HPE ClearPass OnGuard - Subscription License - 2500 Endpoint - 1 Year

Protect your network and empower seamless, policy-driven access for every device with HPE ClearPass OnGuard. This 1-year subscription license covers up to 2,500 endpoints and is delivered electronically for fast, convenient deployment. With OnGuard, you’ll gain robust endpoint security that blends centralized policy management, rigorous device posture checks, and flexible access control across Mac and PC environments. Designed for organizations that demand reliable uptime and scalable protection, this license helps you enforce compliance, reduce risk, and keep your network environments secure without slowing productivity.

• Comprehensive endpoint licensing: This offering is a subscription license valid for 2,500 endpoints for a full 12 months. It enables you to scale your security posture as your workforce grows, while maintaining consistent enforcement of your organization’s security policies across all devices. The 1-year term is designed to align with typical renewal cycles, ensuring you can plan budgets and security upgrades with confidence.
• Electronic delivery for fast deployment: The OnGuard license is provided electronically, allowing your security team to activate and deploy without delays. Quick access means you can begin posture assessments, policy configurations, and NAC enforcement soon after purchase, minimizing downtime and accelerating time-to-value for your security investments.
• Mac and PC compatibility: HPE ClearPass OnGuard supports both macOS and Windows environments, giving you a unified way to enforce security policies across diverse endpoints. This cross-platform compatibility helps organizations maintain consistent user experiences while ensuring policy compliance, regardless of the operating system in use.
• Policy-driven network access control (NAC): At the heart of OnGuard is advanced NAC with centralized policy management. Define who can access which resources and under what conditions, based on device posture, user role, location, and time. This creates a secure perimeter around your network and ensures that only compliant devices gain access to sensitive resources.
• Device posture and remediation: OnGuard continuously evaluates endpoints for compliance with your security standards. Non-compliant devices can be quarantined or redirected to remediation workflows, helping to minimize risk without exposing the entire network to threat. The solution supports a streamlined remediation process to bring devices into compliance quickly.

Technical Details of HPE ClearPass OnGuard - Subscription License - 2500 Endpoint - 1 Year

• Product type: Subscription license for HPE ClearPass OnGuard, focused on endpoint security and network access control.
• Endpoints covered: Up to 2,500 endpoints under a single 1-year license.
• Delivery method: Electronic license key and entitlement, ready for activation in your ClearPass OnGuard environment.
• License duration: 1 year from activation date; renewal options available through standard procurement.
• Platform support: Compatible with Mac and Windows PC endpoints, enabling consistent policy enforcement across mixed environments.
• Core capabilities: Centralized policy management, device posture assessment, access control enforcement, and remediation workflows to maintain secure network access.
• Security focus: Helps enforce compliance with corporate security policies, reduce exposure to unknown or unmanaged devices, and streamline access for compliant endpoints.
• Delivery scope: Electronic distribution supports rapid deployment and easier license tracking for IT teams.
• Renewal & lifecycle: Renewal options are available, allowing you to extend protection beyond the initial 1-year term and continue policy enforcement and posture checks without gaps.

how to install HPE ClearPass OnGuard

• Prepare your environment: Verify that your network and ClearPass OnGuard management console are ready for onboarding. Ensure you have administrative access to the OnGuard platform and that your license is activated or ready for activation via electronic delivery.
• Obtain and activate the license: Retrieve the 2,500-endpoint, 1-year subscription license entitlements from the electronic delivery channel. Apply the license within the ClearPass OnGuard console to enable endpoint enforcement and posture checks.
• Choose deployment mode: Decide between agent-based or agentless posture checks, depending on your organization’s needs and endpoint management strategy. OnGuard supports flexible deployment to minimize friction for end users while maintaining strong security posture.
• Deploy endpoint agents (if required): For agent-based configurations, install the OnGuard agent on supported Mac and Windows endpoints. The agent gathers posture data, enforces compliance policies, and communicates with the OnGuard server to grant or restrict network access.
• Define posture policies and access rules: Create and customize policy sets that determine who can access what resources, under which conditions, and when remediation is required. Include device health checks, antivirus status, firewall configuration, OS version, and other posture criteria that align with your security objectives.
• Enroll devices and test: Start enrolling devices into your policy framework and run pilot tests to verify that compliant endpoints receive full access while non-compliant devices are remediated or quarantined according to policy. Validate access paths for both Mac and PC endpoints to ensure a consistent user experience.
• Monitor, adjust, and renew: Use the OnGuard management interface to monitor posture results, access events, and remediation activity. Periodically adjust policies to respond to evolving threats and business needs. Plan for renewal at the end of the 1-year term to maintain uninterrupted protection.

Frequently asked questions

• What does the HPE ClearPass OnGuard subscription license cover? The license provides 2,500 endpoint coverage for a 1-year period, enabling centralized policy enforcement and posture-based access control across Mac and PC endpoints. It is delivered electronically for rapid deployment and renewal is available to extend protection beyond the initial term.
• Is OnGuard agent-based or agentless? OnGuard supports flexible deployment, including both agent-based and agentless options. You can choose the approach that best fits your network architecture, security requirements, and end-user experience.
• Can non-compliant devices still access the network? Non-compliant devices can be redirected to remediation workflows or quarantined according to your defined policies. The goal is to minimize risk while enabling legitimate users to regain compliant access promptly.
• Does this license work with macOS and Windows? Yes. The license covers endpoints running macOS and Windows PC, enabling consistent policy enforcement across mixed environments and simplifying administration for IT teams supporting diverse devices.
• How do I renew after 1 year? Renewal options are available through standard procurement channels. Renewing the subscription maintains continuous coverage, policy enforcement, and posture checks for your endpoints to prevent gaps in protection.
• What kind of benefits can I expect from implementing OnGuard? Expect strengthened network access control, improved visibility into device posture, faster remediation of non-compliant devices, streamlined policy management, and a more secure baseline for your organization’s endpoint security posture.
• Is electronic delivery mandatory? Electronic delivery is provided to expedite deployment and license management. It enables quick activation in your OnGuard environment, reducing the time between purchase and start of enforcement.