Administrator Guide

422 | W-ClearPass Policy Manager Profile Dell Networking W-ClearPass Policy Manager 6.6 | User Guide
Combining this information with MAC OUI, the W-ClearPass Profiler can classify a device as HTC™ Android,
Samsung™ Android, or Motorola® Android, etc.
The MAC OUI is also useful to profile devices such as printers that might be configured with static IP addresses.
ActiveSync Plug-in Collector
You can install the ActiveSync plug-in on Microsoft Exchange servers.
When a device communicates with an Exchange server using the Active Sync protocol, the device provides
attributes such as device-type and user-agent.
These attributes are collected by the ActiveSync plug-in and sent to the W-ClearPass Profiler. Profiler uses
dictionaries to derive profiles from these attributes.
W-ClearPass OnGuard Agent
The W-ClearPass OnGuard agent performs advanced endpoint posture assessment. This agent can collect and
send operating system details from endpoints during authentication.
The W-Policy Manager Profiler uses the OnGuard os_type attribute to derive a profile.
SNMP Collector
Endpoint information obtained by reading the Simple Network Management Protocol (SNMP) MIBs of network
devices is used to discover and profile static IP devices in the network. For related information, see SNMP
Configuration for Wired Network Profiling on page 426.
Table 242 describes the MIBs used by the SNMP Collector.
MIB Description
SysDescr A textual description of the entity used both for profiling switches, controllers, and routers
configured in W-ClearPass, and for profiling printers and other static IP devices
discovered through SNMP or subnet scans (RFC1213).
cdpCacheTable Provides the cached information obtained via receiving CDP (Cisco Discovery Protocol)
messages from CDP-capable devices. Used to discover neighbor devices connected to
the switch or controller configured in W-ClearPass.
lldpRemTable This table contains one or more rows per physical network connection known to this
agent read from LLDP (Link Layer Discovery Protocol)-capable devices. Used to discover
and profile neighbor devices connected to the switch or controller configured in
W-ClearPass.
ARPtable Address Resolution Protocol (ARP) information read from the network devices. Used as a
means to discover endpoints in the network.
Table 242: SNMP MIBs Used by the SNMP Collector
Setting SNMP Community Attributes
The SNMP-based mechanism is capable of profiling devices only if they respond to SNMP, or if the device
advertises its capability via LLDP (Link Layer Discovery Protocol). When performing SNMP reads for a device,
W-ClearPass uses SNMP Read credentials configured in Network Devices, or defaults to using SNMPv2 with
"public" community strings specified.
To specify SNMPv2 with community strings: