Security

I am trying to track down the actual MIBs for ClearPass 6.2.x - and I cannot locate them on Aruba's support website.  Any assistance would be greatly appreciated.

CPPM doesn't use private mibs as of today.

So question two of I am confident many more to come.  Are there specific hardware or software mibs for the solution?  I found your SNMP walk but am unclear as to the level of monitoring available for hardware and services>

From Arubapedia

Overview

ClearPass supports standard host MIB which provides up/down, disk, CPU, memory and a variety of other alerts. This can be monitored by Airwave or a 3rd party tool supporting SNMP. In addition we can send events and alerts through syslog to any SIEM (or Airwave) where you can construct the appropriate filters needed to trigger alerts, etc. Finally we have our own internal alerting capabilities through Insight (the reporting engine). Insight allows you to send an email/sms based on an alert, this email could obviously trigger some other workflow in 3rd party systems.

Thank you sir - appreciate the quick reply. Awesome as expected.

Tom if you have partner access here is the link on arubapedia with monitoring details

https://afp.arubanetworks.com/afp/index.php/ClearPass_Monitoring_and_Alerting

Question

What traps does Clearpass send to External server.

Answer

Policy Manager sends SNMP traps that expose the following server information:   System uptime:  Conveys information about how long the system is running Network interface statistics [up/down]:  Provides information if the network interface is up or down. Process monitoring information:  Check for the processes that should be running. Maximum and minimum number of allowed instances. Sends traps if there is a change in value of maximum and minimum numbers. Disk usage: Check for disk space usage of a partition. The agent can check the amount of available disk space, and make sure it is above a set limit. The value can be in % as well. Sends traps if there is a change in the value. CPU load information: Check for unreasonable load average values. For example if 1 minute CPU load average exceeds the configured value [in percentage] then system would send the trap to the configured destination. Memory usage:  Report the memory usage of the system. The Policy Manager SNMP Trap Configuration page at Administration > External Servers > SNMP Trap Receivers

Thank you for the information - very helpful.