A company has HPE Aruba Networking Mobility Controllers (MCs), campus APs, and AOS-CX switches. The company plans to use HPE Aruba Networking ClearPass Policy Manager (CPPM) to classify endpoints by…

Question

Options

• ACreate datapath mirrors that use the CPPM's IP address as the destination.
• BCreate an IF-MAP profile, which specifies credentials for an API admin account on CPPM.
• CCreate control path mirrors to mirror HTTP traffic from clients to CPPM.
• DCreate a firewall whitelist rule that permits HTTP and CPPM's IP address.

• A
  78% (31)
• B
  5% (2)
• C
  15% (6)
• D
  3% (1)

Explanation

HPE Aruba Networking ClearPass Policy Manager (CPPM) uses device profiling to classify endpoints, and one of its profiling methods involves analyzing HTTP User-Agent strings to identify device types (e.g., iPhone, Windows laptop). HTTP User-Agent strings are sent in HTTP headers when a client accesses a website. For CPPM to profile devices using HTTP User-Agent strings, it must receive the HTTP traffic from the clients. In this scenario, the company is using Mobility Controllers (MCs), campus APs, and AOS-CX switches, and CPPM is the only ClearPass solution in use. HTTP User-Agent Profiling: CPPM can passively profile devices by analyzing HTTP traffic, but it needs to receive this traffic. In an AOS-8 architecture, the MC can mirror client traffic to CPPM for profiling. Since HTTP traffic is part of the data plane (user traffic), the MC must mirror the data plane traffic (not control plane traffic) to CPPM.

No community discussion yet for this question.