Update some cluster wide parameters

AdminSessionIdleTimeout

integer

Admin Session Idle Timeout in minutes

AdminUserLoginRemoteTacacsServerIP

string

Remote TACACS+ server for Admin logins

AdminUserLoginRemoteTacacsServerPort

integer

Admin UI Login Remote TACACS+ Server Port

AdminUserLoginRemoteTacacsServerSecret

string

Remote TACACS+ server shared secret

AdminUserLoginSecondaryRemoteTacacsServerIP

string

AdminUserLoginSecondaryRemoteTacacsServerPort

integer

AdminUserLoginSecondaryRemoteTacacsServerSecret

string

AdminUserLoginTacacsClientIpSetByHeaderXFF

string

enum

Enable Admin UI TACACS+ Client IP set by X-Forwarded-For (XFF) header

Allowed:

AdminUserLoginTertiaryRemoteTacacsServerIP

string

AdminUserLoginTertiaryRemoteTacacsServerPort

integer

AdminUserLoginTertiaryRemoteTacacsServerSecret

string

AlertNotificationTimeout

string

enum

Alert Notification Timeout in hours

AuditRecordsCleanupInterval

integer

Old Audit Records cleanup interval in days

AutoBackupConfigOptions

string

enum

Auto backup configuration options

Allowed:

CLISessionIdleTimeout

integer

CLI Session Idle Timeout in minutes

CSRCleanupInterval

integer

Cleanup interval for CSRs and private keys

ClearPassZoneCache

string

enum

ClearPass Zone Cache Durability

Allowed:

ClusterCommunicationMode

string

enum

Mode of communication between cluster nodes

Allowed:

CommonCriteriaMode

string

enum

Enable Common Criteria mode for the cluster

Allowed:

ConsoleSessionIdleTimeout

integer

Console Session Idle Timeout in minutes

ContentSecurityPolicy

string

enum

Enable Content Security Policy (CSP)

Allowed:

ContextServerPollInterval

integer

Endpoint Context Servers polling interval in minutes

ContextServerPollStartTime

string

[00:00:00-23:59:59] Endpoint Context Servers polling start time

DbAppexternalUserPassword

string

Database user "appexternal" password

DesignatedStandbyPublisher

string

Designated Standby Publisher

DisableTLS1.0

string

enum

Disable TLSv1.0 support

Allowed:

DisableTLS1.1

string

enum

Disable TLSv1.1 support

Allowed:

DisableTLS1.3

string

enum

Allowed:

EnableNTLMV1ForWmi

string

enum

Enable NTLMV1 for WMI scans

Allowed:

EnablePublisherFailover

string

enum

Enable Publisher Failover

Allowed:

EnableTelemetry

string

enum

Enable sharing information about the cluster to Telemetry server

Allowed:

ExpiredGuestAccountsCleanupInterval

integer

Expired guest accounts cleanup interval in days

ExtensionsAutoUpgradesFlag

string

enum

Allowed:

FreeDiskSpaceThreshold

integer

Free disk space threshold value in %

FreeMemoryThreshold

integer

Free memory threshold value in %

ICMPv6Filters

string

enum

Enable ICMPv6 Filters

Allowed:

IgnoreConflictNetworkBootAgents

string

enum

Enable Ignore Conflict (Network Boot Agents)

Allowed:

InformationStoredCleanupInterval

integer

Cleanup interval for information stored on the disk in days

KnownEndpointsCleanupInterval

integer

Known endpoints cleanup interval in days

LoginBannerText

string

Login Banner Text

NetflowReprofileInterval

integer

Netflow reprofile interval in days

NotificationEmailAddress

string

Alert Notification - Email Address

NotificationSmsAddress

string

Alert Notification - SMS Address

OnGuardAutoUpdatesFlag

string

enum

Automatically check for available OnGuard Signature Updates

Allowed:

PasswordPrompt

string

TACACS+ Password Prompt Text

PolicyResultCacheTimeout

integer

Policy result cache timeout in minutes

PostAuthUnsubscribeEndpoints

string

enum

Allowed:

PostAuthV2

string

enum

Enable Post-Auth v2

Allowed:

PostAuthV2HttpEnforcement

string

enum

Enable Post-Auth v2 HTTP enforcement

Allowed:

ProcessWiredFromIfMap

string

enum

Process wired device information from IF-MAP interface

Allowed:

ProfiledKnownEndpointsCleanupOption

string

enum

Profiled Known endpoints cleanup option in days

Allowed:

ProfiledUnknownEndpointsCleanupInterval

integer

Profiled Unknown endpoints cleanup interval in days

ProfilerConflictStrictMode

string

enum

Conflict Detection Strict Mode

Allowed:

ProfilerNmapEnable

string

enum

Enable endpoint port scan using Nmap

Allowed:

ProfilerPostureEnable

string

enum

Enable Endpoint scan using WMI

Allowed:

ProfilerScanPorts

string

Profiler Scan TCP Ports

ProfilerSubnetScanInterval

integer

Profiler subnet scan interval in hours

ProfilingAutoUpdatesFlag

string

enum

Automatically check for available Profiling Updates

Allowed:

SSHCipherMode

string

Allowed SSH Cipher Modes

SessionLogsCleanupInterval

integer

Cleanup interval for Session log details in the database in days

SoftwareAutoUpdatesFlag

string

enum

Automatically check for available Software Updates

Allowed:

StaleTLSsessioninDiskclenaup

integer

StandbyFailoverWaitTime

integer

Failover Wait Time in minutes

StaticIPEndpointsCleanupOption

string

enum

Static IP endpoints cleanup option

Allowed:

StorePasswordHash

string

enum

Store Password Hash for MSCHAP authentication

Allowed:

StoreReversibleLocalUserPasswords

string

enum

Store Local User passwords using reversible encryption

Allowed:

SyslogBatchInterval

integer

Syslog Export Interval in seconds

SystemAlertLevel

string

enum

System Alert Level

Allowed:

TacacsAllowUnencryptedCommunication

string

enum

Enable TACACS+ clients to communicate with ClearPass server over an unencrypted channel

Allowed:

TacacsDisableChangePassword

string

enum

Disable Change Password for TACACS+

Allowed:

TacacsIdleTimeout

integer

TACACS+ Connection Idle Timeout in seconds

TacacsProcessUnauthenticatedRequest

string

enum

Enable unauthenticated TACACS+ user request processing

Allowed:

UnknownEndpointsCleanupInterval

integer

Unknown endpoints cleanup interval in days

UserPrompt

string

TACACS+ User Prompt Text

allowConcurrentLogin

string

enum

Enable Concurrent Admin Login

Allowed:

session_cache_type

string

enum

Allowed:

200OK

204No Content

304Not Modified

404Not Found

406Not Acceptable

415Unsupported Media Type

422Unprocessable Entity