Master Document: ArcSight and Aruba ClearPass Integration with iRock Files

Summary:

This document focuses on integrating ArcSight with Aruba ClearPass, emphasizing its capabilities to provide secure network access and contextual data based on user roles and device types. Key features include supporting various access methods (wired, wireless, VPN), endpoint security verification, API/CLI for automation, and cross-vendor access control. Integration allows automatic or manual threats' remediation and monitoring of users or devices. Detailed instructions are available online, offering benefits such as CEF event integration and potential incentives for sales reps when promoting the solution to customers.

Details:

The document discusses the integration between ArcSight and Aruba ClearPass (specifically ClearPass Policy Manager). It highlights that ClearPass is a vendor-agnostic solution supporting AAA with RADIUS and TACACS+, offering contextual data based on user roles, device types, app usage, and location. Key features include: 1. Secure network access for mobile users. 2. Supports wired, wireless, and VPN access. 3. Includes an endpoint security option (OnGuard) to verify the security posture of end nodes. 4. Offers an API and command line interface for automation and integration. 5. Integration use cases include remediation and user monitoring. 6. ClearPass enables cross-vendor device and user base access control, allowing ArcSight ESM to manually or automatically block users or devices in response to network threats. 7. Documentation and presentations are available detailing the benefits of this integration. This content is about configuring ClearPass to send CEF (Common Event Format) events for ArcSight, a product by Aruba Networks. The information can be found in specific documents and technical notes provided on the Arubanetworks website. If you're interested in learning how to set up ClearPass for this purpose, you can access detailed instructions there. Additionally, there is an incentive for ESP (Enterprise Sales Professionals) reps through a lead referral spiff when promoting ClearPass with ArcSight customers. For more details, visit the provided link on the Arubanetworks website.

Disclaimer:

The content in this post is for informational and educational purposes only. It may reference technologies, configurations, or products that are outdated or no longer supported. If there are any comments or feedback, kindly leave a message and will be responded.