Security

Reply
Aruba
Posts: 1,537
Registered: ‎06-12-2012

Re: Release announcements: ClearPass Cumulative Patch

Hello all,

The ClearPass 6.5 Cumulative Patch 4 is now available. The release notes are attached to this email.

This release includes two new Guest Transaction Processors, Wirecard and PayPall Express, as well as incorporates the OnGuard enhancements we made through the ClearPass 6.5.3 OnGuard for OS X 10.11 & Windows 10 64-bit Hotfix.

This cumulative patch also addresses the issue we saw with hardware appliance deployments that used the Cluster Upgrade Tool v2 to get to 6.5.0 and then encountered NIC issues when updating to 6.5.3. We will be re-posting the Cluster Upgrade Tool v2 in the next 24 hours or so.

The patch file is available for download in the ClearPass Software Update Portal and also from the support.arubanetworks.com at the following location.

Download Software > ClearPass > Policy Manager > Current Release > 6.5.0 > Patches

Thank You,
Troy

--Give Kudos: found something helpful, important, or cool? Click Kudos Star in a post.

--Problem Solved? Click "Accepted Solution" in a post.
Aruba
Posts: 429
Registered: ‎05-30-2012

Re: Release announcements: ClearPass Cumulative Patch

Hello all,
 
The ClearPass 6.5 Cumulative Patch 5 is now available.

In addition to several bug fixes, this release also includes several new enhancements:

* Updates to the HP RADIUS dictionary to support new features in upcoming ArubaOS-Switch (formerly ProVision) 16.01 release.
* New entries in the Guest "Vendor Settings" drop-down lists to simplify captive-portal configurations for ArubaOS-Switch, MSM and UWW platforms.
* Adds detection support for several new and updated products to OnGuard (see release notes for more details).

The patch file is available for download in the ClearPass Software Update Portal and also from the support.arubanetworks.com at the following location.
 
Download Software > ClearPass > Policy Manager > Current Release > 6.5.0 > Patches

Best regards,
 
The ClearPass Team

Aruba
Posts: 429
Registered: ‎05-30-2012

Re: Release announcements: ClearPass Cumulative Patch

[ Edited ]

Hello all,
 
I am proud to announce the immediate availability of ClearPass 6.6! The ClearPass team has put a lot of hard work into many new features:

  • Revamped Insight Reporting
  • Ingress Event Engine
    • Be sure to check out Danny Jump's technote on this.
  • Juniper Networks SRX Integration
    • Danny's been busy here too and has a technote.
  • Network Discovery & Custom Fingerprints
  • Multi-Factor Authentication through Captive Portal
  • OnGuard as a System Service on Windows
  • And many MORE!

There are several changes in default behavior from previous releases so please take note of the Important Changes section of the release notes.

The installer and upgrade images have been posted to the support site. The upgrade is also available via the Software Updates portal on the appliances themselves.

A big thanks and congratulations to the ClearPass Engineering and QA teams for reaching this milestone!

Best regards,
 
The ClearPass Team

 

### Edited after for posting to update Ingress Event Engine technote link.

Chief Airhead
Posts: 1,063
Registered: ‎07-13-2010

ClearPass Release Announcements

Thread name changed to: ClearPass Release Announcements 

Sean Rynearson | Chief Airhead
Aruba, a Hewlett Packard Enterprise Company
Aruba
Posts: 429
Registered: ‎05-30-2012

Re: ClearPass Release Announcements

[ Edited ]

On April 12th, 2016, a crucial security bug in Windows and Samba was disclosed. The MS-SAMR and MS-LSAD protocol implementations in Samba 3.x and 4.x before 4.2.11, 4.3.x before 4.3.8, and 4.4.x before 4.4.2 mishandle DCERPC connections, which allows man-in-the-middle attackers to perform protocol-downgrade attacks and impersonate users by modifying the client-server data stream, aka BADLOCK.

This vulnerability in Samba could allow an attacker with the ability to intercept traffic (man in the middle) between a ClearPass Policy Manager server and a Windows Active Directory server to get read/write access to the Security Account Manager database, which reveals all passwords and other potential sensitive information.

Additional details can be found in ARUBA-PSA-2016-003.

A Hotfix patch for ClearPass 6.4.7, 6.5.5 and 6.6.0 is available for download in the ClearPass Software Update Portal and also from the support.arubanetworks.com at the following location.

 

6.4.7
Download Software > ClearPass > Policy Manager > Archives > 6.4.0 > Patches


6.5.5
Download Software > ClearPass > Policy Manager > Archives > 6.5.0 > Patches

 

6.6.0
Download Software > ClearPass > Policy Manager > Current Release > Patches

Thank You,

The ClearPass Team

 

# Edited one of the links after posting.

Aruba
Posts: 429
Registered: ‎05-30-2012

Re: ClearPass Release Announcements

Hello all, 

I am proud to announce the immediate availability of ClearPass 6.6.1! Despite being a maintenance release, there are several new features that our Engineering and QA team worked tirelessly to include in this release:

  • OnConnect Enforcement
    • Sneak Peak: This feature enables ClearPass to detect and apply enforcement to endpoints connected to wired switches without the need to enable AAA methods such as 802.1x or MAC Authentication. Shocking… I know.
  • Enhancements to Guest account expiration handling
  • New Insight Reports including a long awaited Social Login Report
  • Password lockout options for Admin and Local User databases as well as the AppAdmin SSH account
  • SSO can now be independently enabled between guest web logins and guest operator logins
  • Enhanced support for Airwatch and SOTI MDM/EMM vendors
  • Improvements to Network Discovery for greater endpoint visibility
  • Blacklisting based upon bandwidth consumed and session duration is now available.
  • Several new APIs and enhancements to existing APIs
  • And much, much MORE!

While not a new feature in 6.6.1 per say, this is the first release you can now try out the Cluster Update interface which was introduced in 6.6.0. This capability helps automate the installation of patches such as this one and we think it will go a long way to make updates and upgrades a smoother experience. If you typically use the Software Updates portal to upgrade your cluster, make sure to install the ClearPass 6.6.0 Cluster Update Interface Patch first before downloading the 6.6.1 patch and starting the Cluster Update Interface.

As always, please take note of the Important Changes section of the release notes in addition to an improved End of Support section based upon customer feedback.

The update images have been posted to the support site and the software updates portal.

A big thanks and congratulations to the ClearPass Engineering and QA teams for reaching this milestone!

Best regards,
 
The ClearPass Team

Aruba
Posts: 429
Registered: ‎05-30-2012

Re: ClearPass Release Announcements

Hello all,
I am proud to announce the immediate availability of ClearPass 6.6.2! There are several new features that our Engineering and QA team have worked tirelessly to include in this release:

 

  • OnConnect Configuration & Scaling Enhancements
    • Cluster support is now available!
  • OnGuard External Script Remediation
    • Ability for OnGuard to use an External script hosted locally on the client or on a server for auto-remediation tasks.
  • OnGuard AND/OR match conditions in the Services health class in Windows
  • Endpoint Profiling using Nmap
  • Onboard Registration Authority/SCEP-Proxy Support
  • New Social and Property Management System Enhancements
  • Platform Enhancements and Security Improvements
  • Several new APIs and enhancements to existing APIs
  • And much, much MORE!

As always, please take note of the Important Changes section of the release notes (attached).


The update images have been posted to the support site and the software updates portal.


A big thanks and congratulations to the ClearPass Engineering and QA teams for reaching this milestone!


Best regards,
The ClearPass Team

Aruba
Posts: 1,537
Registered: ‎06-12-2012

Re: ClearPass Release Announcements

Hello all,
I am proud to announce the immediate availability of ClearPass 6.6.3! There are several new features that our Engineering and QA team have worked tirelessly to include in this release:

· Profiling Enhancements
o Support for Netflow v5, v9 and IPFIX
o Ability to fetch service and process information using WMI
· Enhanced Support for third parties
o MS-CHAP support for Xirrus WLAN controllers
o Ability to fetch more public attributes from Facebook and LinkedIn social logins
· Improved MFA workflows
o Built-in support for Kasada
· Insight Enhancements
· OnGuard Enhancements
o Added support for several new products and enhanced existing ones
o New attribute for service rules
· Common Criteria Certification Features
o It may have taken us a little bit to get to this point but we’re now ready to knock out that certification!
· IPSec Enhancements
o Traffic selectors
· Security Improvements
o Ability to disable TLS 1.1
o Better visibility when there are attempts to login using unsupported protocols and/or algorithms
· Several new APIs
· And much, much MORE!

Thank You,
Troy

--Give Kudos: found something helpful, important, or cool? Click Kudos Star in a post.

--Problem Solved? Click "Accepted Solution" in a post.
Guru Elite
Posts: 8,178
Registered: ‎09-08-2010

Re: ClearPass Release Announcements

All,

We're happy to announce the immediate availability of ClearPass 6.6.4! There are several new features that our Engineering and QA team have worked tirelessly to include in this release:

 

  • Profiling Enhancements
    • Custom fingerprints will NOW always be evaluated before the downloaded fingerprints.
  • Enhanced Support for third parties
    • ClearPass now sends the user’s ClearPass role information to Palo Alto Networks firewalls during login. The role is unregistered from the firewall when the user logs out.
  • OnGuard Enhancements
    • The Windows Hotfixes Health class now supports checking of hotfix groups.
    • The Patch Management Health class now allows for AND/OR conditions between patch management products.
    • Added support for Windows Server 2012 and 2012 R2
    • Added support for French localization of the OnGuard Agent
  • OnConnect Enhancements
    • ClearPass now supports MAC Notification Traps from ArubaOS-Switches.
  • Hypervisor Support Enhancements
    • Validated support for VMware vSphere Hypervisor 6.5 (previously known as ESXi)
    • Validated support for Microsoft Hyper-V 2016 and Windows Server 2016 with Hyper-V

 

As always, please be sure to look over the release notes!

 

>> 6.6.4 Release Notes

 

Enjoy!


Tim Cappalli | Aruba ClearPass TME
@timcappalli | ACMX #367 / ACCX #480 / ACEAP / CWSP
Search Airheads
Showing results for 
Search instead for 
Did you mean: