Aruba Content Pack

Overview

Increase visibility of your endpoints outside of the traditional enterprise perimeter and the security risks that target them. The views included in this content pack help you to monitor and analyze Aruba ClearPass events from within the McAfee Enterprise Security Manager console. You can filter Aruba events by normalization, source user, event category, applications, vendor identifier, and event subtype. These filters can help you discover anomalous activity, such as the user "testuser" trying to authenticate outside of normal usage. As you navigate views, relevant filters and panes are bound together in the display to help you investigate quickly.