ClearPass Device Insight

ClearPass Device Insight is a cloud application. It enables the network and security administrators to discover, monitor, and automatically classify new and existing network devices. You can identify loT, medical, and smart devices, printers, laptops, VoIP Voice over IP. VoIP allows transmission of voice and multimedia content over an IP network. phones, computers, gaming consoles, routers, servers, switches, and so on.

ClearPass Device Insight Features

Some of the key features of ClearPass Device Insight are:

• Intuitive Interface—Our interface provides visibility into all of the discovered devices and their details. Multiple display options make it easy for you to view the devices at different levels such as summary, device, and network levels. A drill down capability enables you to view the specific details of those devices. Rich filtering capability enables you to quickly find devices you are interested in to aid troubleshooting.
• Enhanced Device Discovery
  • Continuous Scanning for Devices—ClearPass Device Insight enables you to continuously scan the network to detect devices and collect their information. ClearPass Device Insight uses a unique set of both active methods like Network Mapper (NMAP), Windows Management Instrumentation (WMI Windows Management Instrumentation. WMI consists of a set of extensions to the Windows Driver Model that provides an operating system interface through which instrumented components provide information and notification.), Simple Network Management Protocol (SNMP Simple Network Management Protocol. SNMP is a TCP/IP standard protocol for managing devices on IP networks. Devices that typically support SNMP include routers, switches, servers, workstations, printers, modem racks, and more. It is used mostly in network management systems to monitor network-attached devices for conditions that warrant administrative attention. ), and Secure Shell (SSH Secure Shell. SSH is a network protocol that provides secure access to a remote device. ) and passive methods like Switch Port Analyzer (SPAN), Dynamic Host Configuration Protocol (DHCP Dynamic Host Configuration Protocol. A network protocol that enables a server to automatically assign an IP address to an IP-enabled device from a defined range of numbers configured for a given network. ), and NetFlow/S-flow/IPFix to collect information about a device. Additional data (that is, IPs and applications used) is also collected for devices through a set of discovery methods using deep packet inspection.
  • Flexible Scans—ClearPass Device Insight enables you to schedule scans to detect devices starting with one or more seed devices on the network and to schedule scans for the devices in one or more subnets Subnet is the logical division of an IP network.. You can schedule multiple scans and they can be run at a time and frequency of your choosing.
• Advanced Device Classification—ClearPass Device Insight provides advanced methods for identifying devices on the network. This includes:
  • AI Artificial intelligence (AI) is the simulation of human intelligence processes by machines, especially computer systems. AI reduces trouble tickets by identifying the network entity that is facing problems through event correlation and root cause analysis./Machine Learning Clustering of Unknown and Known Devices—This groups unknown devices (that is those devices that have attributes but no classification profiles) and known devices into device clusters. The Analyzer within ClearPass Device Insight looks at device attributes including communication and behavior patterns. It then uses machine learning to dynamically build clusters of similar generic (unknown) devices and when possible, offers classification recommendations for the generic devices in those clusters. Machine learning models are used to constantly learn and update these attributes to dynamically update classifications. You can then easily classify the devices in the cluster by assigning a system classification recommendation or you can assign your own custom classification (device category, device family, and device type).
  • User Defined Device Classification Rules—This enables you to define custom device classification rules for any device on the network. ClearPass Device Insight then uses these rules to classify or reclassify devices that are discovered on the network that match this rule criteria.
• Device Monitoring—ClearPass Device Insight continuously monitors changes in devices and monitors the network activity of these devices through constant traffic monitoring. The following can be viewed in the device details user interface for a device:
  • Device attribute changes that have occurred overtime (device history).
  • Hosts a device has communicated with and how much data is being consumed by the device (network digest).
• Crowdsourcing of Device Information—This allows you to use crowdsourcing to share the latest device information for new devices that are discovered on networks across multiple customer sites that use ClearPass Device Insight.

For more information, see ClearPass Device Insight documentation.

ClearPass Device Insight Clusters

The ClearPass Device Insight application is available on the following Aruba Central clusters:

• US-2
• US-WEST-4
• EU-1
• EU-3

Standalone ClearPass Device Insight accounts can launch the ClearPass Device Insight application on these Aruba Central clusters. For more information, see ClearPass Device Insight.

NMS Network Management System. NMS is a set of hardware and/or software tools that allow an IT professional to supervise the individual components of a network within a larger network management framework. accounts do not have access to the ClearPass Device Insight application. Instead, NMS accounts can use the Clients Profile feature that is available on the following clusters:

• US-1

• Canada-1

• APAC-1

• APACT-EAST1

• APAC-SOUTH1

• UAENORTH

For more information, see Viewing the Profile of a Specific Client.