Security

last person joined: yesterday 

Forum to discuss Enterprise security using HPE Aruba Networking NAC solutions (ClearPass), Introspect, VIA, 360 Security Exchange, Extensions, and Policy Enforcement Firewall (PEF).
Back to discussions
Expand all | Collapse all

Disable Onguard AutoUpdate on some geographic zone

This thread has been viewed 0 times

  • 1.  Disable Onguard AutoUpdate on some geographic zone

    Posted Mar 02, 2020 08:52 AM

    Hello,
    I would like to know if It's possible right now to disable Clearpass Onguard Auto-Update feature for some geographic Area and keep it activated on other. I'm in 6.7.11 for now.
    If it's currently possible where can I do the change ? in the policy Manager Zones part ? or somewhere else ?

     

    Thanks in advance for your responses.



  • 2.  RE: Disable Onguard AutoUpdate on some geographic zone
    Best Answer

    Posted Mar 12, 2020 08:32 AM

    I got my answer from TAC support

     

     



  • 3.  RE: Disable Onguard AutoUpdate on some geographic zone

    MVP GURU
    Posted Mar 23, 2020 11:01 PM

    Was the fix an attribute in the agent enforcement profile?



  • 4.  RE: Disable Onguard AutoUpdate on some geographic zone

    Posted Mar 30, 2020 09:19 AM

    Hey,

     

    No the fix comes from the configuration in Onguard Settings => Policy Manager Zones.
    You just need to put the IP scope where you want the auto update to occur.
    For the IP scope you don't want the Auto Update of Onguard, just don't put this IP scope in the Policy Manager Zones.

    At least, that what the TAC told me

    Regards.