Security

last person joined: 18 hours ago 

Forum to discuss Enterprise security using HPE Aruba Networking NAC solutions (ClearPass), Introspect, VIA, 360 Security Exchange, Extensions, and Policy Enforcement Firewall (PEF).

CLEARPASS POLICY MANAGER ARUBA 360 SECURITY EXCHANGE QUARTERLY INTEGRATION NEWSLETTER #5

This thread has been viewed 4 times
  • 1.  CLEARPASS POLICY MANAGER ARUBA 360 SECURITY EXCHANGE QUARTERLY INTEGRATION NEWSLETTER #5

    Posted Sep 09, 2019 08:40 PM

    ARUBA 360 SECURITY EXCHANGE QUARTERLY INTEGRATION NEWSLETTER

      

    CONTENTS

    • NEW CLEARPASS POLICY MANAGER INTEGRATIONS THIS QUARTER
    • IN CASE YOU MISSED LAST QUARTER’S NEWSLETTER
    • WHERE TO FIND STUFF
    • WHAT WE WANT FROM YOU? 

     

     

    NEW CLEARPASS POLICY MANANGER INTEGRATIONS THIS QUARTER

    This quarter we focused on improving a number of our existing integrations ranging from IntroSpect to several of our long standing partners such as Palo Alto Network and JAMF. We also took the opportunity this quarter to add yet another OT/ICS player as we continue to get feedback from customers and partners on the growing need for more and more OT/ICS visibility. We believe these improvements or new integrations will continue to enable you to have more meaningful conversations with both existing customers by ensuring they get the most out of their investment in ClearPass Policy Manager as well as prospective customers looking at us versus the competition

     

     

    Palo Alto Networks GlobalProtect with OnGuard - NEW

    More and more customers have employees working either remotely or they need access whilst traveling. These employees should be able to access the same resources as if they were located in a HQ or branch location, however it’s also important to consider that devices that are constantly outside a corporate location are more susceptible to ‘picking-up’ malware or other unwanted security related software. You need to be able to authenticate users and ensure that the security posture of their devices is healthy. To help organizations stay secure we’ve developed an integration that allows for endpoints running Palo Alto Networks GlobalProtect and ClearPass OnGuard to authenticate and evaluate the health posture of the endpoint and then update the Palo Alto Networks firewall with the health of the endpoint.

    Why this maters to you? – This provides for an enhanced level of control for remote and mobile clients, by integrating the capabilities of Palo Alto Networks GlobalProtect and ClearPass OnGuard.



    JAMF ZuluDesk - NEW

    ZuluDesk was recently purchased by JAMF, it’s a leading Mobile Device Management system for today’s modern digital classroom. It provides easy to use tools for not only IT Departments but also for Teachers, Students and Parents.

    Why this maters to you? – JAMF ZuluDesk is strong within the K-12/Academic market, one of Aruba's strongest verticals. Combining ClearPass Policy Manager with ZuluDesk strengthens our offering and provides integrated best of breed Device Management, Identity and Access Policy control to facilitate granular access to the school infrastructure and resources.

     

     

    Nozomi Networks - NEW

    Last month we released three integrations related to ClearPass and OT/ICS security vendors. This month we add a fourth to round out our integrations in this space. To find out more about this technology space and the opportunities, please read the OT/ICS section in the Security Exchange Newsletter from last month here.

    Why this maters to you? – There are large opportunities now where the security of OT/ICS networks is becoming critical, adding Nozomi Networks lets us support specifically the Oil & Gas industry where they are very successful.

     

     

    IntroSpect - Updated

    In the 2.4 release of IntroSpect, we added capabilities to automatic remediation of endpoints using ClearPass Policy Manager. This feature adds support to automatically send alert and Syslog messages to ClearPass. ClearPass Ingress Event Engine uses these alerts and syslog messages to configure granular policies for enforcement.

    Why this maters to you? – This new guide includes the configuration steps to achieve the above. ClearPass 6.8.2 also provides out-of-the-box integration to simplify configuring Introspect integration with ClearPass Policy Manager.

     

    HCL BigFix - Updated

    Previously known as IBM BigFix, this software distribution and patch management product is used by many large enterprise customer. In this v2 of our integration, we’ve added incremental features over the initial version to expose additional endpoint context, we provide insights when endpoints are missing patches, these are additionally categorized as Low, Medium, Important or Critical. ClearPass Policy Manager can reference this context individually for very granular endpoint control.

    Why this maters to you? – We’re providing deeper insight into the compliance status of devices connecting to the network, and when appropriate if these devices should be granted normal or restricted access to corporate application and resources. Note, IBM recently sold BigFix to HCL.

       

     

    Envoy - Updated

    Envoy is an existing member of our Security 360 Exchange framework, they provide a Digital Visitor Management solution that we have expanded to automate the managment of ClearPass Guest accounts. In this release we have updated the extension to cater for the scenario where the Envoy Tablet/Kiosk might be in a different time zone from ClearPass Policy Manager.

    Why this maters to you? – When Guest/Visitors arrive and sign-in, they receive notifications via email/sms of their account and possibly the duration, the issue we resolved here was that the account expiration was not properly calculated when the Tablet and ClearPass where in differing time zones. 

     

     

    Multiple minor documentation Updates

    Thanks for the feedback from our Partners and SEs in the field we’ve made a few minor updates you caught in existing published documentation. We’ve updated the following TechNotes with minor grammatical changes.

    The updated integration documents are Microsoft Intune, Tenable Nessus and SinePro.

     

     

    IN CASE YOU MISSED LAST QUARTER’S NEWSLETTER

    We announced several new integrations which we are re-listing below for those that missed it. For a more detailed description of the below integrations from the last quarter use this link to read more and why they are useful and valuable to you and our customers. 

    • VMware WorkSpace One (previously marketed as VMware Airwatch) 
    • Several OT/ICS Security Vendors Integrations
      • CyberX
      • Claroty
      • Indegy

     

    You can also find a complete list of all the Aruba 360 Security Exchange Quarterly announcement here on our community site.


    WHERE TO FIND STUFF

    Whilst customer/partners can find the document on the community site located here, this is a NEW landing page which will become the source of access to all ClearPass Documentation.

    arubanetworks.com/clearpassdocs

     

     
    WHAT WE WANT FROM YOU? 

    This quarter we’ve incorporated into the TechNotes all the feedback we’ve received from our own SE’s, CSE’s, Customer and Partners. We always want your feedback on the integrations we deliver, good or bad. What we want to hear from you is what integrations are you are seeing or hearing about in your accounts today?

     

     

    Finally, A big thanks to the ClearPass Engineering and QA team for helping us develop, validate and update these integrations!

     

    Danny Jump, Arpit Bhatt & Anish Pansare