Security

 View Only
last person joined: 22 hours ago 

Forum to discuss Enterprise security using HPE Aruba Networking NAC solutions (ClearPass), Introspect, VIA, 360 Security Exchange, Extensions, and Policy Enforcement Firewall (PEF).
Expand all | Collapse all

ClearPass Policy Manager 6.9 Releases

This thread has been viewed 192 times
  • 1.  ClearPass Policy Manager 6.9 Releases

    EMPLOYEE
    Posted Mar 12, 2020 03:18 PM

    Hello All,

     

    We are pleased to announce the immediate availability of ClearPass Policy Manager 6.9.0!  In addition to bug fixes, this release also includes several new features that our Engineering and QA team have worked tirelessly to include:

     

    Significant IPv6 Improvements

    Why is this interesting? This release adds IPv6 functionality between ClearPass Policy Manager and NAD for RADIUS and TACACS+ communication.  NAD devices no longer require communicating over IPv4 when contacting ClearPass Policy Manager.  IPv6 communication between Policy Manager cluster members are also now fully supported.

     

    Tunneled EAP (TEAP) support

    Why is this interesting? Customers who want to use a standards-based approach to perform authentication of endpoints combining more than one identity (such as machine and user) and/or mixed authentication methods (such as machine certificate and user password) may leverage TEAP to perform both in a single tunneled EAP transaction.  TEAP is defined in RFC 7170 and native support is included in Windows 10 (release 20H1).

     

    Template Updates to Downloadable User Roles

    Why is this interesting? Customers who use Downloadable User Role (DUR) definitions on ClearPass Policy Manager no longer need to upgrade or update Policy Manager to have access to the latest DUR options in standard mode when updating Aruba devices.  Administrators may now download the latest library when changes are available to apply without delays. AOS-CX is the first product to use the new method.

     

    Improved multi-language support

    Why is this interesting? Administrative workflows have been updated for Simplified Chinese, Japanese, and Korean languages.  All end user workflows have been updated and now also include support for Portuguese and Hindi languages.

     

    Improved MAC address searching

    Why is this interesting? MAC addresses may be searched using any format but are now displayed using a standard AA.BB.AA.BB.AA.BB format. 

     

    What’s New pop-up

    Why is this interesting? Provides a list of the key features in a release to administrative users as well as the link to the Release Notes to learn more about the new functionality. 

     

    As always, please take note of the ‘Changes of Behaviors’ section of the release notes (https://www.arubanetworks.com/techdocs/ClearPass/CP_ReleaseNotes_6.9.0/Default.htm).

     

    Unlike previous releases, this software is being released exclusively through the Aruba Support Portal (ASP). 

     

    A big thanks and congratulations to the ClearPass Engineering, ClearPass QA and TechPubs teams for reaching this milestone!

     

    Best regards,

    The ClearPass Team



  • 2.  RE: ClearPass Policy Manager 6.9 Releases

    EMPLOYEE
    Posted Mar 13, 2020 09:26 AM

    Please note that we have temporarily disabled the downloads after an issue with TACACS+ authentication was identified.  We will re-post the downloads next week and subsequently release a hotfix to address the TACACS+ issues for those customers who may be impacted.



  • 3.  RE: ClearPass Policy Manager 6.9 Releases

    EMPLOYEE
    Posted Mar 16, 2020 03:31 PM

    The 6.9.0 upgrades and images are again available for download from the Aruba Support Portal (https://asp.arubanetworks.com/downloads) or from ClearPass Policy Manager systems under Software Updates.

     

    The "ClearPass 6.9.0 Hotfix for TACACS+ using subnet defined NADs" is also available for all customers who are using TACACS+ services.  Information about this hotfix can be found at https://www.arubanetworks.com/techdocs/ClearPass/CP_ReleaseNotes_6.9.0/Default.htm#WhatsNew/KnownThisRls.htm?Highlight=CP%E2%80%9137669



  • 4.  RE: ClearPass Policy Manager 6.9 Releases

    EMPLOYEE
    Posted Mar 17, 2020 07:23 PM

    Due to a newly identified issue with some customers upgrading from earlier releases with older Dell based appliances (e.g. systems originally sold as CP-HW-25K v1) we are temporarily suspending the 6.9.0 downloads again until we can determine if these are isolated failures.



  • 5.  RE: ClearPass Policy Manager 6.9 Releases

    EMPLOYEE
    Posted Apr 02, 2020 10:50 AM

    The 6.9.0 version was re-released and posted on 31 March.  The release notes have been updated to indicate that the older, impacted appliances are no longer able to upgrade (we have also added better pre-checks for these systems).



  • 6.  RE: ClearPass Policy Manager 6.9 Releases

    EMPLOYEE
    Posted May 20, 2020 07:11 PM

    Hello All,

     

    We are pleased to announce the immediate availability of ClearPass Policy Manager 6.9.1! This release also includes many fixes and security updates that our Engineering and QA team have worked tirelessly to provide.

     

    As always, please take note of the ‘Changes of Behaviors’ section of the release notes (https://www.arubanetworks.com/techdocs/ClearPass/CP_ReleaseNotes_6.9.1/Default.htm).

     

    The update images have been posted to the Aruba Support Portal (ASP) and the software updates portal.

     

    A big thanks and congratulations to the ClearPass Engineering, ClearPass QA and TechPubs teams for reaching this milestone!

     

    Best regards,

    The ClearPass Team



  • 7.  RE: ClearPass Policy Manager 6.9 Releases

    EMPLOYEE
    Posted Jul 29, 2020 06:49 PM

    Hello All,

     

    We are pleased to announce the immediate availability of ClearPass 6.9.2!  In addition to bug fixes, this release also includes several new features that our Engineering and QA team have worked tirelessly to include:

     

     

    • APIs
      • Addition of new API, ‘SessionAction’, with enhanced filters for flexibility and improved user experience to support disconnect or reauthorize active sessions for endpoints based on specific session attributes.
      • Enhanced ‘ApplicationLicense’ API includes up to date usage levels for licensed components.

     

     

    • Device Insight
      • Includes an option in ClearPass to designate a ‘Standby ClearPass Server’ within a cluster  for Device Insight integration.
      • Added a new option ‘Device Tags Update Action’ in ClearPass that allows to specify the action to be taken for the incoming Device Insight tag updates.

     

     

    • Endpoint Context Servers
      • Includes support for the latest SOTI API framework that supports OAuth2 authentication for SOTI Endpoint Context Server.

     

     

    • Policy Manager
      • Allows filtering of Trust List by Usage and Validity fields
      • Addition of new SHA-2 root Certificate Authority (CA), ‘USERTrust RSA Certification Authority’ to the Trust List.

     

     

     

     

    As always, please take note of the ‘Changes of Behaviors’ section of the release notes (https://www.arubanetworks.com/techdocs/ClearPass/CP_ReleaseNotes_6.9.2/Default.htm).

     

    The update images have been posted to the support site (Aruba Support Portal) and the software updates portal. 

     

     

    A big thanks and congratulations to the ClearPass Engineering, ClearPass QA and TechPubs teams for reaching this milestone!

     

    Best regards,

    The ClearPass Team



  • 8.  RE: ClearPass Policy Manager 6.9 Releases

    EMPLOYEE
    Posted Oct 05, 2020 05:41 PM

    Hello All,

     

    We are pleased to announce the immediate availability of ClearPass Policy Manager 6.9.3!  In addition to bug fixes, this release also includes several new features that our Engineering and QA team have worked tirelessly to include:

     

    New OCSP Settings

    Why is this interesting? OCSP is a key part of TLS validation, especially in EAP-TLS authentication.  Customers now have the ability to adjust the parameters around OCSP failures to support faster or slower failure detection based on their needs.

     

    API Explorer Reordering

    Why is this interesting? To make it easier for administrators to locate the APIs, many parts of the API explorer were re-ordered.  This makes the API Explorer compliant with the readme.com OpenAPI tools and provides a better base for future API additions.  Reminder that these APIs are also already available at https://developer.arubanetworks.com/aruba-cppm.

    NOTE:  This does NOT impact the functionality of the APIs at all.

     

    CLI Commands for SLAAC Configuration

    Why is this interesting? Stateless Address Auto-Configuration (SLAAC) was introduced in 6.9.0, but most customers do not actually want to use this functionality on their NAC.  This functionality is now disabled by default on most systems, but CLI commands can be used to manually enable or disable it as well as show the current state.

     

    As always, please take note of the ‘Changes of Behaviors’ section of the release notes (https://www.arubanetworks.com/techdocs/ClearPass/CP_ReleaseNotes_6.9.3/Default.htm).

     

    The update images have been posted to the Aruba Support Portal (ASP) and the software updates portal.

     

    A big thanks and congratulations to the ClearPass Engineering, ClearPass QA and TechPubs teams for reaching this milestone!

     

    Best regards,

    The ClearPass Team



  • 9.  RE: ClearPass Policy Manager 6.9 Releases

    EMPLOYEE
    Posted Nov 18, 2020 05:05 PM

    Hello All,

     

    We are pleased to announce the immediate availability of ClearPass Policy Manager 6.9.4!  In addition to bug fixes, this release also includes several new features that our Engineering and QA team have worked tirelessly to include:

     

    ArubaOS-CX & CPPM Integration

    Why is this interesting? Customers can push the controller's role from Policy Manager to the ArubaOS controller via the ArubaOS-CX switch thereby facilitating dynamic segmentation.

     

    RADIUS traffic throttling

    Why is this interesting? In scenarios where an occasional, sudden increase in authentications per second might put an excessive load on the policy server, Multi-Master Cache, or Post-Authentication module, customers can set the throttling rate that can alleviate the load and ensure that the traffic is always processed. This feature is especially useful with customers using load balancers to ensure that traffic is regulated within their cluster nodes.

     

    Agentless OnGuard Support for macOS & Linux

    Why is this interesting? Agentless OnGuard, although provides the same posture analysis and remediation that the traditional Persistent Agent provides, simplifies endpoint software management by letting users avail OnGuard functionalities without having to install and manage the OnGuard agents on their Linux and macOS endpoints.

     

    As always, please take note of the 'Changes of Behaviors' section of the release notes (https://www.arubanetworks.com/techdocs/ClearPass/CP_ReleaseNotes_6.9.4/Default.htm).

     

    The update images have been posted to the Aruba Support Portal (ASP) and the software updates portal.

     

    A big thanks and congratulations to the ClearPass Engineering, ClearPass QA and TechPubs teams for reaching this milestone!

     

    Best regards,

    The ClearPass Team




  • 10.  RE: ClearPass Policy Manager 6.9 Releases

    EMPLOYEE
    Posted Nov 20, 2020 01:41 PM
    Following the (US) Wednesday release of 6.9.4 an issue was identified that caused TACACS+ authentication to intermittently fail with AOS-CX switches.  Due to this issue we have currently suspended downloads of the 6.9.4 release while ClearPass Engineering creates the required Hotfix patch.  The 6.9.4 patch and hotfix will be re-released once this is validated to resolve the issue.  Due to the US Thanksgiving holiday next week we will postpone the release until the subsequent week to ensure that customers are not further impacted.

    Customers who have already downloaded but not installed 6.9.4 are advised to not yet install the patch.  Customers who have already installed 6.9.4 but are NOT using TACACS+ services with AOS-CX devices are advised to remain where they are at this time.  The issue has been identified to only impact AOS-CX TACACS+ authentications intermittently.  This means that one authentication may fail but the subsequent attempt may then succeed normally.  No other TACACS+ services with other systems have been identified with this issue.

    Thank you for your patience on this issue being resolved quickly.
    The ClearPass Team

    ------------------------------
    Bryan Lechner
    ------------------------------



  • 11.  RE: ClearPass Policy Manager 6.9 Releases

    EMPLOYEE
    Posted Dec 02, 2020 06:51 PM

    Hello All,

    We would like to update you on re-post of the original 6.9.4 posting and release of hot fix to resolve the TACACS+ issue.

    IMPORTANT NOTE: All TACACS+ deployments on 6.9.4 should install the ClearPass HotFix for TACACS+ fragmentation issue available HERE.

     

    Best regards,

    The ClearPass Team






  • 12.  RE: ClearPass Policy Manager 6.9 Releases

    EMPLOYEE
    Posted Feb 03, 2021 07:33 PM

    Hello All,
     
    We are pleased to announce the immediate availability of ClearPass Policy Manager 6.9.5! In addition to bug fixes, this release also includes several new features that our Engineering and QA team have worked tirelessly to include:
     
    TACACS+ Username Based Sessions
    Why is this interesting? TACACS+ Authorization and Accounting sessions can now be identified and processed based on just username from an authentication session as opposed to a combination of username, NAD IP and NAD Port, by enabling the new cluster-wide parameter 'Use TACACS+ Session based on Username'. Some network orchestration systems, especially Arista Cloud Vision Portal (CVP), use username in their TACACS+ authorization requests to AAA server. This allows those devices to work correctly with CPPM.
     
    Simplified Cluster Creation
    Why is this interesting? Removing the need to manually copy the certificates between nodes when making clusters, returns customers to the simple cluster registration workflow that was previously used.
    As always, please take note of the 'Changes of Behaviors' section of the release notes (https://www.arubanetworks.com/techdocs/ClearPass/CP_ReleaseNotes_6.9.5/Default.htm).
     
    The update images have been posted to the Aruba Support Portal (ASP) and the software updates portal.
     
    A big thanks and congratulations to the ClearPass Engineering, ClearPass QA and TechPubs teams for reaching this milestone!
     
    Best regards,
    The ClearPass Team




  • 13.  RE: ClearPass Policy Manager 6.9 Releases

    EMPLOYEE
    Posted May 26, 2021 04:56 PM

    Hello All,

    We are pleased to announce the immediate availability of ClearPass Policy Manager 6.9.6! In addition to bug fixes, this release also includes several new features that our Engineering and QA team have worked tirelessly to include: 

    Hostname support for SNMP Trap Receiver

    Why is this interesting? With this feature customers can now add SNMP Trap Receivers with a valid hostname as Host Address, resolvable by the DNS configuration, in addition to IP address thereby providing support for high availability.

    Multiple 6.10 Enhancements in 6.9.6

    Why is this interesting? Not every customer can update to the latest version of CPPM immediately, but some of the features from the release are able to be released in the 6.9.6 version for them to use already. Customers who are looking for some of enhancements that were introduced initially the 6.10 release are also available to customers who are using the 6.9.6 release. This includes the ability to Trigger CoA actions from Access Tracker, EST server configuration using tls-unique options, and the ability to collect logs during scheduled windows without being present.

    As always, please take note of the ‘Changed Behaviors’ section of the release notes (https://www.arubanetworks.com/techdocs/ClearPass/CP_ReleaseNotes_6.9.6/Default.htm).

    The update images have been posted to the Aruba Support Portal (ASP) and the software updates portal.

    A big thanks and congratulations to the ClearPass Engineering, ClearPass QA and TechPubs teams for reaching this milestone!

    Best regards,

    The ClearPass Team



  • 14.  RE: ClearPass Policy Manager 6.9 Releases

    EMPLOYEE
    Posted Sep 01, 2021 04:31 PM

    Hello All,

    We are pleased to announce the immediate availability of ClearPass Policy Manager 6.9.7!  In addition to bug fixes, this release also includes several new features that our Engineering and QA team have worked tirelessly to include:

    HPE Passport Migration to SSO

    Why is this interesting? This is the same functionality provided in the 6.10.0 release ported back to our 6.9.x release.  Customers need only obtain a token rather than use username/passwords that can then cause problems due to change/lock event.  This feature has been very well received in the 6.10 release and is being ported back!

     

    Other 6.10 Back-ported Features

    Why is this interesting? Several other features have been ported back from the 6.10 release to customers who are otherwise unable to update to 6.10.  Read the Release Notes for more information on these!

    As always, please take note of the 'Changes of Behaviors' section of the release notes (https://www.arubanetworks.com/techdocs/ClearPass/CP_ReleaseNotes_6.9.7/Default.htm).

    The update images have been posted to the Aruba Support Portal (ASP) and the software updates portal.

    A big thanks and congratulations to the ClearPass Engineering, ClearPass QA and TechPubs teams for reaching this milestone!

     

    Best regards,

    The ClearPass Team

    ------------------------------
    Bryan Lechner
    ------------------------------



  • 15.  RE: ClearPass Policy Manager 6.9 Releases

    EMPLOYEE
    Posted Nov 17, 2021 10:12 PM

    Hello All,

    We are pleased to announce the immediate availability of ClearPass Policy Manager 6.9.8!  This is another release that is focused primarily on addressing identified issues for our customer base.  Please be sure to review the change of behavior section in the Release Notes.

    As always, please take note of the 'Changes of Behaviors' section of the release notes (https://www.arubanetworks.com/techdocs/ClearPass/CP_ReleaseNotes_6.9.8/Default.htm).

    The update images have been posted to the Aruba Support Portal (ASP) and the software updates portal. 

    A big thanks and congratulations to the ClearPass Engineering, ClearPass QA and TechPubs teams for reaching this milestone!

     

    Best regards,

    The ClearPass Team

    ------------------------------
    Bryan Lechner
    ------------------------------



  • 16.  RE: ClearPass Policy Manager 6.9 Releases

    EMPLOYEE
    Posted Feb 02, 2022 07:48 PM

    Hello All,

     

    We are pleased to announce the immediate availability of ClearPass Policy Manager 6.9.9!  In addition to bug fixes, this release also includes several new features that our Engineering and QA team have worked tirelessly to include:

     

    Event Viewer warning if RADIUS Proxy Target is down

    Why is this interesting? ClearPass has alerted for AD/LDAP sources not being available for several years now, but we are not including the ability to note if a RADIUS proxy target is not available as well.  This is important for customers using remote proxy systems for RADIUS requests that may not respond in a timely manner.

     

    Endpoint Context Server use when Insight is down

    Why is this interesting? If Insight servers are not available (such as during upgrades) the context server actions to communicate information to Palo Alto Network systems are still available.  When the Insight server is back the system will automatically return to it.

    As always, please take note of the 'Changes of Behaviors' section of the release notes (https://www.arubanetworks.com/techdocs/ClearPass/CP_ReleaseNotes_6.9.9/Default.htm).

     

    The update images have been posted to the Aruba Support Portal (ASP) and the software updates portal.

     

    A big thanks and congratulations to the ClearPass Engineering, ClearPass QA and TechPubs teams for reaching this milestone!

     

    Best regards,

    The ClearPass Team

    ------------------------------
    Bryan Lechner
    ------------------------------



  • 17.  RE: ClearPass Policy Manager 6.9 Releases

    EMPLOYEE
    Posted Mar 30, 2022 06:35 PM

    Hello All,

     

    We are pleased to announce the immediate availability of ClearPass Policy Manager 6.9.10!  This is another release that is focused primarily on addressing identified issues for our customer base.  Please be sure to review the Changed Behaviors section in the Release Notes.

     

    As always, please take note of the Changed Behaviors section of the release notes (https://www.arubanetworks.com/techdocs/ClearPass/CP_ReleaseNotes_6.9.10/Default.htm).

    The update images have been posted to the Aruba Support Portal (ASP) and the software updates portal.

     

    A big thanks and congratulations to the ClearPass Engineering, ClearPass QA and TechPubs teams for reaching this milestone!

     

    Best regards,

    The ClearPass Team


  • 18.  RE: ClearPass Policy Manager 6.9 Releases

    EMPLOYEE
    Posted Jun 01, 2022 07:23 PM

    Hello All,

     

    We are pleased to announce the immediate availability of ClearPass Policy Manager 6.9.11!  This release is primary focused on resolving customer and internally found issues, but does include one new feature:

     

    Onboard works with Microsoft Intune Onboard Extension

    Why is this interesting? Microsoft Intune does not include a Certificate Authority (CA) but does require a certificate for multiple workflows (view the Microsoft Intune v6 Tech Note).  This modification allows for a new ClearPass Extension "Microsoft Intune Onboard Enrollment" to be used that will then allow the ClearPass Onboard system to properly work with Intune managed clients to automatically provision certificates on managed devices against the CPPM Onboard CA.

     

    As always, please take note of the 'Changes of Behaviors' section of the release notes (https://www.arubanetworks.com/techdocs/ClearPass/CP_ReleaseNotes_6.9.11/Default.htm).

     

    The update images have been posted to the Aruba Support Portal (ASP) and the software updates portal.

     

    A big thanks and congratulations to the ClearPass Engineering, ClearPass QA and TechPubs teams for reaching this milestone!

     

    Best regards,

    The ClearPass Team


  • 19.  RE: ClearPass Policy Manager 6.9 Releases

    EMPLOYEE
    Posted Aug 10, 2022 07:11 PM

    Hello All,

    We are pleased to announce the immediate availability of ClearPass Policy Manager 6.9.12!  This is another release that is focused primarily on addressing identified issues for our customer base.  Please be sure to review the Changed Behaviors section in the Release Notes. 

    As always, please take note of the 'Changes of Behaviors' section of the release notes (https://www.arubanetworks.com/techdocs/ClearPass/CP_ReleaseNotes_6.9.12/Default.htm). 

    The update images have been posted to the Aruba Support Portal (ASP) and the software updates portal.

    A big thanks and congratulations to the ClearPass Engineering, ClearPass QA and TechPubs teams for reaching this milestone!

    Best regards,

    The ClearPass Team


  • 20.  RE: ClearPass Policy Manager 6.9 Releases

    EMPLOYEE
    Posted Nov 16, 2022 07:52 PM

    Hello All,

    We are pleased to announce the immediate availability of ClearPass Policy Manager 6.9.13.  This is another release that is focused primarily on addressing identified issues for our customer base.

    As always, please take note of the 'Behavior Changes in 6.9.x' section of the release notes https://www.arubanetworks.com/techdocs/ClearPass/CP_ReleaseNotes_6.x.x/Default.htm.

    The update images have been posted to the Aruba Support Portal (ASP) and the software updates portal.

    A big thanks and congratulations to the ClearPass Engineering, ClearPass QA and TechPubs teams for reaching this milestone!

    Best regards,

    The ClearPass Team





  • 21.  RE: ClearPass Policy Manager 6.9 Releases

    Posted Aug 21, 2023 02:52 AM

    Hi Im using v6.9.7 and v6.9.11 in  my environment, I want to upgrade CPPM to v6.11.1 for this, TAC suggested me first to upgrade my existing version to v6.9.13 then take backup and restore in new CPPM, I gone through support portal, unable to find link for 6.9.13 software, could you share me the link where to download ?




  • 22.  RE: ClearPass Policy Manager 6.9 Releases

    MVP
    Posted Aug 21, 2023 03:01 AM

    https://asp.arubanetworks.com/downloads;products=Aruba%20ClearPass%20Policy%20Manager%20%28CPPM%29;softwareMajorVersions=6.9;softwarePatchVersions=6.9.13




  • 23.  RE: ClearPass Policy Manager 6.9 Releases

    Posted Aug 21, 2023 03:02 AM

    Hi Vignesh

    If you filter in ClearPass 6.9 and Software it should be easy to find in the ASP site.

    Your account must have rights to download the software otherwise you will only get a link to the release notes.

    https://asp.arubanetworks.com/downloads/software/RmlsZTpiOTA5NWIzYS0wZjhmLTExZWUtYTQ2ZC04NzNhMjA4MmRmNTI%3D



    ------------------------------
    Best Regards
    Jonas Hammarbäck
    MVP 2023, ACCX #1335, ACX-Network Security, Aruba SME, ACMP, ACDP , ACEP, ACSA
    Aranya AB
    If you find my answer useful, consider giving kudos and/or mark as solution
    ------------------------------



  • 24.  RE: ClearPass Policy Manager 6.9 Releases

    Posted Aug 21, 2023 04:37 AM

    Hi Jonas, 

    Thanks for your response, 

    Upon gone through the link provided, got 5 Items contains cumulative patches and security hotfixes, which i need to download ? 




  • 25.  RE: ClearPass Policy Manager 6.9 Releases

    Posted Aug 21, 2023 05:04 AM

    Hi

    You only need the 6.9.13 update:

    A direct link to the download:
    https://asp.arubanetworks.com/downloads/software/RmlsZTo1MGE2MDJlZS02NWI5LTExZWQtYjRmMi04YjI0MzJhOTc2Y2M%3D

    Hotfixes for 6.9.13 are only needed to solve security issues, but if you plan to migrate to 6.11 shortly there are no need to do the hotfix installations.



    ------------------------------
    Best Regards
    Jonas Hammarbäck
    MVP 2023, ACCX #1335, ACX-Network Security, Aruba SME, ACMP, ACDP , ACEP, ACSA
    Aranya AB
    If you find my answer useful, consider giving kudos and/or mark as solution
    ------------------------------