Aruba Clearpass

Reports

• Aruba Clearpass - System Activities (User login-logout): This report generates a detailed summary of successful login and logout on clearpass policy manager. This includes, source username, IP address, category, component, etc.
• Aruba Clearpass - RADIUS authentication success: This report includes detailed summary of RADIUS server successful authentications. These includes, Source IP address, NAS IP address, Authentication types (Local, Remote, and RADIUS), etc.

Reports

• Aruba Clearpass - System Activities: This report includes system related activities other than login, logout or login fail. For, e.g. export, session destroyed, Collect Logs, AV/AS Updates, activate.arubanetworks.com, email successful, etc.
• Aruba Clearpass - Audit Activities: Audit activity report includes events such as ADD, MODIFY, REMOVE and REORDER. For e.g. when a device gets registered with clearpass policy manager, ‘ADD’ event is generated.

Alerts 

• Aruba Clearpass: Failed login has been detected for RADIUS session - This alert is triggered when clearpass receives an authentication failure for a RADIUS account.
• Aruba Clearpass: Login failed detected for clearpass system - This alert is triggered when clearpass receives an authentication failure for systems registered.
• Aruba Clearpass: Failed login has been detected for Web authentication - This alert is triggered when a web authentication fails in clearpass web console.

Reports 

• Aruba Clearpass - RADIUS authentication failed: This report generates a detailed summary of failed authentications that occurred in RADIUS server account. This includes, source MAC address, Authentication types, timestamp, username, etc.
• Aruba Clearpass - System Activities (User login failed): This report generates a detailed summary of failed activity on clearpass policy manager. This includes information such as Source IP address, username, component, etc.