CPACAAArubaAA-CPAC25.23<p>After you successfully complete this course, expect to be able to: </p> <ul> <li>Deploy a complete and resilient Network Access Control (NAC) security solution based on HPE Aruba Networking ClearPass.</li><li>Understand the HPE Aruba Networking ClearPass logic to handle different authentication events.</li><li>Implement a secure network that follows the principles of the Zero Trust Security (ZTS) architecture.</li></ul><ul> <li><span class="cms-link-marked"><a class="fl-href-prod" href="/ibb/en/course/aruba-cpc"><svg role="img" aria-hidden="true" focusable="false" data-nosnippet class="cms-linkmark"><use xlink:href="/css/img/icnset-linkmarks.svg#linkmark"></use></svg>HPE Aruba Networking ClearPass Configuration <span class="fl-prod-pcode">(CPC)</span> 25.23</a></span></li></ul><p>Ideal candidates include network professionals who are looking to build their advanced knowledge of ClearPass.</p><h5>Public Key Infrastructure</h5><ul> <li>Describe PKI infrastructure</li><li>Evaluate the advantages and disadvantages of public and private PKIs</li><li>Understand best practices for public and private certificates on ClearPass</li></ul><h5>ClearPass cluster</h5><ul> <li>The licensing module for ClearPass</li><li>Request certificates for RADIUS and HTTPS</li><li>Upgrade the ClearPass system</li><li>Run and secure backups</li></ul><h5>Upgrade ClearPass cluster</h5><ul> <li>Describe ClearPass cluster upgrade procedures</li><li>Analyze best practices on cluster updates</li></ul><h5>Cluster troubleshooting</h5><ul> <li>Revise common upgrade failures</li><li>Assess and troubleshoot failed cluster upgrades</li></ul><h5>Enrollment over Secure Transport</h5><ul> <li>Define EST</li><li>EST&rsquo;s main components</li><li>Configure and monitor ETS</li></ul><h5>RadSec</h5><ul> <li>Describe RadSec, its main components and characteristics</li><li>Configure RadSec</li><li>Troubleshoot RadSec</li></ul><h5>ClearPass access request process</h5><ul> <li>Describe the service classification and match process</li><li>The process of an access request</li><li>Perform services troubleshooting</li></ul><h5>Creating services and rules manually</h5><ul> <li>Describe the process of manually creating a service and its dependencies</li><li>Manually configure new services, enforcement policies and profiles</li><li>Explore the different parts of a service and best practices of naming convention and maintenance</li></ul><h5>Dual SSID OnBoard</h5><ul> <li>Compare single and dual SSID device onboarding</li><li>The benefits of dual SSID onboarding</li><li>Configure dual SSID onboarding</li><li>Managing usercertificates</li></ul><h5>Implementing MPSK</h5><ul> <li>MPSK concept</li><li>Configure MPSK with user self-registration</li><li>Configure MPSK for a device group</li><li>Troubleshooting MPSK</li></ul><h5>Wired onboarding/profiling</h5><ul> <li>Onboarding process for wired devices</li><li>Configure services for wired devices onboard</li><li>Troubleshoot wired authentication and profiling</li></ul><h5>Dynamic Segmentation - BYOD, employee, and guest</h5><ul> <li>Concepts of dynamic segmentation</li><li>ClearPass functions related to dynamic segmentation</li><li>Configure downloadable user roles to support dynamic segmentation</li></ul><h5>Public Key Infrastructure</h5><ul> <li>Describe PKI infrastructure</li><li>Evaluate the advantages and disadvantages of public and private PKIs</li><li>Understand best practices for public and private certificates on ClearPass</li></ul><h5>ClearPass cluster</h5><ul> <li>The licensing module for ClearPass</li><li>Request certificates for RADIUS and HTTPS</li><li>Upgrade the ClearPass system</li><li>Run and secure backups</li></ul><h5>Upgrade ClearPass cluster</h5><ul> <li>Describe ClearPass cluster upgrade procedures</li><li>Analyze best practices on cluster updates</li></ul><h5>Cluster troubleshooting</h5><ul> <li>Revise common upgrade failures</li><li>Assess and troubleshoot failed cluster upgrades</li></ul><h5>Enrollment over Secure Transport</h5><ul> <li>Define EST</li><li>EST&rsquo;s main components</li><li>Configure and monitor ETS</li></ul><h5>RadSec</h5><ul> <li>Describe RadSec, its main components and characteristics</li><li>Configure RadSec</li><li>Troubleshoot RadSec</li></ul><h5>ClearPass access request process</h5><ul> <li>Describe the service classification and match process</li><li>The process of an access request</li><li>Perform services troubleshooting</li></ul><h5>Creating services and rules manually</h5><ul> <li>Describe the process of manually creating a service and its dependencies</li><li>Manually configure new services, enforcement policies and profiles</li><li>Explore the different parts of a service and best practices of naming convention and maintenance</li></ul><h5>Dual SSID OnBoard</h5><ul> <li>Compare single and dual SSID device onboarding</li><li>The benefits of dual SSID onboarding</li><li>Configure dual SSID onboarding</li><li>Managing usercertificates</li></ul><h5>Implementing MPSK</h5><ul> <li>MPSK concept</li><li>Configure MPSK with user self-registration</li><li>Configure MPSK for a device group</li><li>Troubleshooting MPSK</li></ul><h5>Wired onboarding/profiling</h5><ul> <li>Onboarding process for wired devices</li><li>Configure services for wired devices onboard</li><li>Troubleshoot wired authentication and profiling</li></ul><h5>Dynamic Segmentation - BYOD, employee, and guest</h5><ul> <li>Concepts of dynamic segmentation</li><li>ClearPass functions related to dynamic segmentation</li><li>Configure downloadable user roles to support dynamic segmentation</li></ul>After you successfully complete this course, expect to be able to: - Deploy a complete and resilient Network Access Control (NAC) security solution based on HPE Aruba Networking ClearPass. - Understand the HPE Aruba Networking ClearPass logic to handle different authentication events. - Implement a secure network that follows the principles of the Zero Trust Security (ZTS) architecture.- HPE Aruba Networking ClearPass Configuration (CPC) 25.23Ideal candidates include network professionals who are looking to build their advanced knowledge of ClearPass.Public Key Infrastructure - Describe PKI infrastructure - Evaluate the advantages and disadvantages of public and private PKIs - Understand best practices for public and private certificates on ClearPass ClearPass cluster - The licensing module for ClearPass - Request certificates for RADIUS and HTTPS - Upgrade the ClearPass system - Run and secure backups Upgrade ClearPass cluster - Describe ClearPass cluster upgrade procedures - Analyze best practices on cluster updates Cluster troubleshooting - Revise common upgrade failures - Assess and troubleshoot failed cluster upgrades Enrollment over Secure Transport - Define EST - EST’s main components - Configure and monitor ETS RadSec - Describe RadSec, its main components and characteristics - Configure RadSec - Troubleshoot RadSec ClearPass access request process - Describe the service classification and match process - The process of an access request - Perform services troubleshooting Creating services and rules manually - Describe the process of manually creating a service and its dependencies - Manually configure new services, enforcement policies and profiles - Explore the different parts of a service and best practices of naming convention and maintenance Dual SSID OnBoard - Compare single and dual SSID device onboarding - The benefits of dual SSID onboarding - Configure dual SSID onboarding - Managing usercertificates Implementing MPSK - MPSK concept - Configure MPSK with user self-registration - Configure MPSK for a device group - Troubleshooting MPSK Wired onboarding/profiling - Onboarding process for wired devices - Configure services for wired devices onboard - Troubleshoot wired authentication and profiling Dynamic Segmentation - BYOD, employee, and guest - Concepts of dynamic segmentation - ClearPass functions related to dynamic segmentation - Configure downloadable user roles to support dynamic segmentationPublic Key Infrastructure - Describe PKI infrastructure - Evaluate the advantages and disadvantages of public and private PKIs - Understand best practices for public and private certificates on ClearPass ClearPass cluster - The licensing module for ClearPass - Request certificates for RADIUS and HTTPS - Upgrade the ClearPass system - Run and secure backups Upgrade ClearPass cluster - Describe ClearPass cluster upgrade procedures - Analyze best practices on cluster updates Cluster troubleshooting - Revise common upgrade failures - Assess and troubleshoot failed cluster upgrades Enrollment over Secure Transport - Define EST - EST’s main components - Configure and monitor ETS RadSec - Describe RadSec, its main components and characteristics - Configure RadSec - Troubleshoot RadSec ClearPass access request process - Describe the service classification and match process - The process of an access request - Perform services troubleshooting Creating services and rules manually - Describe the process of manually creating a service and its dependencies - Manually configure new services, enforcement policies and profiles - Explore the different parts of a service and best practices of naming convention and maintenance Dual SSID OnBoard - Compare single and dual SSID device onboarding - The benefits of dual SSID onboarding - Configure dual SSID onboarding - Managing usercertificates Implementing MPSK - MPSK concept - Configure MPSK with user self-registration - Configure MPSK for a device group - Troubleshooting MPSK Wired onboarding/profiling - Onboarding process for wired devices - Configure services for wired devices onboard - Troubleshoot wired authentication and profiling Dynamic Segmentation - BYOD, employee, and guest - Concepts of dynamic segmentation - ClearPass functions related to dynamic segmentation - Configure downloadable user roles to support dynamic segmentation5 days2830.0013650.003000.003300.003200.002560.001920.004950.004950.004950.004950.004000.003300.00