You have created this rule in an HPE Aruba Networking ClearPass Policy Manager (CPPM) service's enforcement policy:
IF Authorization [Endpoints Repository] Conflict EQUALS true
THEN apply "quarantine_profile"
What information can help you determine whether you need to configure cluster-wide profiler parameters to ignore some conflicts?
A conflict in the Endpoints Repository usually indicates that ClearPass has seen different profiling data for the same MAC, which might mean a spoofing attempt---or simply normal behavior for certain device types.
Devices that use PXE boot often:
Boot initially from the network with one set of characteristics (e.g., a minimal OS, different DHCP fingerprint),
Then chain-load into a different OS with a different fingerprint and sometimes even a different network profile.
Aruba exam and design material specifically point out PXE boot as a common, benign cause of profiler conflicts and recommend tuning cluster-wide profiler parameters to ignore or relax some conflicts for these devices.
Therefore, you look at whether the company has devices that use PXE boot when deciding whether to tune profiler conflict behavior Option D.
Currently there are no comments in this discussion, be the first to comment!