Security

Hello

Is there any mechanism we can apply to automatically identify if RADIUS/NAC configuration has been removed from a switch?

As of now, we can only know this:

1. If incoming RADIUS requests stops from a particular switch which we only know at the later time OR
2. Through configured SPLUNK alert if there are any alternation in switch configuration

There is an option in ClearPass Insight to configure alerts via email or SMS. I never tried, but may help to resolve your issue.

Hello

Is there any mechanism we can apply to automatically identify if RADIUS/NAC configuration has been removed from a switch?

As of now, we can only know this:

1. If incoming RADIUS requests stops from a particular switch which we only know at the later time OR
2. Through configured SPLUNK alert if there are any alternation in switch configuration

Hello

Is there any mechanism we can apply to automatically identify if RADIUS/NAC configuration has been removed from a switch?

As of now, we can only know this:

1. If incoming RADIUS requests stops from a particular switch which we only know at the later time OR
2. Through configured SPLUNK alert if there are any alternation in switch configuration

An alternative approach would be to use TACACS+ to monitor for any changes within the switches configuration… 

Hello

Is there any mechanism we can apply to automatically identify if RADIUS/NAC configuration has been removed from a switch?

As of now, we can only know this:

1. If incoming RADIUS requests stops from a particular switch which we only know at the later time OR
2. Through configured SPLUNK alert if there are any alternation in switch configuration