Security

last person joined: yesterday 

Forum to discuss Enterprise security using HPE Aruba Networking NAC solutions (ClearPass), Introspect, VIA, 360 Security Exchange, Extensions, and Policy Enforcement Firewall (PEF).
Back to discussions
Expand all | Collapse all

Clearpass: Using custom attributes in profiles

This thread has been viewed 12 times

  • 1.  Clearpass: Using custom attributes in profiles

    Posted Aug 18, 2016 09:24 AM

    Hi all,

     

    i'm trying to use custom attributes, i have created for the entity "EndPoint" via "Administration>Dictionaries>Attributes". I want to use those attributes in profiles with CLI enforcments... a example would be, configuring a description via CLI enforcment for a switch port by extracting the defined custom attribut.

     

    My question is, how to use an attribute named "My Description" in the profiels? i have tried %{Endpoint:My Description} with no success. No alert in Access Tracker and Application Response only shows "CLI:TargetDevice" but no commands.

     

    Any ideas or hints?

     

    Best Regrads

     



  • 2.  RE: Clearpass: Using custom attributes in profiles

    EMPLOYEE
    Posted Aug 18, 2016 09:32 AM
    That is the correct syntax. Do you have the Endpoints Repository as an
    authorization source?


  • 3.  RE: Clearpass: Using custom attributes in profiles
    Best Answer

    Posted Aug 18, 2016 09:55 AM

    Thank you @cappalli. Yes it was included - i think i have found my problem:

     

    I configured the attribute with a default value in the attribute settings. If i updating the endpoints custom attributes, setting them to something other than default or just simply saving it, it seems to work?



  • 4.  RE: Clearpass: Using custom attributes in profiles

    Posted Aug 18, 2016 11:05 AM

    I didn't even know this was possible. So cool!

     

    Thanks for sharing.

     

    Cheers