User Manual

W-ClearPass Access Management System Data Sheet
Appliance Specications
Access Management
System-500
Access Management
System-5000
Access Management
System-25000
CPU (1) Dual Core Pentium (1) Quad Core Xeon (2) Quad Core Xeon
Memory 4 GB 8 GB 64 GB
Hard drive storage
(1) 3.5” SATA (7K RPM)
500GB hard drive
(2) 3.5” SATA (7.2K RPM)
500GB hard drives, RAID-1
controller
(4) 2.5” SAS (10K RPM)
600GB Hot-Plug hard
drives, RAID-10 controller
Appliance Scalability
Maximum devices 500 5,000 25,000
Form Factor
Dimensions (W x H x D) 16.8” x 1.7” x 14” 17.53” x 1.7” x 26.17” 17.53” x 1.7” x 26.17”
Weight (max cong) 14 Lbs 39 Lbs 39 Lbs
Power
Power consumption (maximum) 260 watts max 250 watts max 717 watts max
Power supply Single Single
Dual hot-swappable (op-
tional)
AC input voltage
110/220 VAC
auto-selecting
110/220 VAC
auto-selecting
110/220 VAC
auto-selecting
AC input frequency 50/60 Hz auto-selecting 50/60 Hz auto-selecting 50/60 Hz auto-selecting
Environmental
Operating temperature
10º C to 35º C
(50º F to 95º F)
10º C to 35º C
(50º F to 95º F)
10º C to 35º C
(50º F to 95º F)
Operating vibration
0.26 G at 5 Hz to 350 Hz
for 5 minutes
0.26 G at 5 Hz to 350 Hz
for 5 minutes
0.26 G at 5 Hz to 350 Hz
for 5 minutes
Operating shock
1 shock pulse of 31 G
for up to 2.6 ms
1 shock pulse of 31 G
for up to 2.6 ms
1 shock pulse of 31 G
for up to 2.6 ms
Operating altitude
-16 m to 3,048 m
(-50 ft to 10,000 ft)
-16 m to 3,048 m
(-50 ft to 10,000 ft)
-16 m to 3,048 m
(-50 ft to 10,000 ft)
Specifications
Access Management System ClearPass
Policy Manager
• Comprehensive identity-based policy engine.
• Posture agents for Windows, Mac OS X, Linux operating systems.
• Built-in AAA services – RADIUS, TACACS+, Kerberos.
• Web, 802.1X, non-802.1X authentication and authorization.
• Reporting, analytics and troubleshooting tools.
• External captive portal redirect to multivendor equipment.
• Interactive policy simulation and monitor mode utilities.
• Deployment templates for any network type, identity store
and endpoint.
• User-initiated device registration – Access Management
System AirGroup and unmanaged devices.
Framework and Protocol Support
• RADIUS, RADIUS CoA, TACACS+, web authentication
• EAP-FAST (EAP-MSCHAPv2, EAP-GTC, EAP-TLS)
• PEAP (EAP-MSCHAPv2, EAP-GTC, EAP-TLS)
• TTLS (EAP-MSCHAPv2, EAP-GTC, EAP- TLS, EAP-MD5, PAP, CHAP)
• EAP-TLS
• PAP, CHAP, MSCHAPv1 and 2, EAP-MD5
• Wireless, wired, and VPN 802.1X
• Microsoft NAP, NAC
• Windows machine authentication
• MAC auth (non 802.1X devices)
• Audit (rules based on port and vulnerability scans)
Supported Identity Stores
• Microsoft Active Directory
• Kerberos
• Any LDAP compliant directory
• Any ODBC-compliant SQL server
• Token servers
• Built-in identity store
• Built-in static hosts list
RFC Standards
• 2246, 2248, 2548, 2759, 2865, 2866, 2869, 2882, 3079,
3579, 3580, 3748, 4017, 4137, 4849, 4851, 5216, 528
Internet Drafts
• Protected EAP Versions 0 and 1, Microsoft CHAP extensions,
dynamic provisioning using EAP-FAST, TACACS+.