A brief (milliseconds to seconds) traffic leak may occur when an authenticated supplicant is removed, either via the clear dot1x host all CLI command or due to a supplicant timeout. During this window, the supplicant's traffic may pass without ACL enforcement.
Get the CyboWatch SIEM platform, hosting, and 24×7 SOC analysts. Call or email us to get started.