Hi,
I checked this internally and it seems this feature is intended to detect "Evil twins" on the wired network. It is part of ClearPass 6.8.3. It detects if there is any system that has duplicate IP address, MAC address, to an existing network endpoint. OnGuard will notify Policy Manager of a potential Evil Twin so an action can be taken like to alert administrators and/or modify the access policy to quarantine the risk..