Security

last person joined: 21 hours ago 

Forum to discuss Enterprise security using HPE Aruba Networking NAC solutions (ClearPass), Introspect, VIA, 360 Security Exchange, Extensions, and Policy Enforcement Firewall (PEF).
Back to discussions
Expand all | Collapse all

Clearpass TACACS+ report - does it show you the commands executed?

This thread has been viewed 0 times

  • 1.  Clearpass TACACS+ report - does it show you the commands executed?

    EMPLOYEE
    Posted Jul 05, 2017 11:35 AM

    Hi there,

     

    is it possible to get a report from Clearpass 6.6 with all the commands that a specific user has executed for a specific time?  

     

    I can see the commands executed under "Monitoring - Accounting", but not sure if there is a posibility of getting it exported to a CSV/PDF for a specific user that has contacted multiple devices. 

     

    Basically I would like to use clearpass as a replacement of ACS but have not worked out yet how to get that info.

     

    Many thanks



  • 2.  RE: Clearpass TACACS+ report - does it show you the commands executed?

    EMPLOYEE
    Posted Jul 05, 2017 11:37 AM
    The commands should be listed in the CSV export.


  • 3.  RE: Clearpass TACACS+ report - does it show you the commands executed?

    EMPLOYEE
    Posted Jul 05, 2017 03:39 PM

    I see it in the "Sample" report.

     

    I'm sure I'm missing something but looking at the screenshots, you can see that the executed commands are available in the access tracker but not in the CSV.

     

    I attached the report config just in case that's what I'm doing incorrectly.

     

     

    Thanks