Security

Reply
Aruba

Release announcement : ClearPass 6.3.0 is now available!!!! PLEASE READ THE RELEASE NOTES !!!!!




!!!!!!!!! PLEASE READ THE RELEASE NOTES !!!!!!!!!!!!

I ask that everyone make sure you make backups of your data and certs before you proceed......



Hello all

ClearPass 6.3.0 is now available. Please review the attached release notes, Chapter -3 - ‘Whats New in This Release’ section for information on new features and enhancements in this release.

Upgrade instructions:

Please review Chapter 2 of the release notes for upgrade support for your current ClearPass versions.
Upgrade images are available within ClearPass Policy Manager from the Software Updates Portal at,
> Administration >Agents and Software Updates > Software updates.
For ClearPass appliances which do not have access to the Internet, the upgrade image is available on the Aruba Networks support site at,
> Downloads > ClearPass > Policy Manager > Current Release > Upgrade
Evaluation and production VM images are in the process of being uploaded to the support site and the ClearPass web service. We are working with IT to post them. They should be available within the next 24 hours here:
> Downloads > ClearPass > Policy Manager > Current Release

VM Upgrades to 6.3.0:

If you are installing a fresh ClearPass 6.3 VM, then please review the hard disk requirements in the VM install document (attached) as they have changed in this release.
If you are upgrading to 6.3 from prior releases, then you have to attach a larger disk. Please review the disk requirements in the VM install document for different VM models.
After upgrading to ClearPass 6.3, an additional hard disk is no longer required to upgrade to future versions. During the upgrade process, a second partition equal to the size of the original is automatically created on the attached larger disk. The second partition will be used for all future upgrades.
Thank You,
Troy

--Give Kudos: found something helpful, important, or cool? Click Kudos Star in a post.

--Problem Solved? Click "Accepted Solution" in a post.

Re: Release announcement : ClearPass 6.3.0 is now available!!!! PLEASE READ THE RELEASE NOTES !!!!!

I Love new versions :)

GOOD TIP!
*****************2Plus Wireless Solutions****************************
Aruba Airheads - Powered By community for empower the community
************ Don't Forget to Kudos + me,If i helped you******************

Re: Release announcement : ClearPass 6.3.0 is now available!!!! PLEASE READ THE RELEASE NOTES !!!!!

The Event Viewer now includes events related to the RAID controller state. Note that this feature is
only available for CP-HW-5K and CP-HW-25K SKUs. (#14706)

 

Awesome!  Been needing something like this since DRAC isn't available on the physical appliances.  I assume all RAID related events such as bad disks and degraded RAID will be recorded in event viewer?  Will be upgrading and setting up email alerts soon if that's the case!

 

Usernames are now case-insensitive. (#15809)

 

Where does this apply?  All RADIUS authentications?

 

An advanced option in the domain joining interface can provide explicit domain controller information
to Samba, assisting the user to control what domain controllers CPPM will use for authentications.
(#14738)

 

Another good one!

 

Added the ability to send a warning email before a user’s Onboard device credentials expire. This is
configured at Onboard > Provisioning Settings > General tab > Actions > Notify users before
their credentials expire. (#12625)

 

This is a step in the right direction.  Is the user able to do anything from the email they receive? Does it provide a link to re-onboard them or renew their certificate, or is it just informational?

 

 

Overall, this is a great upgrade!  I'm a little disappointed to see that some of the (good) features I've suggested haven't made it in yet:

 

In Access Tracker - Note which enforcement rule resulted in accept/reject

 

Multiple IPs for Network Devices

=======================================
If a reply adequately addresses your issue, please click on the "Accept as Solution" and "Give Kudos" button so this information can benefit other users.
Guru Elite

Re: Release announcement : ClearPass 6.3.0 is now available!!!! PLEASE READ THE RELEASE NOTES !!!!!

thecompnerd,

 

For your first feature request, is this what you are looking for?

 

access-tracker-enf-profile.PNG

 


Tim Cappalli | Aruba Security TME
@timcappalli | timcappalli.me | ACMX #367 / ACCX #480

Re: Release announcement : ClearPass 6.3.0 is now available!!!! PLEASE READ THE RELEASE NOTES !!!!!

cappalli,

 

I'd like to see the Enforcement Policy conditions that were matched.  This would just speed up troubleshooting when an authentication doesn't get the expected enforcement profile and you need to determine which conditions were matched.

=======================================
If a reply adequately addresses your issue, please click on the "Accept as Solution" and "Give Kudos" button so this information can benefit other users.
Moderator

Re: Release announcement : ClearPass 6.3.0 is now available!!!! PLEASE READ THE RELEASE NOTES !!!!!

iDRAC enterprise is currently available on the CP-HW-25K that we started shipping last April (DELL R620). Previous to that it was the Express version the same version we ship on the 5K-HW (DELL R210)....you can expect the next version of the 5K h/w to include enterprise iDRAC as well.

 

There is a lenghty IDRAC + CPPM TechNote I did about Sept last year....get your friendly CPPm specialist/SE to share a copy with you.

 

 

Username - Guest usernames are now handles as case insensitive...

 
During migration, guest usernames that are identical except for case differences will be renamed.
 
–To find these strings after migrating to 6.3, search for the string “-disabled-”
–E.g. In CPPM 6.2 we could have user & User

 

After upgrade / restore ‘user’ will work, ‘User’ is renamed ‘User-disabled

 

 


Best Regards
-d

ClearPass Product Manager

-- Found something helpful, important, or cool? Click the Kudos Star in a post.
-- Problem Solved? Click "Accept as Solution" in a post.
MVP

Re: Release announcement : ClearPass 6.3.0 is now available!!!! PLEASE READ THE RELEASE NOTES !!!!!

Double the disk space required?!

This still is the space of 1 disc? Or did you just double it to indicate the 2nd disk required for upgrading?

 

What the heck are you doing with all that disk space?

Is there an easy way to see how much is realy in use?

Koen (ACMX #351 | ACDX #547 | ACCP)

-- Found something helpful, important, or cool? Click the Kudos Star in a post.
-- Problem Solved? Click "Accept as Solution" in a post.
Aruba

Re: Release announcement : ClearPass 6.3.0 is now available!!!! PLEASE READ THE RELEASE NOTES !!!!!

In the initial vm for example

VM500

1 250 for running
1 250 for upgrade

Now you will only need 1 500

This is one of the foundations for Hyper -v support.
Thank You,
Troy

--Give Kudos: found something helpful, important, or cool? Click Kudos Star in a post.

--Problem Solved? Click "Accepted Solution" in a post.
Guru Elite

Re: Release announcement : ClearPass 6.3.0 is now available!!!! PLEASE READ THE RELEASE NOTES !!!!!

Anyone else seeing this EncryptFS error on a fresh install of 6.3?

I'm not a linux or vmware guy. Am I missing something?

 

vmware ESX 5.1

 

UPDATE 1: Enabled Intel AES-NI in the BIOS, but still getting the errors below it.

UPDATE 2: Creating the second disk manually seems to bypass this error.

 

encryptfs-error.png


Tim Cappalli | Aruba Security TME
@timcappalli | timcappalli.me | ACMX #367 / ACCX #480
Aruba

Re: Release announcement : ClearPass 6.3.0 is now available!!!! PLEASE READ THE RELEASE NOTES !!!!!

These messages are harmless and can be ignored. They do appear in some of the older versions too. We will be suppressing them in a subsequent release.

Thank You,
Troy

--Give Kudos: found something helpful, important, or cool? Click Kudos Star in a post.

--Problem Solved? Click "Accepted Solution" in a post.
Search Airheads
cancel
Showing results for 
Search instead for 
Did you mean: