What tool in Aruba Data Center can be used to diagnose and resolve issues related to network policies and access control?

Aruba ClearPass Policy Manager is the dedicated Network Access Control (NAC) and policy enforcement platform within the Aruba ecosystem. It is specifically designed to create, manage, and enforce access control policies for users and devices across wired, wireless, and VPN infrastructures. For troubleshooting, ClearPass includes the Access Tracker, a powerful diagnostic tool that provides real-time, detailed logs of all authentication, authorization, and accounting (AAA) requests. This allows network administrators to quickly identify and resolve issues related to why a specific policy was applied or why a user or device was denied access, making it the primary tool for this purpose.

A. Packet Capture: This is a generic network analysis technique for inspecting raw data traffic, not a specialized Aruba tool for diagnosing and resolving policy-level issues.
B. Aruba Central: This is a cloud-based platform for managing Aruba network infrastructure. While it can push policies, the core policy decision-making and detailed diagnostics reside in ClearPass.
D. Aruba Sensor: This is part of the Aruba User Experience Insight (UXI) solution, used to monitor and test network health and application performance from an end-user perspective, not for access control diagnostics.

1. Aruba ClearPass Policy Manager Data Sheet: "The heart of the ClearPass Policy Manager platform is the context-aware policy engine... For IT, a built-in troubleshooting and diagnostics tool, the Access Tracker, provides a real-time view of authentication requests." (Page 2, "Key Features" section).

2. Aruba Dynamic Segmentation Solution Overview: "ClearPass Policy Manager centrally defines and distributes policies for wired and wireless access... It provides secure, role-based access for employees, guests, and corporate- and user-owned devices." (Page 2, "Solution Components" section). This document establishes ClearPass as the central tool for defining and managing network access policies.

3. ArubaOS-CX Switching Fundamentals Guide: In sections discussing port access control and security, ClearPass is consistently referenced as the authentication server and policy engine that determines access rights. For example, "The switch sends the authentication credentials to a RADIUS server, such as Aruba ClearPass Policy Manager, which authenticates the client." (Chapter: "Security", Section: "Port Access"). This highlights its integral role in access control decisions and, by extension, troubleshooting those decisions.