HPE6-A84 · Question #1
You are designing an Aruba ClearPass Policy Manager (CPPM) solution for a customer. You learn that the customer has a Palo Alto firewall that filters traffic between clients in the campus and the…
The correct answer is A. Sending Syslogs from the firewall to CPPM to signal CPPM to change the authentication status for. This option allows CPPM to receive real-time information about the network activity and security posture of the clients from the firewall, and then apply appropriate enforcement actions based on the configured policies. For example, if a client is detected to be infected with…
Question
You are designing an Aruba ClearPass Policy Manager (CPPM) solution for a customer. You learn that the customer has a Palo Alto firewall that filters traffic between clients in the campus and the data center. Which integration can you suggest?
Options
- ASending Syslogs from the firewall to CPPM to signal CPPM to change the authentication status for
- BImporting clients' MAC addresses to configure known clients for MAC authentication more quickly
- CEstablishing a double layer of authentication at both the campus edge and the data center DMZ
- DImporting the firewall's rules to program downloadable user roles for AOS-CX switches more
How the community answered
(35 responses)- A71% (25)
- B9% (3)
- C17% (6)
- D3% (1)
Explanation
This option allows CPPM to receive real-time information about the network activity and security posture of the clients from the firewall, and then apply appropriate enforcement actions based on the configured policies. For example, if a client is detected to be infected with malware or violating the network usage policy, CPPM can quarantine or disconnect the client from the network.
Topics
Community Discussion
No community discussion yet for this question.