ClearPass Tech Notes

ClearPass Platform

Platform

• ClearPass Scaling & Ordering Guide
• Hardening Guide
• Clustering Design Guidelines
• IPsec Configuration
• iDRAC User Guide
• Graphite Reporting
• REST APIs
• Service Routing
• VMware vMotion
• XML APIs

OnGuard

• OnGuard in a Cluster
• OnGuard Configuration
• OnGuard Troubleshooting

Profiling

• Active Profiling
• Profiling Quick Start Guide
• Profiling Tech Note

Configuration, Integration, and Solution Guides

Asset Management and ITSM

• BMC Remedy
• Ivanti LanDesk
• ServiceNow CMDB

Certificates, Identity, and Onboard

• Active Directory Certificate Services and Onboard
• ArubaOS Certificate Enrollment with ClearPass Onboard
• Onboard and Azure Active Directory (Configuration Guide: Onboard and Cloud Identity Providers)
• Onboard and Google Cloud Identity (Configuration Guide: Onboard and Cloud Identity Providers)
• Onboard and Okta (Configuration Guide: Onboard and Cloud Identity Providers)
• Whitelists for Cloud Identity Providers and ClearPass Onboard

DNS, DHCP, and IPAM (DDI)

• Infoblox
• Efficient IP

Endpoint Compliance

• VMware Carbon Black Response
• Blackberry Cylance Protect
• HCL BigFix
• McAfee ePolicy Orchestrator
• OPSWAT MetaAccess
• Symantec Endpoint Protection Manager
• Crowdstrike Falcon
• Microsoft Defender Advanced Threat Protection
• Trend Micro Apex Central / Apex One
• Sophos Central
• SentinelOne

Enterprise Mobility Management

• Blackberry UEM
• Citrix XenMobile (TechNote: EMM Integration v5)
• Globo GO! Enterprise (TechNote: EMM Integration v5)
• IBM MaaS360 (TechNote: EMM Integration v5)
• JAMF Pro - Extension
• JAMF (TechNote: EMM Integration v5)
• JAMF ZuluDesk
• Meraki System Manager
• Microsoft Intune
• MobileIron
• Mosyle Manager & Moslye Business
• SAP Afaria (TechNote: EMM Integration v5)
• SOTI (TechNote: EMM Integration v5)
• SOTI MobiControl
• VMware AirWatch (TechNote: EMM Integration v5)
• VMware Workspace ONE UEM (formerly Airwatch)

Firewalls, IDS/IPS, Web Content Filters, and Other Security Appliances

• Check Point
• Cyberhound
• Fortinet - Integration via FortiAuthenticator or via RADIUS Accounting
• Fortinet - Integration leveraging Aruba-Roles via FortiManager {NEW in Sept 2020}
• Juniper SRX
• iBOSS
• NetFort LANGuardian
• Palo Alto Networks
• Zingbox IoT Guardian

Geolocation

• ipstack Authorization Source (example only)

Load Balancers and ADCs

• F5 Load Balancers

Messaging

• ClearPass SMTP Enforcement Profile (example snippet only)
• Microsoft Teams (example snippet only)
• Slack (example snippet only)

OT/ICS/IIoT/MIoT

• Claroty
• CyberX
• Indegy
• Nozomi Networks
• Medigate

Security Information and Event Management (SIEM)

• Splunk
• McAfee Enterprise Security Manager

Wired Infrastructure (Switching)

• Wired Policy Enforcement (Solution Guide)

User and Entity Behavior Analytics (UEBA)

• Aruba IntroSpect

Visitor Management / Webhook Processing

• Skyhook Generic Processor
• Envoy
• Sine
• WeWork Teem LobbyConnect
• Passtab
• Whos On Location

Vulnerability Detection

• Tenable.sc (SecurityCenter)
• Rapid7 Nexpose/Insight

Wireless Infrastructure

• HPE MSM
• HPE UWW

Other Useful Links

• Cloud Service Whitelists
• RADIUS Dynamic Authorization Templates