Security

Hi there,

 

I know ClearPass Device Insight is licensed per device, but what I can't figure out is how are the devices accounted for?

I can see devices going for up to 1 year and more, but active devices on the network are like 1/10 of all devices seen since ever. Also, there seems to be no way to delete devices.

So, what do I have to license? All devices seen since ever? Active devices on X period? How long is that period?

 

Thanks

 

Thanks

Thanks.

 

But the question is about ClearPass Device Insight.

Nothing on that docs explain how to the devices are accounted with Device Insight for licensing purposes.

They just refer to ClearPass (Base;Access;Onboard;OnGuard).

It is based on the amount of unique devices discovered on the defined subnet / network



Thank you

Victor Fabian

Pardon typos sent from Mobile

Thanks.

But you also miss the point.

I have devices that show on my Device Insight that only connected once, like 5 month ago.

 

So, as there is no way to delete them, fo I have to pay for every single device that ever was connected to my network and "profiled" by Device Insight?

Please reach out to your Aruba sales team if you need to base your purchase decision on this point.

 

At this point, as there is no way to delete endpoints, there is no license enforcement done either. For now, as in indication, I'd take as a guideline the number of devices that are active in a few weeks period. Think that if you would be able to delete endpoints, and you would put it on 4 weeks of inactivity, in that case, the number of clients seen in 4 weeks would be a good guideline. As mentioned, work with your Aruba team.

Thanks all, this was the same question I have.  Did you get a definitive answer ricardoduarte?
For an expensive product, its difficult to justify if the licensing terms were to get clarified/firmed up/enforced differently after purchase, meaning we were potentially short of the required licenses.
As CPDI integration with CPPM stops using CPPM profiler fingerprints and uses CPDI analyser instead, there is no way to use the two at the same time, so basic profiling for an 802.1x service & advanced Device Insight profiling for a MAC auth service?
i.e. we have seen circa 55k endpoints hit our CPPM database, but I'd say only 5k to 10k are "active".
We don't enable profiling for BYOD for example, but the endpoints will of cause be in the endpoints DB.
Original Message:
Sent: Sep 28, 2020 03:06 AM
From: Herman Robers
Subject: ClearPass Device Insight Licensing?

Please reach out to your Aruba sales team if you need to base your purchase decision on this point.

 

At this point, as there is no way to delete endpoints, there is no license enforcement done either. For now, as in indication, I'd take as a guideline the number of devices that are active in a few weeks period. Think that if you would be able to delete endpoints, and you would put it on 4 weeks of inactivity, in that case, the number of clients seen in 4 weeks would be a good guideline. As mentioned, work with your Aruba team.