Security

hello ,

I want to understand what is difference between Base and Access license .

There is a datasheet available in the ordering guide which says Device visibility is available in Access license . What exactly it means ? is it related to profiling ?

Also , what is the SKU for getting Support if one purchases the perpetual license ?

Lastly , customer does not have PKI for device certificates, so if we have to use CLearpass as PKI , we need onboard licenses ?  and these onboard licenses can be used for EAP-TLS ?

Entry License contains the following:
802.1X, MAC-Auth, Web Based User Registration and Authentication, MFA, OnConnect (SNMP based Authentication), System APIs

Access License contains the above plus:
TACACS+, Security Exchange (interaction with MDM, Security Appliances, etc.) and Endpoint Profiling (via DHCP, etc.)

If ClearPass shall distribute the certificates, you will need Onboard and those can be used for EAP-TLS. If the customer has already or want to use a 3rd party a Certification Authority he can use this and for Authentication ClearPass (also for checking for revoked Certs)

You will find detailed Information in the Ordering Guide - https://www.arubanetworks.com/assets/og/OG_Aruba-ClearPass-Policy-Manager.pdf

And in the documentation regarding features of Licenses - https://www.arubanetworks.com/techdocs/ClearPass/6.11/PolicyManager/Content/CPPM_UserGuide/Admin/License-types.htm

Support SKUs are depended on the amount of time 1 / 3 / 5 etc. I would suggest to contact your local Aruba representive for a detailed Bill-of-Material.