Aruba Certified ClearPass Professional V6.7 (HPE6-A68)Demo

Question

Why can't the Onguard posture check be performed during 802.1X authentication?

A Onguard uses TACACS so an additional service must be created.
B 802.1x is already secure so Onguard is not needed.
C Health Checks can't be used with 802.1x.
D Onguard uses RADIUS so an additional service must be created.
E Onguard uses HTTPS so an additional service must be created.

Explanation

OnGuard sends endpoint posture information to ClearPass over HTTPS, which requires network access after the initial 802.1X authentication. The posture evaluation therefore runs through a separate health-check/WebAuth service rather than inside the RADIUS-based 802.1X authentication transaction.

Learn more

ClearPass OnGuard agentless settings API reference

Aruba Certified ClearPass Professional V6.7 (HPE6-A68)Demo

AstroTutor

Notes

Readiness

QuestionQ36

Community Discussion