Security

Reply
Guru Elite

Re: ClearPass 6.7 Releases

Enterprise can be converted to any 6.7 license.

Tim Cappalli | Aruba Security
@timcappalli | timcappalli.me | ACMX #367 / ACCX #480
Moderator

Re: ClearPass 6.7 Releases

Hello All,

 

We are pleased to announce the immediate availability of ClearPass 6.7.2. 

 

The update images have been posted to the support site (Aruba Support site) and the software updates portal.

 

In addition to bug fixes, this release also includes several new features that our Engineering and QA team have worked tirelessly to include:

 

Guest

  • Connection settings for SMS Global are updated.

 

OnGuard

  • Support and Enhancements for Numerous updated and new 3rd party OnGuard plugins, please review the Release Notes for details.
  • Users can now configure a maximum timeout value for OnGuard remediation scripts to run.
  • A new attribute in OnGuard Global Agent Settings lets you specify a VPN adapter (device) name and categorize the network interface as a VPN on macOS.
  • ClearPass now supports standalone installations of VIA 3.x and of the OnGuard Agent.

 

Policy Manager

  • The policy server will now time out if the AD/LDAP source fails to send a response to an authorization query after ten seconds.
  • ClearPass 6.7.2 includes support for a new Post-Auth v2 function to improve performance and scaling for post-authentication events when inter-operating with third-party systems.
  • A new cluster-wide parameter, Content Security Policy (CSP) , is added.  When this parameter is enabled, it helps reduce cross-site scripting (XSS) risks in browsers by declaring which dynamic resources can be loaded via an HTTP Header.
  • ClearPass supports new secured cipher suites using Active Directory as an authentication source.

 

QuickConnect

  • Onboard QuickConnect packages for Windows provisioning are now signed by Aruba.  

This patch also addresses the Shibboleth SAML vulnerability described in ARUBA-PSA-2018-003 for CVE-2018-0489.

 

As always, please take note of the ‘Changes of Behaviors’ section of the release notes.

 

The update images have been posted to the support site (Aruba Support site) and the software updates portal.

 

A big thanks and congratulations to the ClearPass Engineering and QA teams for reaching this milestone & to the TechPubs team for their work on the Release Notes and manuals!

 

Best regards,

The ClearPass Team


Best Regards
-d

ClearPass Product Manager

-- Found something helpful, important, or cool? Click the Kudos Star in a post.
-- Problem Solved? Click "Accept as Solution" in a post.
New Contributor

Re: ClearPass 6.7 Releases

Hello All,

 

We are pleased to announce the immediate availability of ClearPass 6.7.3!  In addition to bug fixes, this release also includes several new features that our Engineering and QA team have worked tirelessly to include:

 

  • Updated AirWatch attributes in endpoint database
    • LocationGroupID
    • LocationGroupName
  • OnGuard Dissolvable Agent authentication support
    • Identify username through web login
  • OnGuard automatic signature rollback
  • Configurable TACACS+ authentication timeout for MFA workflows
  • Disable ClearPass Machine account password expiry in AD
  • New admin privilege for use with Aruba Downloadable Role Enforcement
    • Limits permissions to those needed for downloadable roles only

 

As always, please take note of the ‘Changes of Behaviors’ section of the release notes (attached).

 

The update images have been posted to the support site (Aruba Support site) and the software updates portal.

 

A big thanks and congratulations to the ClearPass Engineering and QA teams for reaching this milestone & to the TechPubs team for their work on the Release Notes and manuals!

 

Best regards,

The ClearPass Team

New Contributor

Re: ClearPass 6.7 Releases

Hello All,

 

We are pleased to announce the immediate availability of ClearPass 6.7.4 !  In addition to bug fixes, this release also includes several new features that our Engineering and QA team have worked tirelessly to include:

 

Policy Manager

  • ClearPass7.4 delivers Phase1 of RadSec support. Phase1 includes NAS <-> ClearPass. In a subsequent release, Phase2 will add support for RadSec between ClearPass and other RADIUS Servers.
  • Failure Alerting for an Auth Source, provides system alerting when an auth-server defined in an auth-source is no longer reachable/useable.

 

Security Exchange

  • Expanded Airwatch and MobileIron to expose additional endpoint context.
  • For Airwatch – IMEI Number
  • For MobileIron – Endpoint Compliance

 

OnGuard

  • The release adds support for when OnGuard is running in health-only-mode {user-mode only}, to pass a Username, previously only a mac-address was supported Multiple username formats are supported, please take the time to read the TOI for more information.

 

As always, please take note of the ‘Changes of Behaviors’ section of the release notes (now posted online only) (https://www.arubanetworks.com/techdocs/ClearPass/CP_ReleaseNotes_6.7.4/Default.htm).

 

The update images have been posted to the support site (Aruba Support site) and the software updates portal.

 

A big thanks and congratulations to the ClearPass Engineering and QA teams for reaching this milestone & to the TechPubs team for their work on the Release Notes and manuals!

 

Best regards,

The ClearPass Team

Contributor I

Re: ClearPass 6.7 Releases

After upgracding to 6.7.0 all i see is the option to upgrade into 6.7.4, i noticed that was recently realesed.

 

What is the recomended patch to go to 6.7.x ? or should i stay in 6.7.0 ?

 

I am running 4 - 25K appliances on a major Healthcare enviroment using (wireless auth, Onboard, GuestNet, Tacacs, Radius and so on)

 

Thanks,

 

AP

New Contributor

Re: ClearPass 6.7 Releases

The release notes say Clearpass 6.7 can use a SPAN port for profiling. Can this SPAN port be used with ESXi installs? In the documentation I can only see reference to SPAN ports for Hyper-V.

Super Contributor II

Re: ClearPass 6.7 Releases

I'm running 6.7.3 in production and 6.7.4 on a dev cluster that services our building. Did have a funny when upgrading from 6.7.3 to 6.7.4 the master publisher at one level thought the secondary node was down but everything else kept working. Had to unbind the secondary and rebind it but that could have been me.

 

There are quite a few fixes in the .234 releases which fixed issues for us.

New Contributor

Re: ClearPass 6.7 Releases

Hello All,

 

We are pleased to announce the immediate availability of ClearPass 6.7.5!  In addition to bug fixes, this release also includes several new features that our Engineering and QA team have worked tirelessly to include:

 

  • Certificate based OnGuard user authentication
    • User identity certificates may be used to authenticate users. Internal or smart card (PIV or CAC) certificates can be selected.
  • VMware vShpere Hypervisor (ESXi) 6.5 U2 and ESXi 6.7 have now been validated with ClearPass 6.7.0 and higher.

 

 

As always, please take note of the ‘Changes of Behaviors’ section of the release notes.

 

The update images have been posted to the support site (Aruba Support site) and the software updates portal.

 

A big thanks and congratulations to the ClearPass Engineering and QA teams for reaching this milestone & to the TechPubs team for their work on the Release Notes and manuals!

 

Best regards,

The ClearPass Team

Search Airheads
cancel
Showing results for 
Search instead for 
Did you mean: