Security

 View Only
last person joined: 20 hours ago 

Forum to discuss Enterprise security using HPE Aruba Networking NAC solutions (ClearPass), Introspect, VIA, 360 Security Exchange, Extensions, and Policy Enforcement Firewall (PEF).
Back to discussions
Expand all | Collapse all

CPPM and PA User Identification Timeout effects

This thread has been viewed 0 times

  • 1.  CPPM and PA User Identification Timeout effects

    Posted Aug 27, 2020 07:21 PM

    Hi all,

    I like to ask about the PA User ID timeout value set on both CPPM and PA. CPPM version is 6.8.4 while PA is running 9.0.3. The PA User ID timeout value is set to 45 min on CPPM and 10 hrs on PA. 

    Query1: Does CPPM sent the timeout value only once at the integration setup or does it sent it with every HIP update message to PA?

    Query2: Based on the settings, what happens to the userID mapping after 45 mins assuming the user is still online, i.e. CPPM did not sent logout HIP update to PA? Will the userid mapping be flushed out on PA?

    Query3: Does the PA User ID value set on CPPM overwrites the value set in PA?

    Thanks