Does anyone perform actions with Aruba Clearpass with ICON?
I see they have an API but couldn’t find a plugin.
Unfortunately not, but it would be awesome to use the API to do various stuff with ICON on CPPM e.g. CoA, get NAS-IP/Port information of a client, delete an endpoint or change the status to known/unknown/disabled would help tremendously in threat remediation as well.
It would also be nice to have a native Aruba Controller/Gateway/ClearPass event source. Right now it’s pritty cumbersome to parse all the stuff I want to create dashboard cards for.
I was looking to alert on rouge devices then use ICON to kill the port and open a ticket for investigation. We can get that report as a csv, but I couldn’t find a good way to process that in ICON and that involves a lot of manual steps when I was looking for the speed of automation.