Refer to the exhibit.

ClearPass will cache all user and machine attributes from AD every 10 hours in anticipation of one of those users or machines attempting to authenticate.

Less traffic is required between ClearPass and the AD server when re-authenticating within a 10 hour

period.

The Cache Timeout is designed to reduce the amount of traffic between ClearPass and the AD server by caching user credentials for a 10 hour period.

A user changing departments may not see their Department attribute change in AD reflected while

authenticating until the Cache Timeout period has ended.

On a failed authentication attempt, ClearPass will consider any subsequent attempts within 10 hours as total failed attempts before blacklisting the client.