Users Guide

340 | ClearPass Policy Manager Profile Dell Networking W-ClearPass Policy Manager 6.4 |ī˜ƒUser Guide
Figure 328: SNMP Read/Write Settings Tabs
In large or geographically spread cluster deployments, you do not want all CPPM nodes to probe all SNMP
configured devices. The default behavior is for a CPPM node in the cluster to read network device information
only for devices configured to send traps to that CPPM node.
Subnet Scan
A network subnet scan is used to discover IP addresses of devices in the network. The devices discovered this
way are further probed using SNMP to fingerprint and assign a Profile to the device. Network subnets to scan.
Subnets to scan are configured per CPPM Zone. This is particularly useful in deployments that are
geographically distributed. In such deployments, it is recommended that you assign the CPPM nodes in a
cluster to multiple ā€œZonesā€ (from Administration > Server Configuration > Manage Policy Manager Zones)
depending on the geographical area served by that node, and enable Profile on at least one node per zone.
For more information, see Manage Policy Manager Zones on page 384.
Figure 329: Subnet Scans page
Profiling
The Profile module uses a two-stage approach to classify endpoints using input attributes.
Stage 1