This is about Cloud Authentication & Policy in Central, and the Aruba Onboard app used for that (so not ClearPass Onboard)?
I just checked and the only HTTP traffic that I see on a Windows 10 client is OCSP traffic to validate the server certificates. OCSP is expected to use HTTP. Can you share more details on what you see, to what servers, what is exchanged, packet captures? Because I don't see the same. If you don't want to share such information in a public forum, please work with Aruba TAC.
------------------------------
Herman Robers
------------------------
If you have urgent issues, always contact your Aruba partner, distributor, or Aruba TAC Support. Check
https://www.arubanetworks.com/support-services/contact-support/ for how to contact Aruba TAC. Any opinions expressed here are solely my own and not necessarily that of Hewlett Packard Enterprise or Aruba Networks.
In case your problem is solved, please invest the time to post a follow-up with the information on how you solved it. Others can benefit from that.
------------------------------