Security

last person joined: yesterday 

Forum to discuss Enterprise security using HPE Aruba Networking NAC solutions (ClearPass), Introspect, VIA, 360 Security Exchange, Extensions, and Policy Enforcement Firewall (PEF).
Back to discussions
Expand all | Collapse all

Onguard status information from Clearpass

This thread has been viewed 0 times

  • 1.  Onguard status information from Clearpass

    Posted Apr 13, 2018 08:51 AM

    Hi,

     

    We are trying to detect when OnGuard Agent starts a connection to Clearpass server and especially when the connection is closed (when Onguard process is being stopped by user or malicious software). Are there any logs or debug level on CP server to get such information? How to take information on agent status for given Endpoint from Clerpass? How to check status of agent on Endpoint in real time?Not getting such information causes security flaw in our organization - onguard agent/service may be killed and client still has connections to network opened till next agent reauthentication.



  • 2.  RE: Onguard status information from Clearpass

    EMPLOYEE
    Posted Apr 13, 2018 08:58 AM
    You can use the Agent Disconnect function to disconnect the user from the network.