Security

Reply
Contributor I
Posts: 20
Registered: ‎08-14-2012

CPPM integration with iBoss content filter

Last year I was able to get CPPM to pass the vsys logs to my paloalto firewall for user autherntication to get the correct firewall profiles.  I recently got an iBoss web filter, I'd like to have CPPM pass user info to the content filter as well.  Has anyone got any information on how to get this working?  CPPM is on version 6.5 and the iBoss is on the latest version of 7.

 

Thanks for any info!

Aruba
Posts: 1,542
Registered: ‎06-12-2012

Re: CPPM integration with iBoss content filter

Most filters have an open API, syslog, or proxy accounting. Here are some examples of other third party integration. I took a quick look at Iboss website and couldn't find any data on if they accept data external. You would need to contact iBoss and see what options you have. As of 6.5 you can proxy accounting from CPPM. 

 

http://community.arubanetworks.com/t5/ClearPass-Exchange-Recipes/tkbc-p/clearpass-recipes

 

 

Thank You,
Troy

--Give Kudos: found something helpful, important, or cool? Click Kudos Star in a post.

--Problem Solved? Click "Accepted Solution" in a post.
Moderator
Posts: 479
Registered: ‎11-09-2012

Re: CPPM integration with iBoss content filter

I can add that we are in some discussions to see if we can provide an integrated solution with iBoss.

 

Once I know a little more detail I can post back here.


Best Regards
-d

Snr Tech Marketing Engineer - ClearPass

-- Found something helpful, important, or cool? Click the Kudos Star in a post.
-- Problem Solved? Click "Accept as Solution" in a post.
Contributor II
Posts: 47
Registered: ‎10-11-2013

Re: CPPM integration with iBoss content filter

Reviving an old thread... 

 

I take it the native integration never panned out? Does anyone know if a Windows Network Policy Server is required with iBoss?

 

 

Moderator
Posts: 479
Registered: ‎11-09-2012

Re: CPPM integration with iBoss content filter

I have this working here in the LAB.

 

But you need a fix that is coming in 6.5.2 (mid June) to allow the integration to work as I found a bug during my integration work.

 

Message me at danny@arubanetworks.com and I'll share a DRAFT TechNote on the integration to show you how it works......


Best Regards
-d

Snr Tech Marketing Engineer - ClearPass

-- Found something helpful, important, or cool? Click the Kudos Star in a post.
-- Problem Solved? Click "Accept as Solution" in a post.
Contributor II
Posts: 47
Registered: ‎10-11-2013

Re: CPPM integration with iBoss content filter

That is great news!

 

Are you using MS NPS to proxy the radius messages or can iboss digest them directly?

 

Thanks

Moderator
Posts: 479
Registered: ‎11-09-2012

Re: CPPM integration with iBoss content filter

Its a DIRECT integration using RESTful API's

 

Send me an email and I'll share my DRAFT (its complete) TechNote and you can see if what you want to achieve is plausible with my integration.


Best Regards
-d

Snr Tech Marketing Engineer - ClearPass

-- Found something helpful, important, or cool? Click the Kudos Star in a post.
-- Problem Solved? Click "Accept as Solution" in a post.
Occasional Contributor I
Posts: 5
Registered: ‎12-08-2015

Re: CPPM integration with iBoss content filter

I did the API integration with iboss and I can see the packet post to the appliance using the IP addresss and will log users in but when the logoff is triggered I see the packet arrive at iBoss but when I go to see if that user is still logged in they are.  I cannot get the logout proccess to work.

 

has anyone do this if so what version of iBoss?  

 

Does iBoss have a document on the API?

 

-Thanks

Occasional Contributor II
Posts: 16
Registered: ‎01-28-2009

Re: CPPM integration with iBoss content filter

We are currently attempting to do this as well and noticing the same situation. We are running IBoss verion 7.0.10.35  and Clearpass version 6.5.4.

 

Still working on it and have a case into Iboss.

Moderator
Posts: 479
Registered: ‎11-09-2012

Re: CPPM integration with iBoss content filter

@netbum  &  @TechCanoe99

 

Please update me and this thread as you progress this with iboss. I'm extremely keen to understand the outcome so that my TechNote can be updated appropriately.

 

you can email me direct at danny@arubanetworks.com

 

Many Thanks


Best Regards
-d

Snr Tech Marketing Engineer - ClearPass

-- Found something helpful, important, or cool? Click the Kudos Star in a post.
-- Problem Solved? Click "Accept as Solution" in a post.
Search Airheads
Showing results for 
Search instead for 
Did you mean: