Security

Reply
New Contributor

Onguard status information from Clearpass

Hi,

 

We are trying to detect when OnGuard Agent starts a connection to Clearpass server and especially when the connection is closed (when Onguard process is being stopped by user or malicious software). Are there any logs or debug level on CP server to get such information? How to take information on agent status for given Endpoint from Clerpass? How to check status of agent on Endpoint in real time?Not getting such information causes security flaw in our organization - onguard agent/service may be killed and client still has connections to network opened till next agent reauthentication.

Guru Elite

Re: Onguard status information from Clearpass

You can use the Agent Disconnect function to disconnect the user from the network.

Tim Cappalli | Aruba Security
@timcappalli | timcappalli.me | ACMX #367 / ACCX #480
Search Airheads
cancel
Showing results for 
Search instead for 
Did you mean: