Security

Hello All,

 

Im going to start a new thread here where I will keep a running list of the Cumulative and Full release anoucements. 

 

If you have questions or comments please start a new thread......

Hello all

 

ClearPass 6.3.0 Cumulative Patch 4 is now available. Release notes are attached. 

 

Customers should see the cumulative patch in ClearPass Policy Manager’s software update portal screen. It will be under the list of “Firmware and Patch updates”. The cumulative patch is also available on our support site ( support.arubanetworks.com ) at the following location. 

 

Download Software > ClearPass > Policy Manager > Current Release > Patches > ClearPass 6.3.0 Cumulative Patch 4

#####MAKE SURE YOU READ THE RELEASE NOTES###########

 

There are quite a few changes so do not upgrade until you read through all the release notes, Take a snapshot on VMs and run a Full BACKUP on both appliances and VMs.....

 

Hello all,

 

ClearPass 6.4.0. is now available. Please review the attached release notes, 'Chapter 3 - Whats new in this release' section for information on new features and enhancements in this release.

 

Upgrade instructions: 

• Please review Chapter 2 in the release notes for upgrade support for your current ClearPass versions. 
• 6.4.0 upgrade image can be downloaded and installed from ClearPass Policy Manager’s software update portal at,
• Administration > Agents and Software Updates > Software Updates.
• For ClearPass appliances which do not have access to the Internet, the upgrade image is available on the Aruba Networks support site at, 
• Downloads > ClearPass > Policy Manager > Current Release > Upgrade
• Evaluation and production VM images are available on the Aruba Network support site at,
• Downloads > ClearPass > Policy Manager > Current Release
• ClearPass Evaluation downloads and other locations will be updated to point to 6.4.0 images shortly.

 

VM Install and Upgrade to 6.4.0: 

• Please review the attached Tech Note about installing or upgrading on a Virtual Machine. 
• If you are upgrading to 6.4.0 from 6.1.X or 6.2.X releases, then you have to attach a larger hard disk. Please review the disk requirements in the attached Tech Note. 

Hello all,

ClearPass 6.3.0 Cumulative Patch 5 is now available.

You should see the cumulative patch in ClearPass Policy Manager’s software update portal screen. It is under the list of “Firmware and Patch updates”. The cumulative patch is also available on our support site (support.arubanetworks.com<http://support.arubanetworks.com>) at the following location.

Download Software > ClearPass > Policy Manager > Archives > 6.3.X > Patches > ClearPass 6.3.0 Cumulative Patch 5<http://support.arubanetworks.com/DownloadSoftware/tabid/75/EntryId/14947/DMXModule/510/Default.aspx>

Hello all,

 

ClearPass 6.4.0 Cumulative Patch 1 is now available. Release notes are attached to this email. Customers should see the cumulative patch in ClearPass Policy Manager’s software update portal screen. It is under the list of "Firmware and Patch updates". The cumulative patch is also available on our support site (support.arubanetworks.com) at the following location.

 

Download Software > ClearPass > Policy Manager > Current Release > Patches > 6.4.0 Cumulative Patch 1

Hello all, 

 

ClearPass 6.3.0 Cumulative Patch 6 is now available. Release notes are attached. Please review chapter 3 of the Release notes for what's new in this release.

 

Customers should see the cumulative patch in their ClearPass Policy Manager’s Software update portal screen.  It should be visible in the "Firmware and Patch updates” section. The patch is also available on our support site (support.arubanetworks.com) at the following location. 

 

Download Software > ClearPass > Policy Manager > Archives > 6.3.X > Patches > ClearPass 6.3.0 Cumulative Patch 6

ClearPass 6.4.0 Cumulative Patch 2 is now available. Release notes are attached to this email.  The patch is available for download in the ClearPass Software Update Portal and also from support.arubanetworks.com at this location:

 

• Download Software > ClearPass > Policy Manager > Current Release > Patches > 6.4.0 Cumulative Patch 2

Hello all 

 

ClearPass 6.4.0 Cumulative Patch 3 is now available. Release notes are attached to this email. The patch will be available download in the ClearPass Software Update Portal and also from support.arubanetworks.com at this location. 

 

Download Software > ClearPass > Policy Manager > Current Release > Patches > 6.4.0 Cumulative Patch 3

Hello all, 

 

The latest version of ClearPass Cluster Upgrade Tool is now available.

 

This has been uploaded to the following locations on support.arubanetworks.com,

 

• Download Software > ClearPass > Policy Manager > 6.2.0 > Upgrade > ClearPass Cluster Upgrade Tool.
• Download Software > ClearPass > Policy Manager > 6.3.x > Upgrade > ClearPass Cluster Upgrade Tool.
• Tools and Resources > ClearPass > ClearPass Cluster Upgrade Tool.

Hello all,

 

ClearPass 6.4.0 Cumulative Patch 4 is now available. The patch will be available shortly to download in the ClearPass Software Update Portal and also from the support.arubanetworks.com at this location. 

 

Download Software > ClearPass > Policy Manager > Current Release > Patches > 6.4.0 Cumulative Patch 4

A few of you have might have noticed the 6.5 upgrade is showing up in the updates on your CPPM servers. The new images and files will be posted in the next day or so if you need to do a new VM install. The off line files are available on the support site.

 

http://support.arubanetworks.com/DownloadSoftware/tabid/75/DMXModule/510/EntryId/16476/Default.aspx 

 

I will post a announcement to the running post when the files are ready. 

 

Big props and Kudos to all the great ideas coming in from customers and the engineers, and guys that put it all together. 

 

Make sure you keep an eye out at atmosphere for Product Management, Technical Marketing (@dannyjump), @cjoseph myself and the Great MVPs that help out on the post here. I believe fast finger freddie AKA @cappalli, @victorfabian and many others will also be running around so make sure you say hi.

 

Please remember to read the release notes before you upgrade and make sure you take a current backup and/or VM snapshot. 

Hello all,

 

The ClearPass 6.4.0 Cumulative Patch 5 is now available. Release notes are attached. The patch file is available for download in the ClearPass Software Update Portal and also from the support.arubanetworks.com at the following location. 

 

Download Software > ClearPass > Policy Manager > Archives > 6.4.0 > Patches

Hello all,

The ClearPass 6.5.0 Cumulative Patch 1 (ClearPass 6.5.1) is now available. The patch file is available for download in the ClearPass Software Update Portal and also from the support.arubanetworks.com at the following location.

Download Software > ClearPass > Policy Manager > Current Release > Patches

Hyper-V image is officially released with 6.5.1 and available at,

Download Software > ClearPass > Policy Manager > Current Release > Hyper-V


Download Software > ClearPass > Policy Manager > Current Release > Release Documentation


Best regards,

The ClearPass Team

Hello all,

 

The ClearPass 6.4.0 Cumulative Patch 6 is now available. Release notes are attached. The patch file is available for download in the ClearPass Software Update Portal and also from the support.arubanetworks.com at the following location. 

 

Download Software > ClearPass > Policy Manager > Archives > 6.4.0 > Patches

 

Hello all,

The ClearPass 6.5.0 Cumulative Patch 2 is now available

A few feature highlights in this release include:

* VMWare ESXi 6.0 support
* Ability to store the local user passwords in reversible encryption which is useful for applications involving EAP-MD5 (e.g. VoIP Phones)
* Support for TLS 1.2
* Guest API enhancements
* OnGuard Unified Agent now includes the latest VIA code update, v.2.1.1.8

Additional features and bug fixes are detailed in the attached release notes.

The patch file is available for download in the ClearPass Software Update Portal and also from the support.arubanetworks.com at the following location.

Download Software > ClearPass > Policy Manager > Archives > 6.5.0 > Patches<https://support.arubanetworks.com/DownloadSoftware/tabid/75/DMXModule/510/Default.aspx?EntryId=16475>

On July 9th 2015, the OpenSSL Project reported a high-severity vulnerability in certain versions of OpenSSL. The vulnerability affects processing of certificate trust chains. ClearPass version 6.5.2 which was released on June 26th 2015 and contains OpenSSL version 1.0.1o which is affected by the vulnerability. No other ClearPass releases are affected by this issue.

Additional details can be found in the updated security advisory which is attached and will be updated shortly on the public Security Advisory page.

The patch file is available for download in the ClearPass Software Update Portal and also from the support.arubanetworks.com at the following location.

Download Software > ClearPass > Policy Manager > Archives > 6.5.0 > Patches

Hello all,

 

The ClearPass 6.4.0 Cumulative Patch 7 is now available. 

 

In addition to several bug fixes, this release also includes OnGuard support for Windows 10! Additional details can be found in the attached release notes.

 

The patch file is available for download in the ClearPass Software Update Portal and also from the support.arubanetworks.com at the following location. 

 

Download Software > ClearPass > Policy Manager > Archives > 6.4.0 > Patches

Hello all,

 

The ClearPass 6.5 Cumulative Patch 3 is now available. 

 

In addition to several bug fixes, this release also includes Windows 10, Guest API and OnGuard enhancements. 

 

While it was our desire to have full OnGuard Windows 10 support in 6.5.3, we have found an issue with the 64-bit version of the OS that we want to make sure you are aware of and is documented as a known issue in the release notes (attached).

• Symptoms:
• Health checks on Windows 10 64-bit systems might take longer than on Windows 10 32-bit or earlier Windows releases.
• The “Windows Security Health Validator”plugin does not properly detect automatic and/or security updates on Windows 10 64-bit systems.

The patch file is available for download in the ClearPass Software Update Portal and also from the support.arubanetworks.com at the following location. 

 

Download Software > ClearPass > Policy Manager > Current Release > 6.5.0 > Patches

 

 

• The Support site’s Download Software page for the current release at
  https://support.arubanetworks.com/DownloadSoftware/tabid/75/DMXModule/510/EntryId/16532/Default.aspx

 

The Support site’s Documentation page for ClearPass 6.5 Release Notes at

 

 https://support.arubanetworks.com/DownloadSoftware/tabid/75/DMXModule/510/Default.aspx?EntryId=18576

 

ClearPass 6.5.3 OnGuard for Windows 10 64-bit hotfix is now available!

 

Hello all,

 

The ClearPass 6.5.3 OnGuard for Windows 10 64-bit hotfix is now available. 

 

 

This hotfix addresses bug #30090 which had the following symptoms:

• Symptoms:
• Health checks on Windows 10 64-bit systems might take longer than on Windows 10 32-bit or earlier Windows releases.
• The “Windows Security Health Validator”plugin does not properly detect automatic and/or security updates on Windows 10 64-bit systems.

This patch does NOT require a reboot of the ClearPass appliance.

 

The patch file is available for download in the ClearPass Software Update Portal and also from the support.arubanetworks.com at the following location. 

 

Download Software > ClearPass > Policy Manager > Current Release > 6.5.0 > Patches

 

For those that follow this thread. Release announcement.

http://community.arubanetworks.com/t5/AAA-NAC-Guest-Access-BYOD/ClearPass-6-4-7-6-5-3-OnGuard-for-OS-X-10-11-amp-Windows-10-64/td-p/248186

Hello all,

The ClearPass 6.5 Cumulative Patch 4 is now available. The release notes are attached to this email.

This release includes two new Guest Transaction Processors, Wirecard and PayPall Express, as well as incorporates the OnGuard enhancements we made through the ClearPass 6.5.3 OnGuard for OS X 10.11 & Windows 10 64-bit Hotfix.

This cumulative patch also addresses the issue we saw with hardware appliance deployments that used the Cluster Upgrade Tool v2 to get to 6.5.0 and then encountered NIC issues when updating to 6.5.3. We will be re-posting the Cluster Upgrade Tool v2 in the next 24 hours or so.

The patch file is available for download in the ClearPass Software Update Portal and also from the support.arubanetworks.com at the following location.

Download Software > ClearPass > Policy Manager > Current Release > 6.5.0 > Patches

Hello all,
 
The ClearPass 6.5 Cumulative Patch 5 is now available.

In addition to several bug fixes, this release also includes several new enhancements:

* Updates to the HP RADIUS dictionary to support new features in upcoming ArubaOS-Switch (formerly ProVision) 16.01 release.
* New entries in the Guest "Vendor Settings" drop-down lists to simplify captive-portal configurations for ArubaOS-Switch, MSM and UWW platforms.
* Adds detection support for several new and updated products to OnGuard (see release notes for more details).

The patch file is available for download in the ClearPass Software Update Portal and also from the support.arubanetworks.com at the following location.
 
Download Software > ClearPass > Policy Manager > Current Release > 6.5.0 > Patches

Best regards,
 
The ClearPass Team

Hello all,
 
I am proud to announce the immediate availability of ClearPass 6.6! The ClearPass team has put a lot of hard work into many new features:

• Revamped Insight Reporting
• Ingress Event Engine
  • Be sure to check out Danny Jump's technote on this.
• Juniper Networks SRX Integration
  • Danny's been busy here too and has a technote.
• Network Discovery & Custom Fingerprints
• Multi-Factor Authentication through Captive Portal
• OnGuard as a System Service on Windows
• And many MORE!

There are several changes in default behavior from previous releases so please take note of the Important Changes section of the release notes.

The installer and upgrade images have been posted to the support site. The upgrade is also available via the Software Updates portal on the appliances themselves.

A big thanks and congratulations to the ClearPass Engineering and QA teams for reaching this milestone!

Best regards,
 
The ClearPass Team

 

### Edited after for posting to update Ingress Event Engine technote link.

Thread name changed to: ClearPass Release Announcements 

On April 12th, 2016, a crucial security bug in Windows and Samba was disclosed. The MS-SAMR and MS-LSAD protocol implementations in Samba 3.x and 4.x before 4.2.11, 4.3.x before 4.3.8, and 4.4.x before 4.4.2 mishandle DCERPC connections, which allows man-in-the-middle attackers to perform protocol-downgrade attacks and impersonate users by modifying the client-server data stream, aka BADLOCK.

This vulnerability in Samba could allow an attacker with the ability to intercept traffic (man in the middle) between a ClearPass Policy Manager server and a Windows Active Directory server to get read/write access to the Security Account Manager database, which reveals all passwords and other potential sensitive information.

Additional details can be found in ARUBA-PSA-2016-003.

A Hotfix patch for ClearPass 6.4.7, 6.5.5 and 6.6.0 is available for download in the ClearPass Software Update Portal and also from the support.arubanetworks.com at the following location.

 

6.4.7
Download Software > ClearPass > Policy Manager > Archives > 6.4.0 > Patches

6.5.5
Download Software > ClearPass > Policy Manager > Archives > 6.5.0 > Patches

 

6.6.0
Download Software > ClearPass > Policy Manager > Current Release > Patches

Thank You,

The ClearPass Team

 

# Edited one of the links after posting.

Hello all, 

I am proud to announce the immediate availability of ClearPass 6.6.1! Despite being a maintenance release, there are several new features that our Engineering and QA team worked tirelessly to include in this release:

• OnConnect Enforcement
  • Sneak Peak: This feature enables ClearPass to detect and apply enforcement to endpoints connected to wired switches without the need to enable AAA methods such as 802.1x or MAC Authentication. Shocking… I know.
• Enhancements to Guest account expiration handling
• New Insight Reports including a long awaited Social Login Report
• Password lockout options for Admin and Local User databases as well as the AppAdmin SSH account
• SSO can now be independently enabled between guest web logins and guest operator logins
• Enhanced support for Airwatch and SOTI MDM/EMM vendors
• Improvements to Network Discovery for greater endpoint visibility
• Blacklisting based upon bandwidth consumed and session duration is now available.
• Several new APIs and enhancements to existing APIs
• And much, much MORE!

While not a new feature in 6.6.1 per say, this is the first release you can now try out the Cluster Update interface which was introduced in 6.6.0. This capability helps automate the installation of patches such as this one and we think it will go a long way to make updates and upgrades a smoother experience. If you typically use the Software Updates portal to upgrade your cluster, make sure to install the ClearPass 6.6.0 Cluster Update Interface Patch first before downloading the 6.6.1 patch and starting the Cluster Update Interface.

As always, please take note of the Important Changes section of the release notes in addition to an improved End of Support section based upon customer feedback.

The update images have been posted to the support site and the software updates portal.

A big thanks and congratulations to the ClearPass Engineering and QA teams for reaching this milestone!

Best regards,
 
The ClearPass Team

Hello all,
I am proud to announce the immediate availability of ClearPass 6.6.2! There are several new features that our Engineering and QA team have worked tirelessly to include in this release:

 

• OnConnect Configuration & Scaling Enhancements
  • Cluster support is now available!
• OnGuard External Script Remediation
  • Ability for OnGuard to use an External script hosted locally on the client or on a server for auto-remediation tasks.
• OnGuard AND/OR match conditions in the Services health class in Windows
• Endpoint Profiling using Nmap
• Onboard Registration Authority/SCEP-Proxy Support
• New Social and Property Management System Enhancements
• Platform Enhancements and Security Improvements
• Several new APIs and enhancements to existing APIs
• And much, much MORE!

As always, please take note of the Important Changes section of the release notes (attached).

The update images have been posted to the support site and the software updates portal.

A big thanks and congratulations to the ClearPass Engineering and QA teams for reaching this milestone!

Best regards,
The ClearPass Team

Hello all,
I am proud to announce the immediate availability of ClearPass 6.6.3! There are several new features that our Engineering and QA team have worked tirelessly to include in this release:

· Profiling Enhancements
o Support for Netflow v5, v9 and IPFIX
o Ability to fetch service and process information using WMI
· Enhanced Support for third parties
o MS-CHAP support for Xirrus WLAN controllers
o Ability to fetch more public attributes from Facebook and LinkedIn social logins
· Improved MFA workflows
o Built-in support for Kasada
· Insight Enhancements
· OnGuard Enhancements
o Added support for several new products and enhanced existing ones
o New attribute for service rules
· Common Criteria Certification Features
o It may have taken us a little bit to get to this point but we’re now ready to knock out that certification!
· IPSec Enhancements
o Traffic selectors
· Security Improvements
o Ability to disable TLS 1.1
o Better visibility when there are attempts to login using unsupported protocols and/or algorithms
· Several new APIs
· And much, much MORE!

All,

We're happy to announce the immediate availability of ClearPass 6.6.4! There are several new features that our Engineering and QA team have worked tirelessly to include in this release:

 

• Profiling Enhancements
• Custom fingerprints will NOW always be evaluated before the downloaded fingerprints.
• Enhanced Support for third parties
• ClearPass now sends the user’s ClearPass role information to Palo Alto Networks firewalls during login. The role is unregistered from the firewall when the user logs out.
• OnGuard Enhancements
• The Windows Hotfixes Health class now supports checking of hotfix groups.
• The Patch Management Health class now allows for AND/OR conditions between patch management products.
• Added support for Windows Server 2012 and 2012 R2
• Added support for French localization of the OnGuard Agent
• OnConnect Enhancements
• ClearPass now supports MAC Notification Traps from ArubaOS-Switches.
• Hypervisor Support Enhancements
• Validated support for VMware vSphere Hypervisor 6.5 (previously known as ESXi)
• Validated support for Microsoft Hyper-V 2016 and Windows Server 2016 with Hyper-V

 

As always, please be sure to look over the release notes!

 

>> 6.6.4 Release Notes

 

Enjoy!

All,

 

We're proud to announce the immediate availability of ClearPass 6.6.5! In addition to bug fixes, this release also includes several new features that our Engineering and QA team have worked tirelessly to include:

 

• OnGuard Enhancements
• The Native Dissolvable Agent is now supported on the Microsoft Edge browser.
• Support has been added for optional server certificate validation between the persistent agent and the ClearPass appliance.
• The ability to auto-remediate ‘Disable USB Mass Storage Device’ has now been added to Windows 64-bit operating systems.
• Profiling & Endpoint Management Enhancements
• Subnet scans can now be scheduled with greater flexibility. You can specify a time of day for the scan to start, and can set the frequency to be hourly, daily, or weekly. You can now also use zones to distribute the scanning load amongst members in the cluster.
• For situations where an endpoint can only be found on a ‘trunk’ interface, the endpoint view will now display that detail providing better traceability to the location of an endpoint.
• Support has been added to the admin UI to allow an admin to bulk update endpoints.
• Enhanced Support for third parties
• As a follow-up to the 6.6.4 integration enhancement to Palo Alto Networks, customers can now optionally choose whether to send profiler context and/or ClearPass role information. This is especially useful when sharing context to lower end firewalls.
• The RADIUS accounting proxy functionality has been enhanced to ensure accurate information is sent to third parties when wireless users roam in certain situations.
• Reporting
• Endpoint attributes can now be included in insight syslog export filters providing greater visibility to platforms such as ArcSight, Splunk, etc.
• Security
• This release includes the Apache Struts fix as identified in CVE-2017-5638.

 

As always, please take note of the ‘Changes of Behaviors’ section of the release notes.

 

The update images have been posted to the support site (Aruba Support site) and the software updates portal.

 

A big thanks and congratulations to the ClearPass Engineering and QA teams for reaching this milestone!

 

Best regards,

 

The ClearPass Team

 

>> 6.6.5 Release Notes

 

 

 

All,

We are proud to announce the immediate availability of ClearPass 6.6.7! In addition to bug fixes, this release also includes several new features that our Engineering and QA team have worked tirelessly to include:

• Aruba Integration
  • Support for ArubaOS-Switch Downloadable Roles (requires AOS-SW 16.04)
• Logging/Alerting
  • Trigger system event when OCSP server checks and/or CRL download fails
• Authentication
  • Ability to fall back from OCSP to CRL when OCSP is unavailable
  • Ability to write TACACS+ policies matching on Service type
• Enhanced Support for Third Parties
  • Support for Palo Alto Networks timeout variable.
  • A new “Compliance” attribute for endpoint entities added to support Airwatch compliance flags
• Insight
  • New Guest Devices-Expired report
  • New Guest Users-Expired report
• Onboard
  • Ability to customize the ‘subject’ used in certificate signing request (CSR) when defining a new Registration Authority
• OnGuard
  • Upgraded OnGuard Plugin (OEISIS SDK) from v3 to v4)
  • Ability to learn OS Build Number for use with Windows 10 posture policies
  • Automatic language change based on Windows OS settings (English, French, Japanese, and Korean)
  • Ability to present a custom wizard/interface to guide users through remediation
  • Ability to modify the way OnGuard agent communicates with ClearPass (FQDN, IP, or hostname)
• Platform
  • Support for NTP authentication
  • Added Console timeout support and unified WebUI timeout
  • Notify successful/unsuccessful logins & last login information in Console, SSH, and WebUI when running in Common Criteria mode

 

As always, please take note of the ‘Changes of Behaviors’ section of the release notes (attached).

 

The update images have been posted to the support site (Aruba Support site) and the software updates portal.

 

A big thanks and congratulations to the ClearPass Engineering and QA teams for reaching this milestone!

 

Best regards,

The ClearPass Team

New hotfix for ClearPass 6.6.7 now available

This hotfix patch will includes the following features:

• Support for SMBv2 and SMBv3
  (commonly used with PEAPv0/EAP-MSCHAPv2)
• Ability to use SMB v3 and SMBv2 automatically
  • SMBv3 will be preferred
  • SMBv2 will be used only if SMBv3 is not enabled on server
  • SMBv1 will be used only if SMBv2 is not enabled on server
• Resolves RADIUS server crash when EAP-TLS clients send zero length certificates during TLS exchange

This patch should be applied after upgrading to ClearPass 6.6.7 for customers leveraging EAP-TLS and/or MSCHAP-based EAP methods (commonly PEAPv0/EAP-MSCHAPv2).

 

The patch has been posted to the support site (Aruba Support site) and the software updates portal.

 

Hotfix release notes: http://www.arubanetworks.com/techdocs/ClearPass/CP_ReleaseNotes_6.6.7_HOTFIX_SMBv1-v2/Default.htm

We are pleased to announce the immediate availability of ClearPass 6.6.8!  This release is predominantly around bug and security fixes.  Some of the issues resolve in this release that our Engineering and QA team have worked tirelessly to include:

 

• SMB v2/v3 Support
• Roll-up of 6.6.7 hot fix for SMB support
• OnGuard support for MacOS 10.13 (High Sierra)
• Security Fixes for the following vulnerabilities
• CVE-2017-9804 and CVE-2017-12611  (Apache Struts)
• CVE-2017-9001 and CVE-2017-9002 (ClearPass)
• CVE-2017-9224, CVE-2017-9226, CVE-2017-9227, CVE-2017-9228, and CVE-2017-9229 (PHP)

 

 As always, please take note of the "Changes of Behaviors" section of the release notes (attached).

 

The update images have been posted to the support site (Aruba Support site) and the software updates portal.

 

A big thanks and congratulations to the ClearPass Engineering and QA teams for reaching this milestone & to the TechPubs team for their work on the Release Notes and manuals!

 

Best regards,

The ClearPass Team

Hello All,

 

We are pleased to announce the immediate availability of ClearPass 6.6.9 In addition to bug fixes, this release also includes several new features that our Engineering and QA team have worked tirelessly to include:

 

• Support and Enhancements for Numerous updated and new 3^rd party OnGuard plugins, please review the Release Notes for details.

 

• A new Cluster-wide parameter, Allow Concurrent Admin Login
  •  When this parameter is set to FALSE, if a user logs in to a new session but earlier sessions for the same credentials are still active on other appliances, all earlier sessions will automatically be logged out.
  •  When this parameter is set to TRUE, a user will be able to log in to concurrent sessions on different appliances.

As always, please take note of the ‘Changes of Behaviors’ section of the release notes.

 

The update images have been posted to the support site (Aruba Support site) and the software updates portal.

 

A big thanks and congratulations to the ClearPass Engineering and QA teams for reaching this milestone & to the TechPubs team for their work on the Release Notes and manuals!

 

Best regards,

The ClearPass Team

Hello All,

 

We are pleased to announce the immediate availability of ClearPass 6.6.10 ! In addition to bug fixes, this release also includes several new features that our Engineering and QA team have worked tirelessly to include:

 

• Support to install OnGuard and VIA 3.2.2+ together
• Allows customers to use latest VIA and OnGuard together
• Support to disable ClearPass machine account password expiration
• Add 256-bit cipher suite support to AD/LDAP authentication sources

 

This release marks the ClearPass 6.6 End of Development as indicated on http://www.arubanetworks.com/support-services/end-of-life/.

 

As always, please take note of the ‘Changes of Behaviors’ section of the release notes (attached).

 

The update images have been posted to the support site (Aruba Support site) and the software updates portal.

 

A big thanks and congratulations to the ClearPass Engineering and QA teams for reaching this milestone & to the TechPubs team for their work on the Release Notes and manuals!

 

Best regards,

The ClearPass Team

Hello All,

 

We would like to announce the immediate availability of ClearPass 6.6.10 Hotfix for Security and OnGuard!  Even though ClearPass 6.6 has already reached End of Development (EoD) milestone as documented on the End of Life webpage, we felt that the security of these warranted the release of a hotfix for our customers who have not yet upgraded to ClearPass 6.7.  While this hotfix is primarily focused on security fixes to ClearPass 6.6, it does also include several OnGuard updates, including adding support for macOS Mojave. ClearPass 6.6 will go End of Support (EoS) on April 6th 2019 and so we strongly ask that you continue to remind your customers to upgrade to ClearPass 6.7. The release of this hotfix does not extend ClearPass 6.6’s lifespan and should not set any expectation that there will be more hotfixes for that release train.

 

This hotfix can only be installed on 6.6.10 systems.

 

Please read the Release Notes to find a complete list of all issues solved in this patch. (https://www.arubanetworks.com/techdocs/clearpass/cp_releasenotes_6.6.10_hotfix_security_and_onguard /default.htm).

 

The update images have been posted to the support site (Aruba Support site), MNP, ASP, and the software updates portal. 

 

A big thanks and congratulations to the ClearPass Engineering and QA teams for reaching this milestone & to the TechPubs team for their work on the Release Notes!

 

Best regards,

The ClearPass Team