CPPM Inspector is a reference tool to help the Aruba ClearPass Administrator map out interdependencies between various Clearpass Policy Manager components.
For example:
What Services or Role Mappings will be affected by deleting a particular Role?
If I make a modification to an Enforcement Profile what Enforcement Policies will be affected?
Another way to use the app is to determine how many times a particular item is being used.
For example:
How many Services are using the [CHAP] Authentication Method?
Which Enforcement Policies are using the [User Authenticated] role?
Or perhaps use the app as a quick reference to look up basic Service configuration information without having to log in to the Clearpass Web Console.
CPPM Inspector will show basic information regarding the following components:
Radius Authentication Services (5 different types)
Authentication Methods & Sources
Static Host Lists
Roles & Role Mappings
Posture Checks
Enforcement Profiles (6 different types)
Enforcement Policies
The app works by loading the Services.xml file that is exported from the supported Clearpass Policy Manager server.
Supported Clearpass server versions are: 6.9 through 6.10.
The app does not communicate with the Clearpass server. No special configuration is required on the Clearpass server to use the app. The app only needs access to the exported Services.xml file which can reside in a file location reachable by the device running the app. The information presented by the app is only as accurate and up-to-date as the date/time stamp on the exported Services.xml file. With that said if changes are made to the Clearpass server after the last exported Services.xml file was taken those changes will not be reflected in the app until a new Services.xml file is exported. It is highly advised to double/triple check any information provided by CPPM Inspector as the information provided may not reflect the current configuration on the Clearpass Server. Again...The information presented by the app is only as accurate and up-to-date as the date/time stamp on the exported Services.xml file.
CPPM Inspector is a self-contained app meaning there is no dependency on any cloud service or web server for any of it functions. As such the app will work in airplane mode with all wifi/cellular services turned off. As long as the exported Services.xml file resides on the iPhone/iPad CPPM Inspector will be able to access it.
CPPM Inspector does not gather nor use any personal information. CPPM Inspector only needs access to the Services.xml file to function.
For the Aruba Networks SEs...CPPM Inspector is a good reference tool when doing a Clearpass Assessment for a customer without having the need to connect to or log in to the Clearpass Server. With proper permission from the customer, just open the customer provided Services.xml file and you have visibility into their Clearpass Policy Manager services configuration.