Security

We are building a dashboard to assist with the OnGuard scanning and troubleshooting process. We are trying to consolidate posture information into one view to make things more efficient. The API is a bit lacking in this area, so we are pulling directly from the databases. Does anyone have a schema that explains the tables and what not? TAC hasn't been able to find much in those regards. Below is a screenshot of a very alpha version of the dashboard.

I'm pretty sure that Aruba doesn't publish database schema's, as they are internal and may change between versions without prior notice. In general, you should use the API. Did you check with TAC if the information you are looking for isn't available through the API? There may be information available in Insight as well to be queried through the API.

If you look at the database tables and column names, aren't those that you can guess what is stored inside?? Are there specific fields that you need to know what they store?

We've looked at the API documentation and talked with TAC about it. It is limited, especially on the insight side of things. We are running 6.8.5.x. Maybe things are improved in newer versions. We are using the endpoint and insight databases to generate what we've got now.

Our previous NAC had a device view that could filter. We used it to show all the devices currently in quarantine and could see why the devices were in quarantine. In clearpass, this is a multi-step process. Insight has a report that kind of shows similar things, but it doesn't seem to be consistent with what we are seeing the in the real world. TAC couldn't explain why. 

We'll move forward with what we are doing with educated guesses.

Thanks,

Robert

We added a dashboard option to email the users to let them know what specifically needs to be updated based on the operating system used and AV being used and how to do the update based on the device's operating system. If a user needs further assistance, he can reply to the email which will open a support ticket. The email also contains the device's MAC address to assist IT with identifying the device.