Security

last person joined: 2 days ago 

Forum to discuss Enterprise security using HPE Aruba Networking NAC solutions (ClearPass), Introspect, VIA, 360 Security Exchange, Extensions, and Policy Enforcement Firewall (PEF).
Expand all | Collapse all

Custom fingerprint generation

This thread has been viewed 3 times
  • 1.  Custom fingerprint generation

    Posted Sep 06, 2018 10:40 AM

    I've had some success at defining custom fingerprints for devices e.g. Amazon Echo that has a different OUI to the ones defined in CPPM Fimgerprint DB

     

    I've also had some failures .. e.g. defining a custom fingerprint for what I thought were a handful of devices ... and had a couple of thousand devices had their signature changed (on a test server!)

     

    So what would be a good procedure to use for restoring endpoint fingerprint definitions back to pre changed values?



  • 2.  RE: Custom fingerprint generation

    Posted Sep 06, 2018 11:24 AM
    Importing the backup of the fingerprints you took before making the changes. ;)



  • 3.  RE: Custom fingerprint generation

    Posted Sep 07, 2018 04:30 AM

    Doh! :-) Course you can.

    Thx



  • 4.  RE: Custom fingerprint generation

    EMPLOYEE
    Posted Sep 07, 2018 03:27 AM

    You can have a look at the API (https://<your.clear.pass>/api-docs/Dictionaries-v1#!/Fingerprint). There are some more operations like delete fingerprint available there.



  • 5.  RE: Custom fingerprint generation

    Posted Sep 07, 2018 04:31 AM

    o.k. that's a bit cooler. I'll have a look

    A



  • 6.  RE: Custom fingerprint generation

    Posted Sep 07, 2018 10:03 AM

    o.k. 

    So searching for a custom ingerprint I've already created gives me

     

    {
      "id": 100014,
      "category": "Home Audio/Video Equipment",
      "family": "Amazon",
      "name": "UoY Amazon Echo",
      "_links": {
        "self": {
          "href": "https://clearpass8.york.ac.uk/api/fingerprint/100014"
        }
      }
    }

     but the bit I'm interested in is whats in the "self" section. Which I guess is the actual conditions that dentify this custom fingerprint. So how do I get that info ? 



  • 7.  RE: Custom fingerprint generation

    Posted Sep 07, 2018 10:07 AM

    ... also .... when modifying a fingerprint ... need t oknow what goes into the body of the call....