Security

last person joined: 6 hours ago 

Enterprise security using ClearPass Policy Management, ClearPass Security Exchange, IntroSpect, VIA, 360 Security Exchange, Extensions and Policy Enforcement Firewall (PEF).
Expand all | Collapse all

ClearPass 6.6.1 - Custom Fingerprinting Rules

  • 1.  ClearPass 6.6.1 - Custom Fingerprinting Rules

    Posted Aug 04, 2016 01:08 PM

    Hi All,

     

    I'm using fingerprinting rules to add unknown devices to already categorized Dictionary Identities. It works great, I like this new functionality in 6.6.

     

    I had some questions though. When I add a custom fingerprint rule via [Configuration > Identity > Endpoints > 'Select Endpoint' > Update Fingerprint > 'Check add fingerprint rule' > Save] where can I see this rule to either modify or delete it?

     

    For example, I added a fingerprint from some HP Thin Clients that were showing as unknown:

     

    ["1,28,2,3,15,6,119,12,44,47,26,121,42,101,100,192,202,203,137"]

     

    I selected Thin Clients, HP, HP ThinClient as options for the rule. I then went into the fingerprints dictionary [Administration > Dictionaries > Fingerprints] and found the HP ThinClients fingerprint.

     

    It shows a value of: 

     

    [1,3,6,12,15,44,46,47,129,130,160,161,162,163,164,165,166,167,168,191]

     

    It's different than what I selected in my rule, and also does not show the custom rule that I added (This is assuming that Device Fingerprints are 1:N relationship to Option55 values).

     

    Is there a way to see all the custom rules so that they can be changed or deleted, or even known about? I expect that at some point customers will add in many conflicting rules that could cause problems, looking for ways to troubleshoot.


    Close



  • 2.  RE: ClearPass 6.6.1 - Custom Fingerprinting Rules

    Posted Dec 16, 2016 03:04 PM

    Bump.

     

    I'm also needing this information, where are the custom fingerprinting rules stored so they can be managed?



  • 3.  RE: ClearPass 6.6.1 - Custom Fingerprinting Rules

    Posted Dec 16, 2016 03:06 PM

    Administration > Dictionaries > Fingerprints



  • 4.  RE: ClearPass 6.6.1 - Custom Fingerprinting Rules

    Posted Dec 16, 2016 03:07 PM

    Perfect, cheers!



  • 5.  RE: ClearPass 6.6.1 - Custom Fingerprinting Rules

    Posted Aug 18, 2018 06:57 AM

    I add a new fingerprint rule which include SNMP Device name. When I look at the FP rule (Admin-Figerprints), the SNMP rule is not there. 

    Does custom figerprint support SNMP?

     

    1.JPG2.JPG