The Aruba ClearPass Policy Manager platform provides role-based and device-based network access control for employees, contractors and guests across any wired, wireless and VPN infrastructure.

There are two methods of integration between ClearPass Policy Manager and Check Point Identity Awareness Gateway (refer to Aruba Networks documentation for details):

• using HTTP JSON encoded RESTful APIs - Available in R80.10 (For other gateway versions support contact Check Point Support to get a required Hotfix for Check Point Identity Awareness Gateway)
• using RADIUS Accounting

For more information refer to:  sk123717 - Identity Awareness Web-API - Technical Overview

Important Notes for R77.30 and below:

• IDA API has to be enabled on Check Point Identity Awareness Gateway:

  • To check the current status:

    [Expert@HostName:0]# pdp api status

  • To enable:

    [Expert@HostName:0]# pdp api enable

  • To disable:

    [Expert@HostName:0]# pdp api disable

• The "add-identity" command of the API is initiated by Aruba’s side.