Aruba ClearPass Policy Manager
The QRadar® product data source type for Aruba ClearPass Policy Manager can collect event logs from your Aruba ClearPass Policy Manager servers.
The following table identifies the specifications for the Aruba ClearPass Policy Manager data source type:
| Specification | Value |
|---|---|
| Manufacturer | Aruba Networks |
| Data source type | ClearPass |
| Connector type | Syslog |
| Supported versions | 6.5.0.71095 |
| Event format | LEEF |
| Recorded event types |
Session Audit System Insight® |
| Automatically discovered? | No |
| Includes identity? | No |
| Includes custom properties? | No |
| More information | Aruba Networks website (https://www.arubanetworks.com/products/security/) |
To integrate Aruba ClearPass Policy Manager with the QRadar product, complete the following steps:
- Configure your Aruba ClearPass Policy Manager device to send syslog events to the QRadar product.
- Add an Aruba ClearPass data source in the QRadar product. The following table describes
the parameters that require specific values for Aruba ClearPass Policy Manager event
collection:
Table 2. Aruba ClearPass Policy Manager data source parameters Parameter Value Data source type Aruba ClearPass Policy Manager Connector type Syslog
For information about adding a data source in the QRadar product, see Adding ingestion data sources.
If you are an the QRadar product user, see Terminology changes for QRadar customers.