Security

last person joined: yesterday 

Forum to discuss Enterprise security using HPE Aruba Networking NAC solutions (ClearPass), Introspect, VIA, 360 Security Exchange, Extensions, and Policy Enforcement Firewall (PEF).
Expand all | Collapse all

Clear pass license

This thread has been viewed 0 times
  • 1.  Clear pass license

    Posted Mar 13, 2014 12:09 PM
    I am looking for a good clear explanation on the licensing for ClearPass on guest and users. 20-25k guests daily in airport with 1500-2k regular users. If you have Clear pass, what is your license scheme?


  • 2.  RE: Clear pass license

    Posted Mar 14, 2014 07:43 AM

    This is what I have on the CP Guest subject in regards of licensing.

     

    Clearpass Guest
     
    Guest is special, the MAC addresses refresh per day. You end up with a weekly view so that you can see a daily average though.  We understand that in guest environments users come and go on a much quicker basis than in the enterprise itself.
     
    The policy manager tracks the unique MAC addresses that it sees on a daily basis, but the refresh is weekly
     
    From <http://community.arubanetworks.com/t5/AAA-NAC-Guest-Access-BYOD/Clearpass-Guest-Licensing-Question/td-p/88392/highlight/true/page/2>
     
    Guest uses a daily reset model. If you have 1 appliance and use the starter bundle (25 licenses) all for guest, you can authenticate 25 unique MAC addresses per day that are connected by guests (we support bursting so that if you have not purchased the right level of licenses, users are not denied access). The next day you may see some of the same MAC addresses and new ones. If you stay under or at 25 authentications you have enough licensing (again bursting is supported). 
     
    The problem starts when you consistently see 30/40/90 authentications per day over 3 months. Then it's time to buy the next level license bundle.
     
    Trent
    ClearPass Product Management
     
    From <http://community.arubanetworks.com/t5/AAA-NAC-Guest-Access-BYOD/Clearpass-Guest-Licensing-Question/td-p/88392/highlight/true/page/2> 

     

    Note that if you allow more than 1 device connected/active per guestaccount - each device consumes one license.

     

    If you're looking at 2k regular with some peaks than it seems like CP-VW/HW-5K should do the job server wise. For Guest the system isn't hard-limited to 1k Guests so start with say 1000 licenses and buy more once you get a clearer picture of the use. 

     



  • 3.  RE: Clear pass license

    Posted Mar 16, 2014 11:11 AM

    arent guest licenses only for self guest registration? the licenses consumed for guest authentication are normal endpoint licenses i expect?

     

    @jsolb your links point to this thread.