Security

Reply
Contributor I
Posts: 103
Registered: ‎12-26-2014

in publisher subscriber in Clearpass is publisher only working or both?

as we are implementing clearpass now for wired with Cisco Switchs we noticed that when using the publisher in NAD and doing health checks it working well and said that the PC with required criteria is healthy but when changeing in NAD the RADIUS to be sucscriber IP we face that the posture is becoeming unknown even with everything is ok so what may cause such a problem ?

MVP
Posts: 4,271
Registered: ‎07-20-2011

Re: in publisher subscriber in Clearpass is publisher only working or both?

This information it stored cache in the endpoint database and it should be visible by both PUB/SUB

So when this happens make sure that the posture information hasn't expired ?

What version of CPPM do you have installed ?
Thank you

Victor Fabian
Lead Mobility Engineer @ Integration Partners
AMFX | ACMX | ACDX | ACCX | CWAP | CWDP | CWNA
Contributor I
Posts: 103
Registered: ‎12-26-2014

Re: in publisher subscriber in Clearpass is publisher only working or both?

im using 6.4.0

 

 

so reqests show on subscriber with unkdown but when changeing it to publisher it is normal healthy so what should I check on ?

 

 

 

MVP
Posts: 4,271
Registered: ‎07-20-2011

Re: in publisher subscriber in Clearpass is publisher only working or both?

When you make the switch from PUB to SUB check the Policy cache information in the endpoint database .

 

You can manage that value under the Cluster-wide parameters >General tab > Policy result cache timeout.

 

Make sure that the SUB is in SYNC with the PUB.

 

If all these look good then you should consider opening a TAC case or upgrading to the latest 6.4 version.

Thank you

Victor Fabian
Lead Mobility Engineer @ Integration Partners
AMFX | ACMX | ACDX | ACCX | CWAP | CWDP | CWNA
Moderator
Posts: 487
Registered: ‎11-09-2012

Re: in publisher subscriber in Clearpass is publisher only working or both?

Please confirm the PUB + SUB are in Sync?


Best Regards
-d

Snr Tech Marketing Engineer - ClearPass

-- Found something helpful, important, or cool? Click the Kudos Star in a post.
-- Problem Solved? Click "Accept as Solution" in a post.
Search Airheads
Showing results for 
Search instead for 
Did you mean: