Solutions Tech Lab

This short technote covers integrating Aruba New Central with ClearPass Policy Manager. With this integration Aruba Central sends the device profiling information and insights to ClearPass. Device Insight (DI) is part of the Aruba Central Platform and uses data collectors (APs, CX switches and gateways) that are on your network to continuously gather metadata. You can then setup device tags based on location, application categories / types, device type/OS attributes used in ClearPass enforcement policies.

In this scenario IoT devices connect to a PSK SSID and get classified and put into “IoT-Lab” user role. However, one of IoT devices starts a SSH session to an internal server. DI identifies this flow and automatically notifies ClearPass that puts the device in a “investigate” restricted user role.