Users Guide

Dell Networking W-ClearPass Policy Manager 6.3 | User Guide ClearPass Policy Manager Profile | 315
Chapter 14
ClearPass Policy Manager Profile
Profile is a Dell Networking W-ClearPass Policy Manager module that automatically classifies endpoints using
attributes obtained from software components called Collectors. You can use Profile to implement “Bring Your Own
Device” (BYOD) flows, where access must be controlled, based on the type of the device and the identity of the user.
While offering a more efficient and accurate way to differentiate access by endpoint type (laptop or tablet), ClearPass
Profile associates an endpoint with a specific user or location and secures access for devices like printers and IP
cameras. Profile can be set up in a network with a minimal amount of configuration.
For more information, see:
l "Device Profile" on page 315
l "Collectors" on page 315
l "Fingerprint Dictionaries" on page 320
l "Profiling" on page 318
Device Profile
A device profile is a hierarchical model consisting of 3 elements – DeviceCategory, DeviceFamily, and DeviceName –
derived by Profile from endpoint attributes.
l DeviceCategory - This is the broadest classification of a device. It denotes the type of the device. Examples include
Computer, Smartdevice, Printer, Access Point, etc.
l DeviceFamily - This element classifies devices into a category and is organized based on the type of operating
system or vendor. For example, when the category is Computer, Dell Networking W-ClearPass Policy Manager
could show a DeviceFamily of Windows, Linux, or Mac OS X, and when the Category is Computer, Dell
Networking W-ClearPass Policy Manager could show a DeviceFamily of Apple or Android.
l DeviceName - Devices in a family are further organized based on more granular details, such as operating system
version. For example, in a DeviceFamily of Windows, Dell Networking W-ClearPass Policy Manager could show a
DeviceName of Windows 7 or Windows 2008 Server.
This hierarchical model provides a structured view of all endpoints accessing the network.
In addition to these, Profile also collects and stores the following:
l IP Address
l Hostname
l MAC Vendor
l Timestamp when the device was first discovered
l Timestamp when the device was last seen
Collectors
Collectors are network elements that provide data to profile endpoints.
For more information, see:
l "DHCP" on page 316
l "ClearPass Onboard" on page 316
l "HTTP User-Agent" on page 316