AAA, NAC, Guest Access & BYOD

Q:

As a admin, can I view all the ports used/open on CPPM and if possible configure them?

From ClearPass 6.6.3, two new commands are added to the CLI:

[appadmin@AJ-Lab-1]# show ports
[appadmin@AJ-Lab-1]# configure port

For Example (truncated list) [appadmin@AJ-Lab-1]# show ports

==============================================================================
Port  | Protocol | State       | Process         | Input Rule  | Output Rule |
==============================================================================
22    | tcp      | LISTEN      | sshd            | ACCEPT      | Not Defined |
25    | tcp      | LISTEN      | master          | Not Defined | Not Defined |
80    | tcp      | LISTEN      | httpd           | ACCEPT      | Not Defined |
199   | tcp      | LISTEN      | snmpd           | Not Defined | Not Defined |
443   | tcp      | LISTEN      | httpd           | ACCEPT      | Not Defined |
1241  | tcp      | LISTEN      | nessusd         | Not Defined | Not Defined |
2003  | tcp      | LISTEN      | python          | Not Defined | Not Defined |
2004  | tcp      | LISTEN      | python          | Not Defined | Not Defined |
2375  | tcp      | LISTEN      | docker          | Not Defined | Not Defined |
2812  | tcp      | LISTEN      | monit           | Not Defined | Not Defined |
4231  | tcp      | LISTEN      | netwatch        | Not Defined | Not Defined |
4233  | tcp      | LISTEN      | ingressproc     | Not Defined | Not Defined |
4441  | tcp      | LISTEN      | policy_server   | Not Defined | Not Defined |
4949  | tcp      | LISTEN      | TacacsServer    | Not Defined | Not Defined |
5432  | tcp      | LISTEN      | postmaster      | ACCEPT      | Not Defined |
6176  | tcp      | LISTEN      | python          | Not Defined | Not Defined |
6177  | tcp      | LISTEN      | python          | Not Defined | Not Defined |
6178  | tcp      | LISTEN      | python          | Not Defined | Not Defined |
6179  | tcp      | LISTEN      | python          | Not Defined | Not Defined |

Using these two commands we can view/edit the ports on CPPM as per requirement.