QuestionQ22

Analyze

A customer uses an AOS-10 architecture managed by HPE Aruba Networking Central. HPE Aruba Networking infrastructure devices authenticate clients to an HPE Aruba Networking ClearPass cluster.

In HPE Aruba Networking Central, you are reviewing network traffic flows for a wireless IoT device categorized as "Raspberry Pi" clients. You observe SSH traffic. You then examine several additional wireless IoT clients and find that they are also sending SSH.

Refer to the scenario.

You need a fast way to find a list of all IoT clients that have used SSH.

What step can you take?

  • A Run a search for SSH traffic and IoT client IDs in HPE Aruba Networking ClearPass Policy Manager's (CPPM’s) accounting information.
  • B Use HPE Aruba Networking Central's Live Events monitoring tool to detect which clients meet the desired criteria.
  • C Create and apply an HPE Aruba Networking Central client profile tag that selects the SSH application and the clients' category.
  • D Use HPE Aruba Networking Central's Gateway IDS/IPS Security Dashboard to search for SSH events and sources.
Explanation

HPE Aruba Networking Central user client-profile tags can filter clients by profile conditions. Combining the SSH application condition with the IoT device-category condition identifies all clients meeting both criteria in a reusable list.

Learn more

Community Discussion

No comments yet. Be the first to start the discussion!