Can you share the output of the access tracker (all tabs)? Is that hammering on a RADIUS? TACACS? WebAUTH? Application authentication?
Do you have a match on one of your services? If not, try to create a service to match the request so you can see the input tab to get more information on what is initiating the request.
------------------------------
Herman Robers
------------------------
If you have urgent issues, always contact your Aruba partner, distributor or Aruba TAC Support. Check
https://www.arubanetworks.com/support-services/contact-support/ for how to contact Aruba TAC.
------------------------------
Original Message:
Sent: Dec 03, 2020 10:40 AM
From: Saiyam Mehra
Subject: Clearpass AD management Auth
Hi
I am using AD for management users to authenticate for clearpass. It is working fine. But somehow I see that after every one hour some default username is constantly hammering the clearpass which is getting rejected. Any ideas. The IP from which the request is coming is the IP of Clearpass itself.
Thanks
------------------------------
Saiyam Mehra
------------------------------