Security

last person joined: yesterday 

Forum to discuss Enterprise security using HPE Aruba Networking NAC solutions (ClearPass), Introspect, VIA, 360 Security Exchange, Extensions, and Policy Enforcement Firewall (PEF).
Expand all | Collapse all

CPPM Cleanup Intervals

This thread has been viewed 7 times
  • 1.  CPPM Cleanup Intervals

    Posted Apr 18, 2016 07:48 AM

    Hi,

    I am confused with a number of options in the cleanup Intervals. They seem to overlap.  Currently I am set on default value. Not sure which one of these really matter. 

     

    Parameter NameParameter ValueDefault Value
    Maximum inactive time for an endpointdays
    0
    Cleanup interval for Session log details in the databasedays
    7
    Cleanup interval for information stored on the diskdays
    7
    Known endpoints cleanup intervaldays
    0
    Unknown endpoints cleanup intervaldays
    0
    Expired guest accounts cleanup intervaldays
    365
    Profiled Unknown endpoints cleanup intervaldays
    0
    Static IP endpoints cleanup optionTRUEFALSE
    FALSE
    Old Audit Records cleanup intervaldays
    7
    Profiled Known endpoints cleanup optionTRUEFALSE
    FALSE


  • 2.  RE: CPPM Cleanup Intervals

    EMPLOYEE
    Posted Apr 18, 2016 07:57 AM

    Which one are you concerned with?

     



  • 3.  RE: CPPM Cleanup Intervals

    Posted Apr 18, 2016 11:35 AM

    SO this is the situation. I hope you can understand what I am aiming at:

     

    I use SMS login for guest. I create guest account using my phone number as user and give it to two users. One week later I use the same phone number and give it to three users. One week later if I try the same phone number for guest account access it does not work because I have reached the limit of 5 (default) logins with this account. 

    I want to be able to override it. I believe CPPM is not cleaning up database as it is on default settings so after five logins it does not allow access. 

    What is the best way to remediate this situation?



  • 4.  RE: CPPM Cleanup Intervals

    EMPLOYEE
    Posted Apr 18, 2016 11:39 AM

    Set the "Expired guest accounts cleanup interval" to 1



  • 5.  RE: CPPM Cleanup Intervals

    Posted Sep 14, 2017 11:14 AM

    How is the Cleanup takes presedence? Does it needs to match one or more conditions? for example for a Known endpoint that was registered 7 days ago:

                         Known endpoints cleanup interval = 7

                                  and

                         Profiled Known endpoints cleanup option = FALSE

     

    Will this delete the endpoint from the Endpoint Repository?