Security

Hi,

i hope somebody can help me in the use of Sflow for profiling in Clearpass.

1.) Am i right that if i set the clearpass server as an sflow destination on my switches - the sflow data is used to collect endpoints and profile them?

2.) Is there any log where i can check that the sflow data is recieved und used?

3.) What is a good value for sampling and polling - i configured (on HP/Aruba switches):

sflow 1 polling all 60

sflow 1 sampling all 60

Regards

Tobias

1. sFlow is one of the collector options for profiling.

2. PolicyManagerLogs > asyncnetd > deviceprofiler.log

3. Sorry I am not sure on what would be a good sampling rate. I would start with a value which is not very aggresive and slowly increase if it adds value.