A company has a variety of HPE Aruba Networking solutions, including an HPE Aruba Networking infrastructure and HPE Aruba Networking ClearPass Policy Manager (CPPM). The company passes traffic from…

Question

Options

• AHave the third-party firewall send Syslogs to CPPM, which can work with network devices to lock
• BAdd ClearPass Device Insight (CPDI) to the solution, integrate it with the third-party firewall to
• CConfigure CPPM to poll the third-party firewall for a broad array of information about internal
• DUse tunnel mode SSIDs and user-based tunneling (UBT) on AOS-CX switches to pass all internal

• A
  54% (13)
• B
  13% (3)
• C
  25% (6)
• D
  8% (2)

Explanation

Option A is correct because CPPM supports syslog ingestion from third-party devices like the SRX firewall, allowing it to act as a security orchestration hub. When the firewall detects suspicious internal traffic and sends a syslog alert to CPPM, CPPM can trigger enforcement actions - such as quarantining an endpoint via RADIUS Change of Authorization (CoA) - across the Aruba network infrastructure. This is a core CPPM integration pattern for extending security response beyond native Aruba devices.

Why the distractors are wrong:

• B - ClearPass Device Insight (CPDI) is a device profiling and visibility tool; it classifies unknown endpoints but is not designed to respond to firewall-detected threat events.
• C - CPPM does not "poll" firewalls for broad internal data; it is designed to receive pushed information (syslogs, RADIUS requests) rather than actively query third-party appliances.
• D - Tunnel mode SSIDs and UBT are traffic-steering mechanisms for routing user traffic through a central policy point; they address architecture, not third-party firewall integration for internal threat response.

Memory tip: Think of CPPM as the "security brain" - it listens to syslog alerts from any vendor's firewall, then acts on your Aruba network (via CoA) to contain threats. Syslog in → enforcement out.

No community discussion yet for this question.