Security

I am new to the Aruba world. I have been playing around with creating roles in ClearPass and downloading them to the controller. Things are working good but talking to rep who installed the system he would rather just create the roles and firewall rules on the controller themselves.

 

Is there any pros/cons of creating everything in ClearPass and pushing everything down to the controller?

 

Thanks

Generally speaking, authentication end-to-end is faster if the roles are
already created on the controller. I only use downloadable roles for special
cases where the role might not exist on the network gear because it's not a
common scenario.