Security

last person joined: yesterday 

Forum to discuss Enterprise security using HPE Aruba Networking NAC solutions (ClearPass), Introspect, VIA, 360 Security Exchange, Extensions, and Policy Enforcement Firewall (PEF).
Expand all | Collapse all

Alerts in ClearPass Manager

This thread has been viewed 29 times
  • 1.  Alerts in ClearPass Manager

    Posted Sep 23, 2013 06:01 AM

    Hello,

     

    I have this question : is it possible to get an email or an alert (but outside CPPM) when there are Radius errors in CPPM ? Or do I need to do it thru a Syslog ?

     

    Thanks


    Regards

     

    Dimitri



  • 2.  RE: Alerts in ClearPass Manager

    Posted Sep 23, 2013 08:30 AM

    You can setup "Alert Notification - eMail" in  Administration > Server Manager > Server Configuration > Cluster-Wide.



  • 3.  RE: Alerts in ClearPass Manager

    Posted Sep 23, 2013 08:35 AM

    @maverick_ml wrote:

    You can setup "Alert Notification - eMail" in  Administration > Server Manager > Server Configuration > Cluster-Wide.


    Thank you, can I use more than one email address ?



  • 4.  RE: Alerts in ClearPass Manager

    Posted Sep 23, 2013 08:37 AM

    Yes, you need to separate email addresses by comma.



  • 5.  RE: Alerts in ClearPass Manager

    Posted Sep 23, 2013 08:39 AM

    Perfect, thank you very much.



  • 6.  RE: Alerts in ClearPass Manager

    Posted Sep 23, 2013 08:43 AM

    About this "you can do alert notifications through insight."

     

    In Insight, what is the Threshold and the Interval ?



  • 7.  RE: Alerts in ClearPass Manager

    EMPLOYEE
    Posted Sep 23, 2013 08:45 AM
    The alert notification in the cluster wide parameters is for system alert notifications. If you want to do alerts on failed radius auth you will need to do it through insight.

    For example I have a failed radius threshold of 15 failed authentications in 1 min to send me an email and text message.


  • 8.  RE: Alerts in ClearPass Manager

    Posted Sep 23, 2013 08:50 AM

    Ok thanks you.

     

    In my case, I would like to be noticed when there are Radius Error Authentification, so where is the best to do it ? In alert notification in the cluster wide parameters or in Insight ?



  • 9.  RE: Alerts in ClearPass Manager
    Best Answer

    EMPLOYEE
    Posted Sep 23, 2013 08:56 AM
    Insight. It allows you to send notifications based on certain users, devices, type of auth, thresholds, etc.


  • 10.  RE: Alerts in ClearPass Manager

    Posted Sep 23, 2013 08:58 AM

    Perfect thanks :)



  • 11.  RE: Alerts in ClearPass Manager

    EMPLOYEE
    Posted Sep 23, 2013 09:05 AM

    Here is an screen shot of my tacacs alert. You can do the same on Guests, Radius, etc

     

    insightalert.png



  • 12.  RE: Alerts in ClearPass Manager

    Posted Sep 23, 2013 09:52 AM

    I try to configure the Notification Settings but I have this error : Failed to send message to notifications@wi-free.ch, cause: character mapping must return integer, None or unicode.

     

    Any idea ?

     

    Thanks

     

    Dimitri



  • 13.  RE: Alerts in ClearPass Manager

    EMPLOYEE
    Posted Sep 24, 2013 01:28 AM

    Did you enable the mail relay in Insight. It uses it own SMTP relay in the administration tab.

     

    Are you trying to send to mulitple email address?

     

     

    Also if you are going to send a SMS message the format needs to be in an email format.

     

    Eample: to send myself a test message via verizon it would be 815xxx3422@vtext.com



  • 14.  RE: Alerts in ClearPass Manager

    Posted Dec 20, 2017 09:35 AM

    first hello to every one.

     

    if i set the threshold 50 and interval 5 minute.....what will happed if fail authentication exceed the 50 threshold to 60 then will it send an email or it must be btween 1-50 threshold.

     

    thanks for your repond.



  • 15.  RE: Alerts in ClearPass Manager

    EMPLOYEE
    Posted Sep 23, 2013 08:30 AM
    You can do alert notifications through insight.