Security

last person joined: yesterday 

Forum to discuss Enterprise security using HPE Aruba Networking NAC solutions (ClearPass), Introspect, VIA, 360 Security Exchange, Extensions, and Policy Enforcement Firewall (PEF).
Back to discussions
Expand all | Collapse all

Coa with clearpass

This thread has been viewed 16 times

  • 1.  Coa with clearpass

    Posted Mar 07, 2016 12:33 PM
    Hello
    We are trying to use coa between a fortigate unit and a clearpass for wifi. Do i need to do something else to enable coa beaides the coa checkbox on the clearpas? We already cobfigured it on the fortigate but we dont see any coa traffic
    We usibg rfc 3576
    The fortigate unit is the nas

    Cheers
    Carloa


  • 2.  RE: Coa with clearpass

    Posted Mar 07, 2016 12:54 PM
    Do you know what interface the fortigate uses to do the Change of authorization ?



    Sent from Outlook for iPhone


  • 3.  RE: Coa with clearpass

    Posted Mar 07, 2016 01:07 PM
    Well in the fortigate interface we enable liaten radius accounting message. To the one that has access to the clearpass


  • 4.  RE: Coa with clearpass

    Posted Mar 07, 2016 03:25 PM

    Pretty sure CoA is NOT supported on Fortinet....



  • 5.  RE: Coa with clearpass

    Posted Mar 07, 2016 05:44 PM
    It support it from version 5.2

    Cheers
    Carlos


  • 6.  RE: Coa with clearpass

    Posted Mar 07, 2016 06:56 PM

    Not available on 5.2

    2016-03-07 18_52_46-Settings.png



  • 7.  RE: Coa with clearpass

    Posted Mar 07, 2016 07:11 PM

    It looks like it is supported on 5.4 (RFC 5176)
    http://help.fortinet.com/fos50hlp/54/Content/FortiOS/fortigate-whats-new-54/FeatureCatalog-RFC%20list.htm



  • 8.  RE: Coa with clearpass

    Posted Mar 07, 2016 07:16 PM
    Yes my bad i said the wrong firnware. Clin is right from the version 5.4

    Cheers
    Carlos


  • 9.  RE: Coa with clearpass

    Posted Mar 07, 2016 07:56 PM

    OK - very recently added.... let me reach out to my peers in Fortinet and see if their is a specific CoA VSA we need to use.... unless someone reading this knows...???