Aruba ClearPass Access Management System ... - Mayflex

More documents

Recommendations

Info

AP-120 SERIES CONFIGURATIONCLEARPASS ACCESS MANAGEMENT SYSTEM – FREQUENTLY ASKED QUESTIONSVirtual Desktop – some enterprises address the problem of BYOD withvirtualization. In this scenario, no corporate data can be stored on the device andno applications can be run natively on the device. The challenge here is that VDI islimited in scope and in many cases, does not provide a user experience that isoptimized for mobile handheld devices like the iPad. This is because VDI oftenreplicates a windows machine on a smartphone or tablet.VPN – Many enterprises are addressing BYOD with a short term workaround ofvirtual private networks (VPN). Personal devices must launch a VPN session inorder to gain corporate network access. MDM – According to Gartner, the enterprise MDM market has more than 60players with a wide range of products, services and capabilities. These range fromlightweight approaches that push small mobile agents to the device. Toheavyweight client side management software that supports actions such ascontainerization and selective wipe.Access Control –Access Control vendors ranging from Bradford Networks to CiscoISE address policy control for personal devices and will often assess the risk of thedevice before allowing it to access the network.What makes ClearPass unique is that it does what all of the other point-products can’t do– it offers a comprehensive workflow for BYOD.Onboarding the device. Automatically provisioning the devices settings andchecking to make sure the device hasn’t be compromised in any way or presentany risk.Handling policy decisions and policy enablement. Essentially taking in all theinformation about the context of the user and device and enabling the appropriatepolicy.Finally, handling enforcement of that policy across the global organization, overwired, wireless and remote.3. Didn’t Aruba address BYOD already? What does ClearPass add?With the introduction of the Aruba Move architecture in early 2011, Aruba deliveredBYOD capabilities that addressed the primary challenge at that time, which were iOSdevices connecting to Aruba WLAN networks. MOVE also offered device fingerprinting,self-serve provisioning of iOS devices and context-based policy enforcement across Arubanetworks.ARUBA NETWORKS CHANNEL PARTNER CONFIDENTIAL – DO NOT DISTRIBUTE PAGE 6
AP-120 SERIES CONFIGURATIONCLEARPASS ACCESS MANAGEMENT SYSTEM – FREQUENTLY ASKED QUESTIONSWith the addition of ClearPass to the MOVE architecture, Aruba offers far more extensivepolicy enforcement and device provisioning capabilities which can be used across mostvendors’ network infrastructure devices. The ClearPass system also now provides deviceposture assessment and remediation, more accurate device profiling, and centralizedpolicy management visibility.4. Are enterprises prepared for BYOD?While many organizations have started tackling the challenges of personal devices, thereare three major questions that remain: How do I keep my network and my users protected? How do I provide a reliable & intuitive experience to my employees & guests? How do I minimize impact to my IT and helpdesk staff?5. What are the different components of ClearPass?The Aruba ClearPass platform consists of the following products:ClearPass Policy Manager – ClearPass Policy Manager provides the baseline platformfor policy management, AAA, profiling, network access control and reporting. Theresult is centrally managed secure network access that accommodates requirementsacross multiple locations and multivendor networks, regardless of device ownershipand connection method.The ClearPass Policy Manager is available as security hardened virtual or hardwareappliances and turnkey software.ClearPass OnGuard – ClearPass OnGuard, available as a software module of theClearPass Policy Manager, enables organizations to run advanced endpoint postureassessments, as well as baseline network access control (NAC) health checks to ensurecompliance and safeguards before devices connect to a secure network.In addition to anti-virus, anti-spyware and personal firewall checks for devices runningthe Windows, Mac OS X and Linux operating systems, Aruba’s Windows OnGuardagents perform advanced posture assessments, such handling the use of peer-to-peerapplications, VM applications and USB storage devices, with automatic and manualremediation options. Assessments can be performed using Aruba’s Persistent anddissolvable OnGuard agents and well as Operating Systems native agents.ClearPass Onboard – ClearPass Onboard, available as a software module of theClearPass Policy Manager, fully automates device onboarding for IT via a built-inARUBA NETWORKS CHANNEL PARTNER CONFIDENTIAL – DO NOT DISTRIBUTE PAGE 7
Page 1 and 2: Aruba ClearPass AccessManagement Sy
Page 3: AP-120 SERIES CONFIGURATIONCLEARPAS
Page 8 and 9: AP-120 SERIES CONFIGURATIONCLEARPAS
Page 28: AP-120 SERIES CONFIGURATIONCLEARPAS

Aruba ClearPass Access Management System ... - Mayflex

You also want an ePaper? Increase the reach of your titles

Delete template?

Save as template?