Security

last person joined: 11 hours ago 

Forum to discuss Enterprise security using HPE Aruba Networking NAC solutions (ClearPass), Introspect, VIA, 360 Security Exchange, Extensions, and Policy Enforcement Firewall (PEF).
Expand all | Collapse all

ClearPass OnGuard

This thread has been viewed 2 times
  • 1.  ClearPass OnGuard

    Posted Aug 26, 2019 10:19 PM
    Spoiler
    I would like to deploy CPPM publisher and subscriber in different subnets. Will there be any problem for Onguard to work in such L3 deployment?

    Thank you.


  • 2.  RE: ClearPass OnGuard

    EMPLOYEE
    Posted Sep 04, 2019 04:58 AM

    Check this out

     

    https://support.arubanetworks.com/Documentation/tabid/77/DMXModule/512/Command/Core_Download/Default.aspx?EntryId=33303

     

    There is no limitation of deploying OnGuard across L3 as long as they are a part of the cluster. If you are deploying Dissolvable agent-based health checks you might need a way with which you can ensure HTTPS redundancy. If it is using Persistent Agent or Agentless. It should be fin.

     

    The only thing to keep an eye on is the Bandwidth Utilization for which you may have to configure Zones. Read the guide attached.