Security

last person joined: yesterday 

Forum to discuss Enterprise security using HPE Aruba Networking NAC solutions (ClearPass), Introspect, VIA, 360 Security Exchange, Extensions, and Policy Enforcement Firewall (PEF).
Back to discussions
Expand all | Collapse all

AMON Profile on Controller for IntroSpect

This thread has been viewed 1 times

  • 1.  AMON Profile on Controller for IntroSpect

    Posted Jul 18, 2018 09:44 PM

    I was looking at configuring AMON connection to IntroSpect from my Aruba Controller.  I have a few questions

    1. Is there a recomended AMON Profile setting ?  What knobs should we enable?

    2. What is the correct Management Server type - I have AOS 6.5 which has AMP, ALE, and Central?

    3. What is the Minimum AOS code level on the controller that supports AMON to IntroSpect?

     

    Thanks

     

     



  • 2.  RE: AMON Profile on Controller for IntroSpect

    EMPLOYEE
    Posted Jul 18, 2018 10:21 PM
    Kelly,

    You should reach out to you local Security CSE. If you not sure who it is send me a direct message with your contact info and Ill find out for you.


  • 3.  RE: AMON Profile on Controller for IntroSpect

    EMPLOYEE
    Posted Jul 19, 2018 11:17 PM

    Hi Kelly,

     

    There is no pre-defined profile for IntroSpect yet.  So you would need to set on up. The only AMON feed you need are FW sessions and DNS stats:

     

     

    config t
mgmt-server profile introspect
  sessions-enable 
  inline-dns-stats
  no inline-ap-stats 
  no inline-auth-stats 
  no inline-dhcp-stats 
!
mgmt-server type amp primary-server <PP_IP>  profile introspect

    A default introspect profile will be added in AOS in the future.

     

    All recent (within last couple of years) of AOS should support this.  The AMON feed has not changed much.