot more devices I want, so definetily there is an issue here.
2) I might be doing something wrong but the AP needs to terminated the IPSec tunnel to the controller at the initial provisioning otherwise the AP won't be able to connect and the IPsec Session won't be completed.
Regards,
Antonio