AAA, NAC, Guest Access & BYOD

Why do I need to allow the TCP port 6658 between the OnGuard agent and ClearPass server, what is the use of it?

The OnGuard persistent agent uses the port 6658 to establish a control channel communication with the ClearPass server from the client, in order to update the client online status.

If the port 6658 is not allowed or blocked (via local firewall, etc), then the agent will repost the health status every 3 mins and try to establish the control channel.

Please ensure the port 6658 is allowed between the persistent agent and ClearPass server to prevent the client from re-authenticating very often, in any/all of the intermediary devices from the client upto clearpass.