Security

 View Only
  • 1.  Clearpass/Fortinet Dynamic Address Objects

    Posted Mar 07, 2024 01:34 PM

    I've found this article on the fortinet website, but it doesn't have anything about the clearpass side.  I've looked at some of the other integration documents with fortinet but it doesn't seem to match what's on this one.  Clearpass is pulling in our intune data, and I'd like to pass compliance information about users to the fortigate.

    https://docs.fortinet.com/document/fortigate/7.4.3/administration-guide/912201/clearpass-integration-for-dynamic-address-objects



  • 2.  RE: Clearpass/Fortinet Dynamic Address Objects

    Posted Mar 08, 2024 06:21 PM

    see if this helps

    here you can find all clearpass technotes



    ------------------------------
    If my post was useful accept solution and/or give kudos.
    Any opinions expressed here are solely my own and not necessarily that of HPE or Aruba.
    ------------------------------



  • 3.  RE: Clearpass/Fortinet Dynamic Address Objects

    Posted Sep 25, 2025 08:46 AM

    Were you able to find out how this integration is configured in ClearPass side? I also could not find any documents on how this could be enforced from ClearPass side. Hope you can share some information if you where able to make it work. Thank you. 

    -------------------------------------------



  • 4.  RE: Clearpass/Fortinet Dynamic Address Objects

    Posted Sep 25, 2025 08:20 PM

    one way is to enable accounting proxy and you use the namespace variables. %{ } to pass the desired contextual info



    ------------------------------
    If my post was useful accept solution and/or give kudos.
    Any opinions expressed here are solely my own and not necessarily that of HPE or Aruba.
    ------------------------------



  • 5.  RE: Clearpass/Fortinet Dynamic Address Objects

    Posted Sep 25, 2025 09:59 PM

    Thanks Ariya for your response. I found an old Aruba document from the thread below related to the Fortinet guide wherein they leverage on ClearPass Context server action and Fortinet dynamic address object. 

    https://airheads.hpe.com/discussion/onguard-vpnposture-fortigate-firewall-integration

    https://docs.fortinet.com/document/fortigate/7.4.3/administration-guide/912201/clearpass-integration-for-dynamic-address-objectsh

    -------------------------------------------