Teams,
Please find information and details related to a new ClearPass Integration with Carbon Black Response [Cb Response]. Cb Response is a new breed of Next-Gen endpoint protection companies. Previously also known as Bit9.
Carbon Black adds a new security vendor to our portfolio. They offer multiple products, we’re specifically interested in two of them Response and Defense. This integration is focused on Cb Response and our intention is to add Cb Defense in the future.
The integration with Cb Response is on multiple levels, the basic integration is Cb Response becomes an authZ source to Policy Manager, and then we have a more advanced integration where our Extension can poll the Cb Response management station and retrieve alerts, these alerts can be filtered and as an example, you could extract unresolved issues with an alert of 90+ and then, set a custom attribute in the Endpoint DB that an endpoint is showing sign of running/executing malicious programs/activity and use this at the time of authN to restrict the level of access for this device, OR, you can take an active action and immediately Quarantine the endpoint.
This TechNote covers the installation, configuration of the Extension and some basic use-case integration in Policy Manager.
You can find the document on the support site located here https://support.arubanetworks.com/Documentation/tabid/77/DMXModule/512/Command/Core_Download/Default.aspx?EntryId=25719
Happy reading – go fill your boots..!!….. comments and feedback/suggestions graciously accepted.