Security

Dear Experts, 

We are conducting poc with one of the prospects. They are having issues with profiling. in some cases devices are profiled as generic, sometimes they are simply shown as NO. This is commonly happening with Huawei switches. The same devices (ip phones, cameras) are getting "somewhat" profiled with cisco switches. All these devices are with static ip address. So shouldnt these devices be profiled with MAC OUI? why should we ever get generic or NO if the devices MAC addresses OUI is already known to CPPM?

------------------------------
owais
------------------------------

What method are you using to profile devices?

------------------------------
Any opinions expressed here are solely my own and not necessarily that of Hewlett Packard Enterprise or Aruba Networks.

HPE Design and Deploy Guides: https://community.arubanetworks.com/support/migrated-knowledge-base?attachments=&communitykey=dcc83c62-1a3a-4dd8-94dc-92968ea6fff1&pageindex=0&pagesize=12&search=&sort=most_recent&viewtype=card
------------------------------

Original Message:
Sent: Dec 24, 2022 02:58 AM
From: owais iqbal
Subject: Profiling issue - 6.10.5

Dear Experts,

We are conducting poc with one of the prospects. They are having issues with profiling. in some cases devices are profiled as generic, sometimes they are simply shown as NO. This is commonly happening with Huawei switches. The same devices (ip phones, cameras) are getting "somewhat" profiled with cisco switches. All these devices are with static ip address. So shouldnt these devices be profiled with MAC OUI? why should we ever get generic or NO if the devices MAC addresses OUI is already known to CPPM?

------------------------------
owais
------------------------------

Original Message:
Sent: 12/24/2022 7:34:00 AM
From: cjoseph
Subject: RE: Profiling issue - 6.10.5

What method are you using to profile devices?

------------------------------
Any opinions expressed here are solely my own and not necessarily that of Hewlett Packard Enterprise or Aruba Networks.

HPE Design and Deploy Guides: https://community.arubanetworks.com/support/migrated-knowledge-base?attachments=&communitykey=dcc83c62-1a3a-4dd8-94dc-92968ea6fff1&pageindex=0&pagesize=12&search=&sort=most_recent&viewtype=card
------------------------------

Original Message:
Sent: Dec 24, 2022 02:58 AM
From: owais iqbal
Subject: Profiling issue - 6.10.5

Dear Experts,

We are conducting poc with one of the prospects. They are having issues with profiling. in some cases devices are profiled as generic, sometimes they are simply shown as NO. This is commonly happening with Huawei switches. The same devices (ip phones, cameras) are getting "somewhat" profiled with cisco switches. All these devices are with static ip address. So shouldnt these devices be profiled with MAC OUI? why should we ever get generic or NO if the devices MAC addresses OUI is already known to CPPM?

------------------------------
owais
------------------------------

When a device is profiled as generic, what does the os family say the device is ? MAC OUI value appears there. For us . Eg a whole batch of printers either with statically assigned. Ip addresses or udp helpers not pushing dhcp request. To clearpass have a fingerprint with the OUI. In os family


Sent from my iPhone


Original Message:
Sent: 12/24/2022 2:59:00 AM
From: Owais101
Subject: Profiling issue - 6.10.5

Dear Experts, 

We are conducting poc with one of the prospects. They are having issues with profiling. in some cases devices are profiled as generic, sometimes they are simply shown as NO. This is commonly happening with Huawei switches. The same devices (ip phones, cameras) are getting "somewhat" profiled with cisco switches. All these devices are with static ip address. So shouldnt these devices be profiled with MAC OUI? why should we ever get generic or NO if the devices MAC addresses OUI is already known to CPPM?

------------------------------
owais
------------------------------