Security

last person joined: 14 hours ago 

Forum to discuss Enterprise security using HPE Aruba Networking NAC solutions (ClearPass), Introspect, VIA, 360 Security Exchange, Extensions, and Policy Enforcement Firewall (PEF).
Back to discussions
Expand all | Collapse all

How can I do math actions in a value in an enforcement policy?

This thread has been viewed 0 times

  • 1.  How can I do math actions in a value in an enforcement policy?

    Posted Jul 23, 2018 05:10 AM

    Is there documentation how can I do math actions in a value in an enforcement profile? 

    I need to set Radius session time out which is a result of a formula: 

    %{Endpoint:MAC-Auth Expiry}-%{Authorization:[Time Source]:Now}

     

    This formula does not work. Perhaps becasue I need to convert to number, or maybe the minus sign sgould not be like that. 

     

    The bigger picture is that I need to allow a device to remain connected until it is profiled, bit disconnect it after a given time (10 mins), becuase this is a scheduled SNMP scan time.

    So I give an expiry time of 10 mins and check the time now vs the expiry time. 

    The problem is that if the is re-auth before the session timout, it reset the session timout period. So I have to apply a new session time out for the remining time. 



  • 2.  RE: How can I do math actions in a value in an enforcement policy?

    EMPLOYEE
    Posted Jul 23, 2018 09:37 AM
    You’d need to do it in a SQL auth source.


  • 3.  RE: How can I do math actions in a value in an enforcement policy?

    Posted Jul 23, 2018 10:38 AM

    problem is I need to calc from 2 different auth sources: time source for the time now, and an expiry time from the endpoint reporistory. 

    I think it is not possible, isn't it?