Security

Just a quick question. Is it possible to use Microsoft NPS as the main method of radius authentication instead of using ClearPass Radius?

Yes, but ClearPass is much more powerful than NPS and provides a ton of additional policy controls. 

NPS does not scale well and only offers basic yes/no access. 

Sent from Nine

Thanks for the quick reply @cappalli. Is there a way to load balance the radius with CPPM? I work at a school, so our CPPM server gets hammered with authentications at the beginning of every class. So we would like to ease the load if possible. I know there's a clustering option which we are looking at. But I think that requires additional licensing?

If you already have ClearPass, you don't want to go back to NPS.

 

How many ClearPass servers do you have? You can load balance across multiple ClearPass servers using RADIUS server load balancing on the controller.

We have one VM 5K CPPM server. We do want to cluster and load balance across 2 CPPM servers with the load balancing from the controller. We would need an additional license to do this?

Yes, in order to load balance, you would need another CP-VA-5K.

 

Did you have a scaling and design discussion wtih your ClearPass partner?

 

Thanks for the reply. Yes we are looking at this option of adding another 5k vm.