Enterprise-class endpoint protection, posture assessments and health checks

HPE Aruba Networking ClearPass OnGuard Software agents perform advanced endpoint posture assessments on leading computer operating systems to ensure compliance is met before devices connect.

Running on the HPE Aruba Networking ClearPass OnGuard Software, the advanced network access control (NAC) framework in HPE Aruba Networking ClearPass OnGuard Software offers exceptional safeguards against vulnerabilities.

The following operating systems and versions are supported:

• – Microsoft - Support for Windows 7 and above.

  • Can be run as a service.
• – Apple - Support for macOS X 10.10 and above.
• – Linux - Support for Red Hat Enterprise Linux 5 and above, Ubuntu 14.x LTS and 16.x LTS, Community Enterprise Operating System (CentOS) 5 and above, Fedora Core 24 and above, and SUSE Linux 12.x.

Supported agents:

The ClearPass Advantage

In addition to anti-virus, anti-spyware and personal firewall audits performed by traditional NAC products, OnGuard agents can perform more granular posture and health checks to ensure a greater level of endpoint compliance and network authorization.

Persistent and dissolvable agents

The difference between the two is that the persistent agent provides nonstop monitoring and automatic remediation and control. When running persistent OnGuard agents, ClearPass Policy Manager can centrally send system-wide notifications and alerts and allow or deny network access based on real-time changes on the endpoint. The persistent agent also supports auto and manual remediation.

Alternatively, the web-based dissolvable agent is ideal for personal, non-IT issued devices that connect via a captive portal and do not allow agents to be permanently installed. A one-time check at login ensures policy compliance. Devices that do not meet compliance can be redirected to a captive portal for manual remediation.

Automatic remediation

If unhealthy endpoints do not meet compliance requirements, the user receives a message about the endpoint status and instructions on how to achieve compliance if auto-remediation is not used.

Messages can include reasons for remediation, links to helpful URLs and helpdesk contact information. ClearPass persistent agents provide the same message and remediation capabilities for 802.1X and combined environments.

IT-managed and BYOD endpoint compliance

OnGuard's persistent and dissolvable agents can be used together in environments where endpoints are owned by the organization, employees and visitors. This ensures that all devices are assessed and granted proper privileges before accessing the network.

Complete endpoint visibility

To simplify troubleshooting, endpoint control and compliance reporting, ClearPass Policy Manager allows IT to centrally manage health-check settings and policies. IT also has the ability to view endpoint activity, including user and device data for each device that connects using OnGuard agents.

Real-time endpoint compliance

Depending on the operating system type OnGuard performs the following level of posture and health checks.

Notes:

– Chart represents ClearPass version 6.7 functionality.

– Disclaimer: Not all checks are supported across operating systems and agent type.

Notes:

– Subscription and enterprise licenses can be purchased in 1- or 3--year increments for 100, 500, 1,000, 2,500, 5,000, and 10,000 endpoints

– Extended with support contract