Security

 View Only
last person joined: yesterday 

Forum to discuss Enterprise security using HPE Aruba Networking NAC solutions (ClearPass), Introspect, VIA, 360 Security Exchange, Extensions, and Policy Enforcement Firewall (PEF).
Expand all | Collapse all

How to send from ClearPass to Syslog location and SSID info

This thread has been viewed 16 times
  • 1.  How to send from ClearPass to Syslog location and SSID info

    Posted Feb 15, 2024 05:39 AM

    Hi community,

    We need that ClearPass will sent a syslog message to Syslog server, caring a session logs which we are seeing in Access Tracker, and specifically Radius request attributes, like location and SSID name.

    We can't find related filter in Syslog configuration.

    Is there a away to send this information towards syslog? Can 'Option 2' (making a specific SQL query) help with this?

    Thank you.



  • 2.  RE: How to send from ClearPass to Syslog location and SSID info
    Best Answer

    Posted Feb 15, 2024 05:50 PM

    Couple thoughts/questions:

    What version of Clearpass?

    Do you have Insight Enabled?

    If so, change your Export filter to "Insight Logs"

    Data filter to "RADIUS Authentication" > Type to "RADIUS"

    Radius.SSID, as well as several others are available there. 



    ------------------------------
    If my post was useful, please Accept Solution and Give Kudos.
    ------------------------------
    Zak Chalupka
    Principal Engineer - HPE Aruba
    ACDX | ACMP | ACSP | ACCP
    wifizak@hpe.com
    ------------------------------
    Ideas expressed here are solely my own and not necessarily that of HPE Aruba.
    ------------------------------



  • 3.  RE: How to send from ClearPass to Syslog location and SSID info

    Posted Feb 19, 2024 02:03 AM

    Thank you @802.zak for response.

    We are currently on 6.11.3 version, and Yes Insight DB is enabled. We'll will definitely try your suggested syslog filter, maybe them will be enough for client.