Security

last person joined: 23 hours ago 

Forum to discuss Enterprise security using HPE Aruba Networking NAC solutions (ClearPass), Introspect, VIA, 360 Security Exchange, Extensions, and Policy Enforcement Firewall (PEF).
Expand all | Collapse all

Airwatch endpoint server question.

This thread has been viewed 3 times
  • 1.  Airwatch endpoint server question.

    Posted Jan 16, 2015 04:59 AM

    Hi,

    Just configured our clearpass cluster (6.4.3) to talk to our Airwatch server and looking at the event log I can see messages saying

     

    SourceEndpoint Context Server
    LevelINFO
    Categoryairwatch: Endpoint details updated
    ActionNone
    TimestampJan 16, 2015 09:22:43 GMT
    Description
    Updated 1 Endpoint details from airwatch

     

     

    o.k. that's fine, and  looking in the endpoint database I can see "stuff" that's been obtained via airwatch and I know I can build enforcement policies using that info. My question is, when you look the airwatch server configuration there are a number of actions (see below).  I'm assuming that these are actions I can execute from clearpass. If so how? Any documentation?

     

     

    Rgds

    Alex

     

     

    Clear PasscodeReset Passcode on the device
    Enterprise WipeDelete only corporate information stored
    Get AppsGet apps information for the device
    Lock DeviceLocks the device
    Remote WipeDelete all information stored
    Send MessageSend message to the device
    Send Message (Parameterized)

    Send message with parameters to the device

     

     



  • 2.  RE: Airwatch endpoint server question.



  • 3.  RE: Airwatch endpoint server question.

    Posted Jan 16, 2015 12:07 PM

    Alex,

     

    Thats another items I need to do in more details.... how to action on a context-server-action in my EMM TechNote.

     

    But in summary Yes, you can perform these actions against an endpoint... a simple way is to simple process one of these actions in a HTTP Enforcemnt Profile.... select Airwatch as the target system and then the action you want to perform. Tie this profile into a service.

     

    And you are good to go.

     

    HTH.