When integrating ClearPass Policy Manager (CPPM) with ClearPass Device Insight (CPDI), it is important to understand how device profiling and classification work between the two solutions:
1. CPPM and CPDI Integration Overview
CPPM is primarily used for access control and policy enforcement, while CPDI specializes in device profiling and classification through advanced analytics and machine learning.
Integration allows CPPM to leverage CPDI's enhanced profiling capabilities for more accurate device identification and policy enforcement.
2. Detailed Analysis of Each Option
A. CPPM no longer supports any Device Profiler features and relies on CPDI for this profile information:
Incorrect: CPPM still supports its own basic device profiling features and can operate independently. However, when integrated with CPDI, CPPM can use CPDI’s advanced profiling capabilities as a supplement.
B. CPDI must be configured as an audit server on CPPM for the integration to be successful:
Incorrect: CPDI is not configured as an audit server on CPPM. Integration is achieved via API integration and communication between the two solutions, not through audit server settings.
C. CPDI must have security analysis disabled on it for the integration to be successful:
Incorrect: Security analysis does not need to be disabled for integration. In fact, CPDI’s security analysis enhances the classification process by identifying anomalous behaviors.
D. CPPM can submit profile information to CPDI, but if CPDI derives a different classification, CPDI takes precedence:
Correct:
CPPM and CPDI exchange profile data, but CPDI has more advanced device classification capabilities due to its machine learning-based engine.
When CPDI derives a different classification than CPPM, CPDI's classification is considered more accurate and takes precedence.
This ensures that policies are based on the most reliable device classification.
References
Aruba ClearPass Policy Manager and Device Insight Integration Guide.
ClearPass Device Profiling and Classification Documentation.
Best Practices for CPPM and CPDI Integration in Network Security.
