Course Overview
This Instructor Led Training (ILT) course prepares participants with foundational skills in Network Access Control using the ClearPass product portfolio. This 5-day classroom session includes both modules and labs to teach participants about the major features of the ClearPass portfolio. Participants will learn how to setup ClearPass as a AAA server, and configure the Policy Manager, Guest, OnGuard and OnBoard feature sets. In addition, this course covers integration with external Active Directory servers, Monitoring and Reporting, as well as deployment best practices.
Who should attend
Ideal candidates include network professionals who are looking to build their foundational knowledge of the ClearPass product portfolio.
Certifications
This course is part of the following Certifications:
Course Objectives
After you successfully complete this course, expect to be able to:
- Ability to setup ClearPass as a AAA server
- Demonstrate Configuration Guest, Ongurad, Onboard and Profiling features
- Integrate with External AD Server
- Understand Monitoring and Reporting
- Demonstrate Scaling and deployment of best practices
Course Content
Intro to ClearPass
- BYOD
- High Level Overview
- Posture and Profiling
- Guest and Onboard
ClearPass for AAA
- Policy Service Rules
- Authentication Authorization and Roles
- Enforcement Policy and Profiles
Authentication and Security Concepts
- Authentication Types
- Servers
- Radius COA
- Active Directory
- Certificates
Intro to NAD
- NAD Devices
- Adding NAD to ClearPass
- Network Device Groups
- Network Device Attributes
- Aruba Controller as NAD
- Aruba Switch
- Aruba Instant
Monitoring and Troubleshooting
- Monitoring
- Troubleshooting
- Logging
- Policy Simulation
ClearPass Insight
- Insight Dashboard
- Insight Reports
- Insight Alerts
- Insight Search
- Insight Administration
- Insight Replication
Active Directory
- Adding AD as Auth Source
- Joining AD domain
- Using AD services
External Authentication
- Multiple AD domains
- LDAP
- Static Host Lists
- SQL Database
- External Radius Server
Guest
- Guest Account creation
- Web Login pages
- Guest Service configuration
- Self-registration pages
- Configuring NADS for Guest
- Guest Manager Deep Dive
- Web Login Deep Dive
- Sponsor Approval
- MAC Caching
Onboard
- Intro to Onboard
- Basic Onboard Setup
- Onboard Deepdive
- Single SSID Onboarding
- Dual SSID Onboarding
Profiling
- Intro to Profiling
- Endpoint Analysis Deep Dive
Posture
- Intro to Posture
- Posture Deployment Options
- OnGuard Agent Health Collection
- OnGuard workflow
- 802.1x with Posture using Persistent/dissolvable agent
- OnGuard web Login
- Monitoring and Updates
Operation and Admin Users
- Operations
- Admin Users
Clustering and Redundancy
- Clustering
- Redundancy
- LAB
Licensing
- ClearPass Licensing
- Base License
- Applications
Single Sign-On
- Deployment Options
- ClearPass Admin Login SSO
- Access Network SSO
- ASO-Auto-Sign On
- Configuration and Demo
ClearPass Exchange
- Intro
- Examples
- General HTTP Palo Alto Firewall
- Configuration
Case Study
- Objectives
- Discussion
- Advanced Labs Overview