aruba networking for byod_latest

7/28/2019 Aruba Networking for BYOD_latest

http://slidepdf.com/reader/full/aruba-networking-for-byodlatest 1/22

CONFIDENTIAL

© Copyright 2011. Aruba Networks, Inc.

All rights reserved

CONFIDENTIAL


All rights reserved

Networking for BYOD



CONFIDENTIAL


All rights reserved2

The Challenge

Complex to deployand manage

Unreliableconnection & poor app performance

Lack of security for employee & guestpersonal devices



CONFIDENTIAL



How to Make BYOD Work?

ANY NETWORK

BYOD 2012+

VPN

iOS Android Ultrabooks

ANY USER

How do I keep my

network and my

users protected?

How do I provide areliable & intuitive

experience to my

employees & guest

How do I minimize

impact to my IT

and helpdesk staff



CONFIDENTIAL



The Solution:Best in Class Enterprise Wi-Fi and Access Management

Always ConnectedVoice & Video OptimizedEmployee & Corp Owned

Simple & FlexibleDeployment

DependableWi-Fi for Mobile Apps

BYOD Security& Support



CONFIDENTIAL



Aruba Networks MOVE Portfolio

• Open BYOD

Framework Strategy

• Enforcement Across

Any Network Type

• Device Profiling with

Advanced Posture

• Multi-point Access

Visibility

• Secure and Highly

Scalable

Expanded MOVE Architecture AirWave Network

Management

DATA CENTER

Mobility

Controller

+

Thin Access On-Ramps

WIRELESS WIRED VPNREMOTE

OFFICEOUTDOOR

Any Device

ClearPass Access

Management



CONFIDENTIAL



ClearPass Product Family

Profile

• Device Identification andclassification

OnGuard

• Endpoint Health/PostureCollection

Guest

• Guest/Visitor accessmanagement

OnBoard

• Device onboarding andprovisioning

ClearPassPolicy Manager



CONFIDENTIAL


All rights reserved

CONFIDENTIAL


All rights reserved

The ClearPass Access Management Solution



CONFIDENTIAL



ClearPass Policy Manager : Central policy decision point & AAA. Add-on capabilities include

ClearPass Profile: Identify devices in the network as a basis for making

access policy decisions

ClearPass Onboard: guest access & employee self-serve mobile deviceprovisioning of VPN, e-mail and network security, and revocation of device access

ClearPass OnGuard: Controlled access and remediation for compromised devices

ClearPass Guest: Guest access provisioning and management

ClearPass QuickConnect: Automated configuration of 802.1X settings

Aruba ClearPass Product Summary

Open Architecture for BYOD



CONFIDENTIAL



Aruba ClearPass Simplifies BYOD

Onboard

Device

1

Assign

Policy

2

Enforce

Policy

3



CONFIDENTIAL



A C C U R A C Y

BASELINE FINGERPRINTING

EVENTS-CENTRIC FINGERPRINTING

NETWORK HEURISTICS PROFILING

IDENTITY CENTRIC

PROFILING

DEVICE

PROVISIONING

iPad 1

iOS 5.0.1

Accurately Identify DevicesClearPass Profile

Data Collectors

SNMP DHCP HTTP

Enterprise Infrastructure

ActiveSync

IF-MAP

AD

Policy Manager

Mobility Controller

OnGuard



CONFIDENTIAL



Limited

Access Zone

Enrollment and Provisioning WorkflowClearPass Onboard

Active

Directory

Device

Credential

Access Network

ClearPass Policy

Manager

1.Authorize BYOD

enrollmentbased on ADcredentials

2.Register device

type &ownership

Provision a unique

device credential for

that user & device

3.

+Revoke access for

devices that are

lost or stolen

4.



CONFIDENTIAL



BYOD Lifecycle Management

Revoke DeviceNetwork Access

Device InventoryData

Real-time

Dashboard of

BYOD Access

Enforcement of

BYOD Access

Policies



CONFIDENTIAL



Control Compromised DevicesClearPass OnGuard

Detect unsecure

devices

• Block access to network resources

across wired, wireless & remote

• Auto-Remediate the device

• Minimal Risk to Network

Access Network

ClearPass Policy

Manager with OnGuard



CONFIDENTIAL



Automated Guest OnBoardingClearPass Guest

1.

3.

Access Network

2.Sponsor prompted

to confirm that

guest is valid

ClearPass PolicyManager

Account enabled,

visitor notified via

screen, SMS, or emailCollect visitor information

New Visitor

Sponsor



CONFIDENTIAL



• Advanced Guest

Management – Streamlined workflow; No IT

• Sponsored-based, Visitor Self-Registration, Pre-registration,

Anonymous Guest Access

• 3rd Party Integrations

• APIs for integration with existingapplications / CRM tools

– Assignable roles, expirationtimes, user names, passwords

• Highest Customization

–

Skin technology, softwareplugins, APIs

– Targeted advertising andcontent delivery

Enhanced Guest Experience



CONFIDENTIAL



Policy

Context Aware Policy Definition Point

Allow personal devices into alimited access zone (LAZ)

BYOD Policy

All traffic from executive

devices get higher priority

Executive Class Policy

Optimize delivery of MS Lync traffic over the air

Multimedia Policy

Disable Rogue AP,

Blacklist User

Unauthorized Use Policy

Disable device access, not user

access, if device is stolen/lost

Device Revocation Policy

Quarantine unhealthy devices

for remediation

Device Quarantine Policy



CONFIDENTIAL



Enforce a Policy Across Any Network

Any Network

POLICY DECISIONClearPass Policy Manager

POLICY

ENFORCEMENT:

Policy Enforcement Optimized for Mobility



CONFIDENTIAL



Open Network

2.

802.1X settings

& NAC

configuration

3.

Aruba ClearPass QuickConnect

User Experience

Simple self-serviceconnectivity

Windows, Mac,iOS, Android

Impact to IT

Eliminates helpdesk calls

Protects thenetwork withstrong security

QuickConnect

then connects deviceto secure network1.

Web-hosted Captive

Portal

Secure Network

Intranet

Resources

Internet



CONFIDENTIAL



The most complete BYOD network

access solution.1

Most robust but simple to use policy

management system and AAA platform2

Easiest to deploy and scale BYOD solution for any size

network3

Enterprise-class functionality from a single platform (i.e.profiling, onboarding, guest, load-balancing, redundancy)4

Seamless integration with existing standards-based

networking products5

Why Aruba ClearPass for BYOD?

Only Aruba Provides:



CONFIDENTIAL



Easily connect & provision ALL devices

The Complete, Multi-Vendor Way to do BYOD

Take back control over YOUR network

Enable secure BYOD on ALL networks

aruba networking for byod_latest

Documents