Security

Hello,

I noticed that ClearPass is showing wrong information in the SNMP SysDescr field.

In a cluster the Publisher shows the former firmware release and the subscriber shows the current firmware.

$ snmpwalk -v2c -c XXXX x.x.x.221 .1.3.6.1.2.1.1.1
SNMPv2-MIB::sysDescr.0 = STRING: ClearPass Policy Manager 6.8.4.120034, Model: C2000V, FIPS Mode: Disabled
$ snmpwalk -v2c -c XXXX x.x.x.222 .1.3.6.1.2.1.1.1
SNMPv2-MIB::sysDescr.0 = STRING: ClearPass Policy Manager 6.8.5.120250, Model: C2000V, FIPS Mode: Disabled

I am sure both are running 6.8.5.120250

I noticed the same with a 6.9.x installation. The publisher replies with 6.9.0 and the subscriber replies with 6.9.1.

Best regards,

Rob Hassing

Good find!

I tried this on 6.9 cluster and see that it is been reported correctly both on publisher and subscriber. Are you able to reproduce the issue consistently? 

snmpwalk -v2c -c XXXX <CPPM> .1.3.6.1.2.1.1.1
SNMPv2-MIB::sysDescr.0 = STRING: ClearPass Policy Manager 6.9.2.130454, Model: C1000V, FIPS Mode: Disabled
snmpwalk -v2c -c XXXX <CPPM> .1.3.6.1.2.1.1.1
SNMPv2-MIB::sysDescr.0 = STRING: ClearPass Policy Manager 6.9.2.130454, Model: C1000V, FIPS Mode: Disabled

I checked, and it's not on all installations. But I have at least the two I mentioned in my first post.

Two other installations I could check were both showing the correct information.

I noticed on the C2000V I get wrong information, but on the C1000V, I get the correct information.

If you can reproduce it consistently, please open a TAC case.