Security

Reply
Highlighted
Aruba Employee

How to: Configure Gmail SMTP as Messaging Server (working on CPPM 6.9.1)

Configure Gmail SMTP as Messaging Server on CPPM 6.9.1

 

CPPM version:  6.9.1.130252

 

1. Select Administration / External Servers / Endpoint Context Servers / Add

Image 2020-06-14 at 10.33.01 AM.png.png

 

2. In Server tab, input the following

 

Select Server Type: Generic HTTP Context Server

Server Name: mail.google.com

Server Base URL: https://mail.google.com 

Validate Server: Check Enable to validate the server certificate

Image 2020-06-14 at 1.43.52 PM.png.png

 

3. In Certificates tab, verify two certificates have been added to the Certificate Trust List, click Save

Image 2020-06-14 at 10.38.29 AM.png.png

 

4. Select Administration / Certificates / Trust List, sort the list by Enabled column. You should see the two certificates are enabled.

Image 2020-06-14 at 2.03.19 PM.png.png

 

5. Click the two Certificates respectively and add SMTP in the Usage list, click UpdateImage 2020-06-14 at 2.05.11 PM.png.pngImage 2020-06-14 at 2.04.39 PM.png.png

 

6. Verify SMTP has added updated in the Usage column

Image 2020-06-14 at 2.07.04 PM.png.png

 

7. Configure Gmail login for SMTP

 

Spoiler

Option a: With 2-Step Verification enabled in Gmail account

Pro: More secure, recommended

Con: Have to generate a new App password

 

Option b: Without 2-Step Verification enabled in Gmail account

Pro: Can use the original Gmail account password

Con: Less secure, not recommended

Option a: With 2-Step Verification enabled in Gmail account

 

(For how to turn on 2-Step Verification, please refer to this link: https://support.google.com/accounts/answer/185839?co=GENIE.Platform%3DDesktop&hl=en)

 

7a-1. Go to Manage your Google Account / Security / App passwords

Image 2020-06-14 at 2.13.31 PM.png.png

7a-2. Select Other (Custom name)

Image 2020-06-14 at 2.14.07 PM.png.png

7a-3. Type an App name, click Generate

Image 2020-06-14 at 2.14.32 PM.png.png

 

7a-4. An app password will be generated, save it for later purpose. Click Done

Image 2020-06-14 at 2.14.54 PM.png.png

Option b: Without 2-Step Verification enabled in Gmail account

 

7b-1. Go to Manage your Google Account / Security / Less secure app access / Turn on access (not recommended)

Image 2020-06-14 at 2.31.52 PM.png.png

 

7b-2. Turn Allow less secure apps: ON

Image 2020-06-14 at 2.33.40 PM.png.png

 

8. Go back to ClearPass, select Administration / External Servers / Messaging Setup, input the following SMTP setting

 

Server name: smtp.gmail.com

Connection Security: SSL Port: 465 or Connection Security: StarTLS Port: 587

User Name: YOUR_GMAIL@gmail.com

Password:

  • For option a, input Generated app Password
  • For option b, input original Gmail password

Verify Password:

  • For option a, input Generated app Password
  • For option b, input original Gmail password

Default From address: YOUR_GMAIL@gmail.com

 

Click Save

Image 2020-06-14 at 2.21.06 PM.png.png

 

9. Click Send Test Email

Image 2020-06-14 at 2.25.59 PM.png.png

 

10. Input Recipient Email Address and Message, click Send Email

Image 2020-06-14 at 2.25.05 PM.png.png

 

11. You should see a successful message

Image 2020-06-14 at 2.25.26 PM.png.png

 

Troubleshooting:

 

In case you cannot get a successful message, you can review the event viewer to understand the reason.

 

Go to Monitor / Event Viewer

 

vchow_0-1592125218917.png

 

Error 1 - Possible reasons:

  • Make sure Endpoint Context Servers is configured
  • Review Certificates / Trust List, make sure SMTP is in the usage list
  • Check DNS / IP address Setting if blocking the outgoing traffic
  • Check your firewall / ACL / Antivirus Setting if blocking the outgoing traffic

Image 2020-06-14 at 2.36.58 PM.png.png

 

Error 2 - Possible reasons:

  • Make sure you input the correct username/password
  • Make sure you have configured the Gmail account setting

Image 2020-06-14 at 2.32.59 PM.png.png

Search Airheads
cancel
Showing results for 
Search instead for 
Did you mean: