Security

Is there any disadvantage or negative effect if I will lessen the Cache Timeout to 180sec (3mins)?

 

ClearPass does not sync with AD in real-time every time I change something on AD.

 

Thank you for the help.

ClearPass does not sync any data. It simply caches authorization data from previous authentications. I would not recommend going below 5 minutes in a busy environment.

Hi. Thank you for the information. How then I could update the ClearPass in real-time every time there is changes on the AD? Thank you.

Are that many changes really occuring in AD? That's not very common.

They have a AD policy that every month users should change password.

Passwords have nothing to do with authorization cache. Passwords are directly validated every time.

When user change password, it will disconnect from wlan. It will only connect after hours.

You should work with Aruba TAC and/or your partner. There could be many reasons.

If Authorization happens not in a real time, if any changes i made in AD, it may create a security threat for ex: i move the user from one to another group how it can works effectively