HPE Aruba Networking ClearPass Configuration, Rev. 25.21

HPE Aruba Networking ClearPass is a network access control and policy management platform that identifies users and devices, checks their health, and applies the right level of access across wired, wireless, and guest networks. It underpins secure Wi-Fi, BYOD, guest access and role-based segmentation in organisations of every size.

HPE Aruba Networking ClearPass Configuration, Rev. 25.21 is the foundational course for working with the platform. Over five days of instruction and labs, learners set up ClearPass as a AAA server, integrate authentication sources and external devices, profile endpoints, design services, roles and enforcement, configure guest access and self-registration, apply OnGuard posture checks, provision devices with Onboard, and manage administration, access and Device Insight reporting. It is the recommended training for the HPE Advanced Product Certified – ClearPass certification.

Engineers who also work with HPE Aruba switches can explore our Advanced AOS-CX Switching course.

Course Structure and Key Details

The course typically runs for five days, and HPE offers it as instructor-led training (ILT), virtual instructor-led training (VILT), and self-paced web-based training (WBT). It is organised into 17 modules, combining instructional content with labs.

The course begins with network access control concepts, ClearPass use cases and the ClearPass system, then covers AAA concepts and authentication sources. The external devices module adds network access devices, messaging services, and external context servers, and the endpoint profiling module covers profiling basics and the profiling collector. Learners then work with services, enforcement and ClearPass roles, and configure services using service selection rules.

Web services introduce the Content Manager, skins and the web page editor. Guest authentication covers the captive portal process, web logins, guest accounts and guest MAC authentication, and guest self-registration covers the experience, configuration and process. Wired authentication covers wired access, wired enforcement, and profiling on wired ports.

Two OnGuard modules cover posture policies, the OnGuard agent and monitoring, then the OnGuard workflow and enforcement. Two Onboard modules cover certificate authorities, portal setup and services, then certificate management, user and device management and revocation with OCSP. Administrative operations cover licences, certificates, updates and upgrades, backups and log collection. Administrative access covers admin access to network devices and Policy Manager and guest operator logins, and the final module covers Device Insight alerts, reports and administration.

HPE lists no formal prerequisites for the certification, and authorised partners recommend familiarity with networking and basic network security concepts. The HPE6-A88 exam is taken separately.

Course Objectives

• Implement a ClearPass network access solution.
• Design and apply effective services and enforcement.
• Troubleshoot a ClearPass solution.
• Integrate authentication sources, network access devices, and external context servers.
• Profile endpoints and use device type in policy.
• Configure guest access, including captive portals and self-registration.
• Use OnGuard for posture assessment and Onboard for device provisioning.
• Administer ClearPass and report with Device Insight.