The following operating systems and versions are supported:

• – Microsoft - Support for Windows 7 and above.

  • Can be run as a service.
• – Apple - Support for macOS X 10.10 and above.
• – Linux - Support for Red Hat Enterprise Linux 5 and above, Ubuntu 14.x LTS and 16.x LTS, Community Enterprise Operating System (CentOS) 5 and above, Fedora Core 24 and above, and SUSE Linux 12.x.

Supported agents:

The ClearPass Advantage

In addition to anti-virus, anti-spyware and personal firewall audits performed by traditional NAC products, OnGuard agents can perform more granular posture and health checks to ensure a greater level of endpoint compliance and network authorization.

Persistent and dissolvable agents

The difference between the two is that the persistent agent provides nonstop monitoring and automatic remediation and control. When running persistent OnGuard agents, ClearPass Policy Manager can centrally send system-wide notifications and alerts and allow or deny network access based on real-time changes on the endpoint. The persistent agent also supports auto and manual remediation.

Alternatively, the web-based dissolvable agent is ideal for personal, non-IT issued devices that connect via a captive portal and do not allow agents to be permanently installed. A one-time check at login ensures policy compliance. Devices that do not meet compliance can be redirected to a captive portal for manual remediation.

Automatic remediation

If unhealthy endpoints do not meet compliance requirements, the user receives a message about the endpoint status and instructions on how to achieve compliance if auto-remediation is not used.

Messages can include reasons for remediation, links to helpful URLs and helpdesk contact information. ClearPass persistent agents provide the same message and remediation capabilities for 802.1X and combined environments.

IT-managed and BYOD endpoint compliance

OnGuard's persistent and dissolvable agents can be used together in environments where endpoints are owned by the organization, employees and visitors. This ensures that all devices are assessed and granted proper privileges before accessing the network.

Ordering Guidance

HPE Aruba Networking ClearPass OnGuard Software can be ordered via persistent licenses where support is separate or by subscription licenses that include HPE Aruba Networking Care support.

Ordering HPE Aruba Networking ClearPass OnGuard Software involves the following steps:

• 1. Determine the number of unique computer endpoints that will have posture/health checks performed prior to network access within your environment.
• 2. Select the total number of OnGuard licenses.

Additional HPE Aruba Networking ClearPass OnGuard Software capacity can be purchased at any time to meet growth demands. ClearPass OnGuard is licensed on a per endpoint basis.

Shape the Future of QuickSpecs - Your Input Matters