Security

last person joined: 18 hours ago 

Forum to discuss Enterprise security using HPE Aruba Networking NAC solutions (ClearPass), Introspect, VIA, 360 Security Exchange, Extensions, and Policy Enforcement Firewall (PEF).
Back to discussions
Expand all | Collapse all

IIS logs (Internet Information Service) in ClearPass

This thread has been viewed 0 times

  • 1.  IIS logs (Internet Information Service) in ClearPass

    Posted Apr 02, 2018 10:09 AM

    Are there any IIS logs in clearpass? Having an issue Onboarding devices from external context server (JSS/JAMF).

     

    Works fine from internal network but not from the ourside (having jss as a proxy server to request certificate on behalf of client)



  • 2.  RE: IIS logs (Internet Information Service) in ClearPass

    EMPLOYEE
    Posted Apr 02, 2018 10:11 AM
    Sorry, not sure what an ISS log is?

    Are you trying to use ClearPass Onboard or the built-in endpoint sync?


  • 3.  RE: IIS logs (Internet Information Service) in ClearPass

    Posted Apr 02, 2018 10:38 AM

    Sorry meant to say IIS.

     

    Built-in enpoint sync works just fine with JAMF as a context server. Also onboarding from our internal network works just fine:

    -Devcice conects to our Guest Network

    -Registers to JAMF (MDM) and gets profiles deployed

    -JAMF gets a certificate for the device from CPPM

    -Device conects to Production network via certificate

     

    The issue is when the decive is onboarded from an outsite network like a hot-spot, JAMF is having an issue getting a certificate assiged by our ClearPass server for the client.



  • 4.  RE: IIS logs (Internet Information Service) in ClearPass

    EMPLOYEE
    Posted Apr 02, 2018 10:40 AM
    ClearPass does not use IIS.

    Do you have SCEP proxy enabled?
    What do you see in the Application Log?


  • 5.  RE: IIS logs (Internet Information Service) in ClearPass

    Posted Apr 02, 2018 10:55 AM

    Yes, SCEP is enable as proxy (we have an AirWatch server working just fine)

     

    Application log doesnt show much but going to test with one of the devices and get a most recent aplicatiopn log....



  • 6.  RE: IIS logs (Internet Information Service) in ClearPass

    EMPLOYEE
    Posted Apr 02, 2018 11:34 AM
    Best to work with Aruba TAC to debug in realtime.


  • 7.  RE: IIS logs (Internet Information Service) in ClearPass

    Posted Apr 02, 2018 05:00 PM
    International Space Station clearly ;-)


    #AirheadsMobile