Administrator Guide

14 | About W-ClearPass Dell Networking W-ClearPass Deployment Guide
l Access for unmanaged endpoints
Unmanaged non-802.1X devices (such as printers, IP phones, and IP cameras) can be identified as known
or unknown upon connecting to the network. The identity of these devices is based on the presence of
their MAC address in an external or internal database.
l Secure configuration of personal devices
W-ClearPass Onboard fully automates the provisioning of any Windows, Mac OS X, iOS, Android,
Chromebook, and Ubuntu devices via a built-in captive portal. Valid users are redirected to a template-
based interface to configure required SSIDs and 802.1X settings, and download unique device credentials.
Additional capabilities include the ability for IT to revoke and delete credentials for lost or stolen devices,
and the ability to configure mobile email settings for Exchange ActiveSync and VPN clients on some device
types.
l Customizable visitor management
W-ClearPass Guest simplifies work flow processes so that receptionists, employees, and other non-IT staff
can create temporary guest accounts for secure Wi-Fi and wired network access. Self-registration allows
guests to create their credentials.
l Device health checks
W-ClearPass OnGuard, as well as separate OnGuard persistent or dissolvable agents, performs advanced
endpoint posture assessments. Traditional NAC health-check capabilities ensure compliance and network
safeguards before devices connect.
You can use information about endpoint integrity (such as status of anti-virus, anti-spyware, firewall, and
peer-to-peer applications) to enhance authorization policies. Automatic remediation services are also
available for non-compliant devices.
W-ClearPass Policy Manager Hardware and Virtual Appliances
W-ClearPass Policy Manager is available as hardware or a virtual appliance that supports 500, 5000, and 25,000
authenticating devices.
l For hardware virtual appliance installation and deployment procedures, see Setting Up the W-ClearPass
Hardware Appliances on page 15
Virtual appliances are supported on two platforms:
l VMware ESX and ESXi
For installation and deployment procedures, see Using the VMware vSphere Web Client to Install W-
ClearPass on a Virtual Machine on page 28.
l Microsoft Hyper-V
For installation and deployment procedures, see Using Microsoft Hyper-V to Install W-ClearPass on a
Virtual Appliance on page 41.
To increase scalability and redundancy, you can deploy virtual appliances, as well as the hardware appliances,
within a cluster.
W-ClearPass Specifications
W-ClearPass Policy Manager
l Comprehensive identity-based policy engine
l Posture agents for Windows, Mac OS X, and Linux operating systems
l Built-in AAA services: RADIUS, TACACS+, and Kerberos
l Web, 802.1X, and non-802.1X authentication and authorization