Security

Hi,

We'd like to delete endpoints that are not updated in the last 14 days from the Policy Manger Endpoint Database. 

Can this be managed by setting the "Known endpoints cleanup interval" and "Unknown endpoints cleanup interval" settings to 14 days?

The documentation does not explain if endpoints are deleted every 14 days or if only endpoints not updated for 14 days are deleted. Is this done daily, weekly or only at every configured amount of days?

(On Clearpass Policy Manager 6.2.2)

Regards,

Erik

This might give u a clue:

http://community.arubanetworks.com/t5/AAA-NAC-Guest-Access-BYOD/ClearPass-Set-Account-Expiration-to-End-of-Day/m-p/116001#M7597

Sorry, no doesn't give a clue.

My question was regarding the Policy Manager Endpoint database. Once a guest has authenticated on the guest captive portal an entry will be created in the Policy Manager Endpoint database. These entries stay there until forever. When we limit a user to only use 2 devices and that users brings in another device, 6 months later, access is denied because of the device limit.

We only allow MAC authentication for guests for 1 day, so after 1 day the endpoint entry could already be removed. 

So my question was; how can I configure Policy Manager to delete entries from the Endpoint database that have not been used for 14 days (or so)?

Regards,

Erik

Can you paste your enforement policy for the Guest with MAC caching service?

Hi,

Yes, this is what we output when authenticate:

And this is the enforcement policy: 

i asked a smiler quesiton,here:

http://community.arubanetworks.com/t5/AAA-NAC-Guest-Access-BYOD/why-guest-account-dosent-delete-even-with-do-exprie-4/m-p/117335#M7758

and here - read good,this is the same thing that you would like to achive:

http://community.arubanetworks.com/t5/AAA-NAC-Guest-Access-BYOD/in-cppm-guest-i-would-like-limit-guest-to-use-1-device-per-e/td-p/113115