Security

 View Only
last person joined: yesterday 

Forum to discuss Enterprise security using HPE Aruba Networking NAC solutions (ClearPass), Introspect, VIA, 360 Security Exchange, Extensions, and Policy Enforcement Firewall (PEF).
Back to discussions
Expand all | Collapse all

Clearpass Intune alerts

This thread has been viewed 20 times

  • 1.  Clearpass Intune alerts

    Posted 4 days ago

    hi Airheads,

    anyone know of a way of getting an alert from Clearpass Intune service when it is not running ?

    we have a customer running Clearpass Azure with Intune extension running and the Intune extension periodically stops every couple of months.

    cheers

    Pete



  • 2.  RE: Clearpass Intune alerts

    EMPLOYEE
    Posted 4 days ago

    There is an application Log in ClearPass Guest

    As an automatic export you can use an SQL statement for customized Syslog message :
    You will be using a keyword to trigger syslog - in this example it is "store". This you have to customize to your demands.


    Original Message


  • 3.  RE: Clearpass Intune alerts

    Posted 4 days ago

    Hi

    It's also possible to read the logs from the API with /extansion/instance/{id}/log

    With the API you can also start/restart the service.



    ------------------------------
    Best Regards
    Jonas Hammarbäck
    MVP Guru 2024, ACEX, ACDX #1600, ACCX #1335, ACX-Network Security, Aruba SME, ACMP, ACSA
    Aranya AB
    If you find my answer useful, consider giving kudos and/or mark as solution
    ------------------------------

    Original Message


  • 4.  RE: Clearpass Intune alerts

    EMPLOYEE
    Posted 46 seconds ago

    If this happens regularly, please make sure that you have the restart-policy: always in your extension configuration:

    ....
        "userGroupUpdateSchedule": "*/30 * * * *",
        "bypassProxy": false,
        "enableStats": false,
        "restartPolicy": "always",
        "statsUsername": "",
        "statsPassword": "********"
    }

    And if the extension still stops, please open a TAC case. It can't hurt to monitor as well, but the extension should not stop.



    ------------------------------
    Herman Robers
    ------------------------
    If you have urgent issues, always contact your Aruba partner, distributor, or Aruba TAC Support. Check https://www.arubanetworks.com/support-services/contact-support/ for how to contact Aruba TAC. Any opinions expressed here are solely my own and not necessarily that of Hewlett Packard Enterprise or Aruba Networks.

    In case your problem is solved, please invest the time to post a follow-up with the information on how you solved it. Others can benefit from that.
    ------------------------------

    Original Message