HPE Aruba Networking ClearPass Advanced Configuration (CPAC)

Network Requirements\n\n\n- ClearPass goals\n- Network topology\n- List of available resources\n- Scenario analysis\n- Authentication requirements\n- Multiple user account databases\n- User account attributes\n- High level design\nPDI and Digital Certificates\n\n\n- Certificate types\n- PKI\n- Certificate trust\n- Certificate file formats\n- ClearPass as CA\n- Certificate use cases\n\n- EAP\n- HTTPS\n- Service-based certificates\n- Onboarding\n- Clustering\n- RadSec\n- NAD Captive portal\n- Installing certificates\n- Enrollment over secure transport\nCluster Design\n\n\n- ClearPass server placement\n- Determine the layout of the cluster\n- High availability schema\n- Design high availability\n- VIP failover\n- VIP mapping\n- Insight primary and secondary\nNetwork Integration\n\n\n- Authentication sources\n\n- Local user repository\n- Endpoint repository\n- Admin user repository\n- Guest user repository\n- Guest device repository\n- Onboard device repository\n- Active Directory\n- SQL server\n- Define external servers\n\n- Unified endpoint management\n- Email server\n- Endpoint profiling\n\n- IF-MAP\n- Active scans (SNMP)\n- DHCP\n- HTTPS\n- Network devices\n\n- RadSec\n- Dynamic authorization\n- Logging of RADIUS accounting\n- Device groups\n- Location attributes\n- Policy simulation\nCorporate Access Design\n\n\n- Define the requirements\n- High level design\n- Services design\n- Plan TIPs roles\n- User authentication\n- Machine authentication\n- Tunneled EAP, EAP-TLS and protected EAP\n- One versus multiple services\n- Plan enforcement\n- Device-groups based enforcement\n- Service implementation\n- OnGuard design and implementation\n\n- Quarantine users\n- Remediation\n- Onboard design and implementation\n\n- User and device authorization\n- Informational pages\n- Authorization validation\n- Troubleshooting roles\nGuest Access Design\n\n\n- Guest network design\n- Captive portal flow\n- Design tasks\n- Define web pages\n- Guest services design\n- Guest services\n- Guest access controls\n- Configure network access devices\n- Guest account creation\n- Guest self registration\n- Guest sponsor approval\n- Self registration AD drop-down list\n- Requirements for guest enforcement\nMulti Pre-Shared Key\n\n\n- Define the requirements\n- High level design\n- Device authorization\n- Service design and implementation\nWired Access\n\n\n- AAA configuration\n- 802.1X and MAC auth\n- Using client profiling for authorization\n- Using conflict attribute for authorization\n- User roles configuration in ArubaOS-S\n- User roles configuration in ArubaOS-CX\n- Web fedirection\n- Multi-service ports\n- Downloadable user roles enforcement profiles\n- Downloadable user roles configuration and validation\nWired Access\n\n\n- TACACs+ based NAD administration\n- TACACs+ command authorization\n- Policy Manager administrators\n- Guest and Onboard operators\n- Register devices for MPSK\n- Insight operators\n- Insight reports and alerts

- Any current Aruba ClearPass certification.\n- Configuring HPE Aruba Networking ClearPass (CPC)

- Network security experts\n- Individuals who implement network access control solutions\n- Network managers with Aruba access device experience (wired and wireless).\n- Network administrators who already own a ClearPass solution and are looking to deploy advanced features