HR Local

[Guest]

[Employee]

Linux User

Executive

It enables organizations to run advanced endpoint posture assessments.

It allows a receptionist in a hotel to create accounts for guest users.

It allows employees to self-provision their personal devices on the corporate network.

It offers an easy way for users to self-configure their devices to support 802.1X authentication on wired and wireless networks.

It allows employees to create temporary accounts for Wi-Fi access.

It will be stored in the Publisher’s guest user repository and the Subscriber’s Onboard user repository.

It will be stored in the Publisher’s local user repository and the Subscriber’s guest user repository.

It will be stored in the Publisher’s guest user repository permanently, but only for 14 days in the Subscriber’s guest user repository,

It will be stored in both the Publisher’s guest user repository and the Subscriber’s guest user repository.

It will be stored in the Publisher’s guest user repository, but not the Subscriber’s.

The user account has expired.

The client used a wrong password.

The shared secret between the NAD and ClearPass does not match.

The user’s certificate is invalid.

The user is not found in the database.

Endpoints repository

Onboard Device repository

MDM repository

Guest User repository

Local User repository

It becomes the Publisher when the primary Publisher fails.

It operates as a Publisher in the same cluster as the primary Publisher when the primary is active.

It operates as a Publisher in a separate cluster when the Publisher is active.

It operates as a Subscriber when the Publisher is active.

It stays as a Subscriber when the Publisher fails.

10 ClearPass Guest licenses, 10 ClearPass Onguard licenses and 10 ClearPass Onboard licenses

25 ClearPass Profiler licenses

25 ClearPass Enterprise licenses

10 ClearPass Enterprise licenses

25 ClearPass Redundancy licenses

Configuration of the management port is optional.

Configuration of the management port is mandatory.

Configuration of the data port is mandatory.

Configuration of the data port is optional.

Static IP addresses are only allowed on the management port, not the data port.

When counting policy manager licenses, include the additional 50 business partner devices.

When counting policy manager licenses, exclude the additional 50 business partner devices.

Purchase Onboard licenses.

Purchase guest licenses.

Purchase Onguard licenses.

Authorization Source

Profiler

Role Mapping Policy

Enforcement

Posture