Yeah best practice (depending on organization policies) would be purge stale MAC addresses from the database. This is especially true for guest environments.
Keep your ClearPass patched and upgraded and make sure to download (automatic or manually) the profiling fingerprint updates.
Make sure you have a scheduled backup of your ClearPass database to an external file server. This is especially important for hardware appliances as you can't use hypervisor level backup utilities like snapshots.
Sent: Aug 18, 2022 09:24 AM
From: Trent Hewitt
Subject: ClearPass Cluster Maintenance
I'm operating a a 4 node ClearPass cluster running 6.9.11 on C2K hardware. Is there any periodic maintenance or optimization tasks that should get done for the ClearPass service like deleting old entries out of the endpoint DB or truncating any data?