ClearPass uses RADIUS (Remote Authentication Dial-In User Service) for authentication, authorization, and accounting in network access control.

ClearPass OnGuard provides the framework for endpoint health checks. In the service selection rules, enabling Posture Compliance tells ClearPass to look for a health token from the OnGuard agent. By selecting auto-remediation , the administrator allows the system to automatically trigger fixes (like starting a disabled firewall) or redirect the user to a Remediation URL where they can find instructions or software updates needed to become compliant.

The LDAP browser within ClearPass Policy Manager is a critical diagnostic tool used to verify the actual data stored in an external identity store. Because ClearPass bases its Authorization decisions on specific attributes (such as department, memberOf, or accountStatus), the administrator must ensure those attributes are correctly populated in the directory. By browsing the directory tree and inspecting a specific user object, an engineer can see exactly what attributes ClearPass "sees" during a request, helping identify if a role-mapping failure is due to a missing or incorrect LDAP attribute.