A. The Cache Timeout is designed to reduce the amount of traffic between ClearPass and the AD server by caching user credentials for a 10 hour period.

B. Less traffic is required between ClearPass and the AD server when re-authenticating within a 10 hour period.

C. ClearPass will cache all user and machine attributes from AD every 10 hours in anticipation of one of those users or machines attempting to authenticate.

D. On a failed authentication attempt, ClearPass will consider any subsequent attempts within 10 hours as total failed attempts before blacklisting the client.

E. A user changing departments may not see their Department attribute change in AD reflected while authenticating until the Cache Timeout period has ended.