Re: ClearPass OnGuard
09-04-2019 01:57 AM
Check this out
There is no limitation of deploying OnGuard across L3 as long as they are a part of the cluster. If you are deploying Dissolvable agent-based health checks you might need a way with which you can ensure HTTPS redundancy. If it is using Persistent Agent or Agentless. It should be fin.
The only thing to keep an eye on is the Bandwidth Utilization for which you may have to configure Zones. Read the guide attached.