Security

Reply
Frequent Contributor II

ClearPass Insight report 802.1x device types?

I'm poking around with Insight reporting and have generated a basic report which shows all the authentications of our 802.1x service policy (filtered based on service name).  I've added some columns for device type, device family, etc. so we can get an idea of what types of devices are connecting.

 

Unfortunately when I review the .csv file for this information, it's all blank.  Is this information only available when we begin profiling endpoint posture? Reports generated for our guest wireless seem to capture all this information, but that is readily available on our Aruba controllers.

rwin = 0
Frequent Contributor II

Re: ClearPass Insight report 802.1x device types?

Looks like I may need to enable the Audit portion of my service and configure the NMAP audit server in order for this to work?

rwin = 0
Guru Elite

Re: ClearPass Insight report 802.1x device types?

Are you forwarding a copy of your client's dhcp traffic to ClearPass?  http://www.arubanetworks.com/techdocs/ClearPass/6.6/PolicyManager/index.htm#CPPM_UserGuide/PolicyProfile/Collectors.htm%3FTocPath%3DClearPass%2520Profiler%7C_____3

******************
Answers and views expressed by me on this forum are my own and not necessarily the position of Aruba Networks or Hewlett Packard Enterprise.
******************
Frequent Contributor II

Re: ClearPass Insight report 802.1x device types?

Not currently, no.  It looks like all I need to add is an ip helper-address pointing to my ClearPass server.

 

With that option, is there any need to add the Audit part of the service (let's say an NMAP scan) if all I want to know is device operating system/type?

rwin = 0
Guru Elite

Re: ClearPass Insight report 802.1x device types?

No. Don't use the audit function.

Tim Cappalli | Aruba Security
@timcappalli | timcappalli.me | ACMX #367 / ACCX #480
Frequent Contributor II

Re: ClearPass Insight report 802.1x device types?

Ok, last newb question about this - we have regional subscriber servers.  When I'm setting up the DHCP options, do all of them have to point to the Publisher, or will sending to a regional subscriber be good enough?

rwin = 0
Frequent Contributor II

Re: ClearPass Insight report 802.1x device types?

I was able to pull a report after pointing the DHCP helper address to the regional subscriber server.  You don't need to point it to the publisher specifically for reports to utilize the information gathered.

 

Thank you for helping me better understand this feature!

rwin = 0
Search Airheads
cancel
Showing results for 
Search instead for 
Did you mean: