Applies to: Aruba Clearpass version 6.7 and above
The Aruba Clearpass is a policy management platform. It allows an organization to effortlessly onboard new devices, grant varying access levels, and keep their networks secure across any multivendor wired, wireless and VPN infrastructure.
EventTracker, when integrated with Aruba Clearpass, collects log from Aruba Clearpass and creates a detailed reports, alerts, dashboards and saved searches. These attributes of EventTracker helps users to view the most critical and important information on a single platform.
“Reports” provide detailed overview of activities like, Devices registered with Clearpass, RADIUS and TACACS authentications requests (success and failed), Policy manager system level activities, and many more.
“Alerts” notify as critical events are triggered by Aruba Clearpass. With alerts, users are notified about real time occurrences of events such as, failed RADIUS/TACACS authentications.
Dashboards depict system activities like ADD and REMOVE, RADIUS/TACACS successful logins and failed logins with geo-location support to highlight region/ area over a map. These services will include information such as suspicious source IP address, Source MAC address, NAS address, event category, device onboarded, policy added, etc.
Once Aruba Clearpass is configured to deliver events to EventTracker Manager; alerts, dashboards, and reports can be configured into EventTracker.
Reports
Alerts
The configuration details are consistent with EventTracker version 9.x and later, and Aruba Clearpass version 6.7 and above.
To configure Aruba Clearpass to send logs to EventTracker, refer to the How-to Guide.
For more information please refer to the Integration guide.