We would like to update you on re-post of the original 6.9.4 posting and release of hot fix to resolve the TACACS+ issue.
Original Message:
Sent: Nov 20, 2020 01:40 PM
From: Bryan Lechner
Subject: ClearPass Policy Manager 6.9 Releases
Following the (US) Wednesday release of 6.9.4 an issue was identified that caused TACACS+ authentication to intermittently fail with AOS-CX switches. Due to this issue we have currently suspended downloads of the 6.9.4 release while ClearPass Engineering creates the required Hotfix patch. The 6.9.4 patch and hotfix will be re-released once this is validated to resolve the issue. Due to the US Thanksgiving holiday next week we will postpone the release until the subsequent week to ensure that customers are not further impacted.
Customers who have already downloaded but not installed 6.9.4 are advised to not yet install the patch. Customers who have already installed 6.9.4 but are NOT using TACACS+ services with AOS-CX devices are advised to remain where they are at this time. The issue has been identified to only impact AOS-CX TACACS+ authentications intermittently. This means that one authentication may fail but the subsequent attempt may then succeed normally. No other TACACS+ services with other systems have been identified with this issue.
Thank you for your patience on this issue being resolved quickly.
The ClearPass Team
------------------------------
Bryan Lechner
Original Message:
Sent: Nov 18, 2020 05:04 PM
From: Deepthi Janagan
Subject: ClearPass Policy Manager 6.9 Releases
Hello All,
We are pleased to announce the immediate availability of ClearPass Policy Manager 6.9.4! In addition to bug fixes, this release also includes several new features that our Engineering and QA team have worked tirelessly to include:
ArubaOS-CX & CPPM Integration
Why is this interesting? Customers can push the controller's role from Policy Manager to the ArubaOS controller via the ArubaOS-CX switch thereby facilitating dynamic segmentation.
RADIUS traffic throttling
Why is this interesting? In scenarios where an occasional, sudden increase in authentications per second might put an excessive load on the policy server, Multi-Master Cache, or Post-Authentication module, customers can set the throttling rate that can alleviate the load and ensure that the traffic is always processed. This feature is especially useful with customers using load balancers to ensure that traffic is regulated within their cluster nodes.
Agentless OnGuard Support for macOS & Linux
Why is this interesting? Agentless OnGuard, although provides the same posture analysis and remediation that the traditional Persistent Agent provides, simplifies endpoint software management by letting users avail OnGuard functionalities without having to install and manage the OnGuard agents on their Linux and macOS endpoints.
As always, please take note of the 'Changes of Behaviors' section of the release notes (https://www.arubanetworks.com/techdocs/ClearPass/CP_ReleaseNotes_6.9.4/Default.htm).
The update images have been posted to the Aruba Support Portal (ASP) and the software updates portal.
A big thanks and congratulations to the ClearPass Engineering, ClearPass QA and TechPubs teams for reaching this milestone!
Best regards,
The ClearPass Team
Original Message:
Sent: Oct 05, 2020 05:40 PM
From: Bryan Lechner
Subject: ClearPass Policy Manager 6.9 Releases
Hello All,
We are pleased to announce the immediate availability of ClearPass Policy Manager 6.9.3! In addition to bug fixes, this release also includes several new features that our Engineering and QA team have worked tirelessly to include:
New OCSP Settings
Why is this interesting? OCSP is a key part of TLS validation, especially in EAP-TLS authentication. Customers now have the ability to adjust the parameters around OCSP failures to support faster or slower failure detection based on their needs.
API Explorer Reordering
Why is this interesting? To make it easier for administrators to locate the APIs, many parts of the API explorer were re-ordered. This makes the API Explorer compliant with the readme.com OpenAPI tools and provides a better base for future API additions. Reminder that these APIs are also already available at https://developer.arubanetworks.com/aruba-cppm.
NOTE: This does NOT impact the functionality of the APIs at all.
CLI Commands for SLAAC Configuration
Why is this interesting? Stateless Address Auto-Configuration (SLAAC) was introduced in 6.9.0, but most customers do not actually want to use this functionality on their NAC. This functionality is now disabled by default on most systems, but CLI commands can be used to manually enable or disable it as well as show the current state.
As always, please take note of the 'Changes of Behaviors' section of the release notes (https://www.arubanetworks.com/techdocs/ClearPass/CP_ReleaseNotes_6.9.3/Default.htm).
The update images have been posted to the Aruba Support Portal (ASP) and the software updates portal.
A big thanks and congratulations to the ClearPass Engineering, ClearPass QA and TechPubs teams for reaching this milestone!
Best regards,
The ClearPass Team