Overview
Increase visibility of your endpoints outside of the traditional enterprise perimeter and the security risks that target them. The views included in this content pack help you to monitor and analyze Aruba ClearPass events from within the McAfee Enterprise Security Manager console. You can filter Aruba events by normalization, source user, event category, applications, vendor identifier, and event subtype. These filters can help you discover anomalous activity, such as the user "testuser" trying to authenticate outside of normal usage. As you navigate views, relevant filters and panes are bound together in the display to help you investigate quickly.
Download Content Pack
Registered ServicePortal users can log in to access the Knowledge Center for further documentation or to download the content pack file manually.