Security

 View Only
last person joined: yesterday 

Forum to discuss Enterprise security using HPE Aruba Networking NAC solutions (ClearPass), Introspect, VIA, 360 Security Exchange, Extensions, and Policy Enforcement Firewall (PEF).
Back to discussions
Expand all | Collapse all

Aruba CPPM 6.7.13.110037 OnGuard without Bounce/Terminate Session for Healthy

This thread has been viewed 15 times

  • 1.  Aruba CPPM 6.7.13.110037 OnGuard without Bounce/Terminate Session for Healthy

    Posted May 05, 2021 11:22 PM
    Hi, I'm new on the OnGuard, does it have to be bounce even if the device is Healthy? 





    ------------------------------
    Richard Benedict
    ------------------------------


  • 2.  RE: Aruba CPPM 6.7.13.110037 OnGuard without Bounce/Terminate Session for Healthy

    EMPLOYEE
    Posted May 06, 2021 04:48 AM
    No, you can have a different enforcement profile and set bounce client to false

    ------------------------------
    Ayman Mukaddam
    ------------------------------

    Original Message


  • 3.  RE: Aruba CPPM 6.7.13.110037 OnGuard without Bounce/Terminate Session for Healthy

    MVP GURU
    Posted May 06, 2021 06:08 AM
    The bounce will help with getting the client into the correct role. The status of the device might have changed. So instead of using a cached posture, it checks, updates the posture, and bounced the client to see if it matches something different. This is normal for a posture check as it updates the endpoint database.

    ------------------------------
    Dustin Burns

    If my post was useful accept solution and/or give kudos
    ------------------------------

    Original Message


  • 4.  RE: Aruba CPPM 6.7.13.110037 OnGuard without Bounce/Terminate Session for Healthy

    Posted May 06, 2021 04:24 PM
    You can easily query tipsLogDB inside the webauth service and get the previous posture.
    And then only send the bounce if the new posture is different then the previous.

    ------------------------------
    Ricardo Duarte
    ------------------------------

    Original Message