Security

Hello All,

We are pleased to announce the immediate availability of ClearPass Policy Manager 6.12.0! 

The 6.12 release is another significant release milestone.  This is the first Short Support Release (SSR) using the updated Aruba Lifecycle process.  The 6.11 Long Support Release (LSR) will continue to be supported ongoing; however, the 6.12 release will be supported only until the next major version release.

In addition to bug fixes, this release also includes several new features that our Engineering and QA team have worked tirelessly to include.  Just a few of these new enhancements customers will see in 6.12 are:

Negative Filtering in Access Tracker

Why is this interesting? Customers use Access Tracker daily to diagnose and resolve authentication/authorization issues.  Save time with the "not" operator (not contains or not equals) to remove additional events quickly and narrow down on the desired information much faster.

Other Access Tracker Improvements

Why is this interesting? Two (2) additional improvements have been made to Access Tracker.  The first is the ability to remember administrator settings on the "auto-update" field, allowing administrators to leave and return to the Access Tracker page (as well as OnGuard Activity and others) without this value resetting.  The second is the ability to display the returned "Tips Role" in the table view without the need to open the record any longer.  This allows administrators to easily identify the returned Tips Role from each record without the need to open the records individually any longer.

Offline ClearPass Extensions

Why is this interesting? Extensions are useful to work with the vast 360° Security Exchange program, but customers in air gapped networks have had difficulty to install these.  With this release, Extensions may be downloaded from ASP like a patch and installed directly.

Expanded Entra ID Support

Why is this interesting? Version 6.11 introduced support for Microsoft Azure Active Directory.  Microsoft has since renamed this to be Entra ID, but we have expanded the functionality to allow much more flexibility.  The updated default query definition can be used to return additional information around the user.  Administrators may also create another definition to then work with machine attributes for devices that are part of the Entra ID system (note: this is separate from the Intune management interface that continues to be available as an Extension).

TLS Version Selection from CLI

Why is this interesting? More customers are working in networks that need to be able to disable legacy TLS versions before they bring devices onto the network.  Customers installing 6.12 virtual machines will be able to disable TLS v1.0 and v1.1 from CLI (console) before bringing the server onto the network.  This is also available from SSH once the system is on the network.

(beta) EAP-TLS support for TLSv1.3

Why is this interesting? HTTPS TLSv1.3 was released in 6.11 release, but the additional support for EAP-TLS was held back to ensure the endpoint support stabilized first.  Most endpoint clients now support the proper behavior that we can release EAP-TLS TLSv1.3 support in what we are calling beta until the remaining capabilities are available.  Most clients do not yet support session resumption functionality under EAP-TLS TLSv1.3. 

As always, please take note of the 'Changes of Behaviors' section of the release notes https://www.arubanetworks.com/techdocs/ClearPass/CP_ReleaseNotes_6.x.x/Default.htm 

The update images have been posted to the Aruba Support Portal (ASP) and the software updates portal.  Updated base images are being released to AWS and Azure marketplaces globally and will be available upon completion of their release reviews.

A big thanks and congratulations to the ClearPass Engineering, ClearPass QA and TechPubs teams for reaching this milestone!

Best regards,

The ClearPass Team

Hello All,

We are pleased to announce the immediate availability of ClearPass Policy Manager 6.12.1!  This release is focused on bug and security fixes in alignment with the Short Support Release (SSR) model.

As always, please take note of the 'Changes of Behaviors' section of the release notes https://www.arubanetworks.com/techdocs/ClearPass/CP_ReleaseNotes_6.x.x/Default.htm

 The update images have been posted to the Aruba Support Portal (ASP) and the software updates portal.  

A big thanks and congratulations to the ClearPass Engineering, ClearPass QA and TechPubs teams for reaching this milestone!

Best regards,

The ClearPass Team

Original Message:
Sent: Dec 06, 2023 01:10 PM
From: blechner
Subject: ClearPass Policy Manager 6.12 Release Announcement(s)

Hello All,

We are pleased to announce the immediate availability of ClearPass Policy Manager 6.12.0! 

The 6.12 release is another significant release milestone.  This is the first Short Support Release (SSR) using the updated Aruba Lifecycle process.  The 6.11 Long Support Release (LSR) will continue to be supported ongoing; however, the 6.12 release will be supported only until the next major version release.

In addition to bug fixes, this release also includes several new features that our Engineering and QA team have worked tirelessly to include.  Just a few of these new enhancements customers will see in 6.12 are:

Negative Filtering in Access Tracker

Why is this interesting? Customers use Access Tracker daily to diagnose and resolve authentication/authorization issues.  Save time with the "not" operator (not contains or not equals) to remove additional events quickly and narrow down on the desired information much faster.

Other Access Tracker Improvements

Why is this interesting? Two (2) additional improvements have been made to Access Tracker.  The first is the ability to remember administrator settings on the "auto-update" field, allowing administrators to leave and return to the Access Tracker page (as well as OnGuard Activity and others) without this value resetting.  The second is the ability to display the returned "Tips Role" in the table view without the need to open the record any longer.  This allows administrators to easily identify the returned Tips Role from each record without the need to open the records individually any longer.

Offline ClearPass Extensions

Why is this interesting? Extensions are useful to work with the vast 360° Security Exchange program, but customers in air gapped networks have had difficulty to install these.  With this release, Extensions may be downloaded from ASP like a patch and installed directly.

Expanded Entra ID Support

Why is this interesting? Version 6.11 introduced support for Microsoft Azure Active Directory.  Microsoft has since renamed this to be Entra ID, but we have expanded the functionality to allow much more flexibility.  The updated default query definition can be used to return additional information around the user.  Administrators may also create another definition to then work with machine attributes for devices that are part of the Entra ID system (note: this is separate from the Intune management interface that continues to be available as an Extension).

TLS Version Selection from CLI

Why is this interesting? More customers are working in networks that need to be able to disable legacy TLS versions before they bring devices onto the network.  Customers installing 6.12 virtual machines will be able to disable TLS v1.0 and v1.1 from CLI (console) before bringing the server onto the network.  This is also available from SSH once the system is on the network.

(beta) EAP-TLS support for TLSv1.3

Why is this interesting? HTTPS TLSv1.3 was released in 6.11 release, but the additional support for EAP-TLS was held back to ensure the endpoint support stabilized first.  Most endpoint clients now support the proper behavior that we can release EAP-TLS TLSv1.3 support in what we are calling beta until the remaining capabilities are available.  Most clients do not yet support session resumption functionality under EAP-TLS TLSv1.3. 

As always, please take note of the 'Changes of Behaviors' section of the release notes https://www.arubanetworks.com/techdocs/ClearPass/CP_ReleaseNotes_6.x.x/Default.htm 

The update images have been posted to the Aruba Support Portal (ASP) and the software updates portal.  Updated base images are being released to AWS and Azure marketplaces globally and will be available upon completion of their release reviews.

A big thanks and congratulations to the ClearPass Engineering, ClearPass QA and TechPubs teams for reaching this milestone!

Best regards,

The ClearPass Team