Security

last person joined: yesterday 

Forum to discuss Enterprise security using HPE Aruba Networking NAC solutions (ClearPass), Introspect, VIA, 360 Security Exchange, Extensions, and Policy Enforcement Firewall (PEF).
Back to discussions
Expand all | Collapse all

Clearpass access-tracker filter, can we have a "does not contain" option

This thread has been viewed 6 times

  • 1.  Clearpass access-tracker filter, can we have a "does not contain" option

    Posted Oct 21, 2014 06:52 AM

    Hi,

    When using live monitoring/access tracker you can filter results using "contains" or "equals"

     

    Our clearpass servers are accessed via an F5 load balancer so theres a LOT of F5 health check auths going on as well.... so many in fact that it in general it floods the Access Tracker window. It would be nice to be able to set up a filter to say for example "username does not equal / contain f5healthcheck"  so I can actually see what;s going on with real traffic instead of the "noise" of health checking

    Rgds

    A



  • 2.  RE: Clearpass access-tracker filter, can we have a "does not contain" option
    Best Answer

    EMPLOYEE
    Posted Oct 21, 2014 07:46 AM
    You can do this by creating a custom data filter under the view settings at the top of Access Tracker. This is a great way to hide AirGroup Authorization requests as well.


  • 3.  RE: Clearpass access-tracker filter, can we have a "does not contain" option

    Posted Oct 21, 2014 09:06 AM

    Cool!

    Just what I wanted

     

    Thx

    Alex



  • 4.  RE: Clearpass access-tracker filter, can we have a "does not contain" option
    Best Answer

    EMPLOYEE
    Posted Oct 21, 2014 12:20 PM

    If you're exporting access logs via Syslog, you can also use these data filters to filter that data as well.



  • 5.  RE: Clearpass access-tracker filter, can we have a "does not contain" option

    Posted Oct 21, 2014 12:34 PM

    Even better.

    I'm actually waiting for 6.5 to come out so I can proxy accounting off to another server. Our FreeRadius service dumps stuff into a mysql DB, so it would be nice to havde all radius accounting in the same place ....

    A