A company wants you to integrate HPE Aruba Networking ClearPass Policy Manager (CPPM) with HPE Aruba Networking ClearPass Device Insight (CPDI). What…

When integrating ClearPass Policy Manager (CPPM) with ClearPass Device Insight (CPDI), it is

important to understand how device profiling and classification work between the two solutions:

1. CPPM and CPDI Integration Overview

CPPM is primarily used for access control and policy enforcement, while CPDI specializes in device

profiling and classification through advanced analytics and machine learning.

Integration allows CPPM to leverage CPDI's enhanced profiling capabilities for more accurate device

identification and policy enforcement.

2. Detailed Analysis of Each Option

A. CPPM no longer supports any Device Profiler features and relies on CPDI for this profile

information:

Incorrect: CPPM still supports its own basic device profiling features and can operate independently.

However, when integrated with CPDI, CPPM can use CPDI’s advanced profiling capabilities as a

supplement.

B. CPDI must be configured as an audit server on CPPM for the integration to be successful:

Incorrect: CPDI is not configured as an audit server on CPPM. Integration is achieved via API

integration and communication between the two solutions, not through audit server settings.

C. CPDI must have security analysis disabled on it for the integration to be successful:

Incorrect: Security analysis does not need to be disabled for integration. In fact, CPDI’s security

analysis enhances the classification process by identifying anomalous behaviors.

D. CPPM can submit profile information to CPDI, but if CPDI derives a different classification, CPDI

takes precedence:

Correct:

CPPM and CPDI exchange profile data, but CPDI has more advanced device classification capabilities

due to its machine learning-based engine.

When CPDI derives a different classification than CPPM, CPDI's classification is considered more

accurate and takes precedence.

This ensures that policies are based on the most reliable device classification.

Reference

Aruba ClearPass Policy Manager and Device Insight Integration Guide.

ClearPass Device Profiling and Classification Documentation.

Best Practices for CPPM and CPDI Integration in Network Security.