Security

Hi Team,

We urgently need clarity on the NSP–ClearPass sync process for an air-gapped deployment. Our setup is a fully offline public-hospital environment running ClearPass 6.11.9, governed by a cybersecurity policy that strictly forbids any temporary internet connection, even for brief token-generation steps.

TAC (Case: 5393672236) has advised that the only supported method requires internet access at the moment the Generate Token button is used. Because connecting this system to the internet is not permitted under any circumstances, we are trying to verify whether this is truly the only documented option.

Before concluding that no alternative exists, we would like to learn from the community.
Has anyone managed this workflow in a 100% offline setup, or come across any documented or practical method that complies with air-gap requirements?

Any insights would be greatly appreciated, as this is currently blocking an operational requirement in our environment.

Thank you.

Screenshot below is taken from my lab that has internet connection.

-------------------------------------------

My recommendation in this case would be to consult your local HPE Aruba SE to get to hear the options direct from them.

Personally I have not faced this situation, yet...

Maybe @Herman Robers, @chulcher or @ariyap, as employees may have a good answer on the question.

Hi Team,

We urgently need clarity on the NSP–ClearPass sync process for an air-gapped deployment. Our setup is a fully offline public-hospital environment running ClearPass 6.11.9, governed by a cybersecurity policy that strictly forbids any temporary internet connection, even for brief token-generation steps.

TAC (Case: 5393672236) has advised that the only supported method requires internet access at the moment the Generate Token button is used. Because connecting this system to the internet is not permitted under any circumstances, we are trying to verify whether this is truly the only documented option.

Before concluding that no alternative exists, we would like to learn from the community.
Has anyone managed this workflow in a 100% offline setup, or come across any documented or practical method that complies with air-gap requirements?

Any insights would be greatly appreciated, as this is currently blocking an operational requirement in our environment.

Thank you.

Screenshot below is taken from my lab that has internet connection.

-------------------------------------------