Security

Reply
Moderator

NEW TechNote : ClearPass and Carbon Black Response Integration

Teams,

 

Please find information and details related to a new ClearPass Integration with Carbon Black Response [Cb Response]. Cb Response is a new breed of Next-Gen endpoint protection companies. Previously also known as Bit9.

 

Carbon Black adds a new security vendor to our portfolio. They offer multiple products, we’re specifically interested in two of them Response and Defense. This integration is focused on Cb Response and our intention is to add Cb Defense in the future.

 

The integration with Cb Response is on multiple levels, the basic integration is Cb Response becomes an authZ source to Policy Manager, and then we have a more advanced integration where our Extension can poll the Cb Response management station and retrieve alerts, these alerts can be filtered and as an example, you could extract unresolved issues with an alert of 90+ and then, set a custom attribute in the Endpoint DB that an endpoint is showing sign of running/executing malicious programs/activity and use this at the time of authN to restrict the level of access for this device, OR, you can take an active action and immediately Quarantine the endpoint.

 

 

This TechNote covers the installation, configuration of the Extension and some basic use-case integration in Policy Manager.

 

 

You can find the document on the support site located here https://support.arubanetworks.com/Documentation/tabid/77/DMXModule/512/Command/Core_Download/Default.aspx?EntryId=25719

 

 

 

 

Happy reading – go fill your boots..!!….. comments and feedback/suggestions graciously accepted. 


Best Regards
-d

Snr Tech Marketing Engineer - ClearPass

-- Found something helpful, important, or cool? Click the Kudos Star in a post.
-- Problem Solved? Click "Accept as Solution" in a post.
New Contributor

Re: NEW TechNote : ClearPass and Carbon Black Response Integration

Great TechNote Danny!

Moderator

Re: NEW TechNote : ClearPass and Carbon Black Response Integration

Team ClearPass,

 

I had to repost the doc due to a small error...this is the new link.

 

https://support.arubanetworks.com/Documentation/tabid/77/DMXModule/512/Command/Core_Download/Default.aspx?EntryId=25727

 

 


Best Regards
-d

Snr Tech Marketing Engineer - ClearPass

-- Found something helpful, important, or cool? Click the Kudos Star in a post.
-- Problem Solved? Click "Accept as Solution" in a post.
Search Airheads
cancel
Showing results for 
Search instead for 
Did you mean: