Security

Reply
New Contributor

Tracking admin changes to ClearPass

I need to do some change auditing on our CPPM implementation and want to log when administrators make configuration changes in CPPM and in CPG.  Is it possible?  Running 6.6.5.93747.  

Guru Elite

Re: Tracking admin changes to ClearPass

You should see these changes in the audit log.

Tim Cappalli | Aruba Security TME
@timcappalli | timcappalli.me | ACMX #367 / ACCX #480
New Contributor

Re: Tracking admin changes to ClearPass

Thanks much for the reply cappalli.  Unfortunately not to the extent that I am looking for.  The genesis of looking into this is that we had someone give users more controlls in the user portal than they should have had, at an unknown point in time. 

 

Since then, there have been multiple config changes in Guest Manager, yet not all of those config change instances are showing up in the Audit log (CPPM > Monitoring > Audit Viewer) and what is there just says that a change was made to Guest Manager, not what changed.  We are really looking to get a lot more granualrity.  The Manual for 6.6 CPPM is frustratingly light on logging configuration.  

Moderator

Re: Tracking admin changes to ClearPass

In a future release we will be adding the ability to send the contents of the CPG Application log to an external syslog server, hopefully that will help.


Best Regards
-d

ClearPass Product Manager

-- Found something helpful, important, or cool? Click the Kudos Star in a post.
-- Problem Solved? Click "Accept as Solution" in a post.
New Contributor

Re: Tracking admin changes to ClearPass

Thanks much dannyjump.  Not ideal, but we will eagerly await the new functionality, which I would hope is forthcoming fairly soon.  Change auditing is becoming more critical for us, so getting granularity in the logs will be a welcomed feature.  

 

-Skeeter

Moderator

Re: Tracking admin changes to ClearPass

It won't be in this quarter. 


Best Regards
-d

ClearPass Product Manager

-- Found something helpful, important, or cool? Click the Kudos Star in a post.
-- Problem Solved? Click "Accept as Solution" in a post.
Search Airheads
cancel
Showing results for 
Search instead for 
Did you mean: