Security

Reply
Contributor I

IIS logs (Internet Information Service) in ClearPass

Are there any IIS logs in clearpass? Having an issue Onboarding devices from external context server (JSS/JAMF).

 

Works fine from internal network but not from the ourside (having jss as a proxy server to request certificate on behalf of client)

Guru Elite

Re: ISS logs (Internet Infor Service) in ClearPass

Sorry, not sure what an ISS log is?

Are you trying to use ClearPass Onboard or the built-in endpoint sync?

Tim Cappalli | Aruba Security
@timcappalli | timcappalli.me | ACMX #367 / ACCX #480
Contributor I

Re: IIS logs (Internet Information Service) in ClearPass

Sorry meant to say IIS.

 

Built-in enpoint sync works just fine with JAMF as a context server. Also onboarding from our internal network works just fine:

-Devcice conects to our Guest Network

-Registers to JAMF (MDM) and gets profiles deployed

-JAMF gets a certificate for the device from CPPM

-Device conects to Production network via certificate

 

The issue is when the decive is onboarded from an outsite network like a hot-spot, JAMF is having an issue getting a certificate assiged by our ClearPass server for the client.

Guru Elite

Re: IIS logs (Internet Information Service) in ClearPass

ClearPass does not use IIS.

Do you have SCEP proxy enabled?
What do you see in the Application Log?

Tim Cappalli | Aruba Security
@timcappalli | timcappalli.me | ACMX #367 / ACCX #480
Contributor I

Re: IIS logs (Internet Information Service) in ClearPass

Yes, SCEP is enable as proxy (we have an AirWatch server working just fine)

 

Application log doesnt show much but going to test with one of the devices and get a most recent aplicatiopn log....

Guru Elite

Re: IIS logs (Internet Information Service) in ClearPass

Best to work with Aruba TAC to debug in realtime.

Tim Cappalli | Aruba Security
@timcappalli | timcappalli.me | ACMX #367 / ACCX #480
Frequent Contributor I

Re: IIS logs (Internet Information Service) in ClearPass

International Space Station clearly ;-)


#AirheadsMobile
Search Airheads
cancel
Showing results for 
Search instead for 
Did you mean: