Security

Reply
Occasional Contributor II
Posts: 11
Registered: ‎12-01-2014

Subscriber out of sync and OnBoard taking a long time.

I am working with a client who has a Publisher Clearpass node on the west coast of the US, and a subscriber node in Mumbai. The subscriber node never reports that the publisher is down, but it IS usually out of sync by about 2-5 hours. In addition to this, OnBoarding via users in Mumbai often takes upwards of 1-2 hours to actually be pushed device certificates. Is there a set of steps we can work on to best determine what is causing this issue? If it's simply a slow communication between the two devices, what would be the best way to diagnose where the slowdown is actually occuring so we can attempt to remediate?

MVP
Posts: 4,301
Registered: ‎07-20-2011

Re: Subscriber out of sync and OnBoard taking a long time.

What's the round trip delay between the two nodes?


Get Outlook for iOS
Thank you

Victor Fabian
Lead Mobility Engineer @ Integration Partners
AMFX | ACMX | ACDX | ACCX | CWAP | CWDP | CWNA
MVP
Posts: 4,301
Registered: ‎07-20-2011

Re: Subscriber out of sync and OnBoard taking a long time.

What's the round trip delay between the two nodes?


Get Outlook for iOS
Thank you

Victor Fabian
Lead Mobility Engineer @ Integration Partners
AMFX | ACMX | ACDX | ACCX | CWAP | CWDP | CWNA
Occasional Contributor II
Posts: 11
Registered: ‎12-01-2014

Re: Subscriber out of sync and OnBoard taking a long time.

I just asked my consultant who is on site and he said "WAY over the the max time that is needed between a pub and sub"

 

So I'm assuming the only resolution in this case would be to break the Pub/Sub relationship, and have the Sub be it's own CA locally? Or have them upgrade their WAN?

Search Airheads
Showing results for 
Search instead for 
Did you mean: