Profiling in ClearPass Policy Manager Jonas Humble #ArubaAirheads - PowerPoint PPT Presentation

Profiling in ClearPass Policy Manager Jonas Humble #ArubaAirheads

Why Profile? #ArubaAirheads

“The definition of GENIUS is taking the complex and making it SIMPLE.” Albert Einstein 3

Evolution of the NETWORK CLOUD ENABLED FIXED MOBILE IOT #ArubaAirheads 4

Key campus network CHALLENGES Enhancing user Policy Security concerns (and device) administration with the growth of experience complexity IoT #ArubaAirheads 5

Segmentation brings COMPLEXITY DATA VOICE GUEST CORP BYOD #ArubaAirheads 6

Wired and Wireless access GOALS Beyond VLANs to Users ü Better user experience ü Improved security posture Permit APP 1 Lisa ü Faster, dynamic Deny APP 2 NAT APP 3 QOS APP 4 #ArubaAirheads 7

Aruba DYNAMIC SEGMENTATION Segmented Policy Automated Policy Centralized Policy No more help desk calls to move devices from one port to another #ArubaAirheads 8

Wired and Wireless UNIFIED “ Segmentation ” Roles are refers to the separation of “ Dynamic ” traffic Users and Applications and Destinations Devices Access Office Switch Corp ClearPass 365 Academic BYOD Records n0tma1ware IOT .biz Campus Guest AirGroup Controller Access Cluster Point #ArubaAirheads 9

Centralized POLICY Network Access Aruba ClearPass Policy Management Manager Device Provisioning Device Visibility Visitor Management Compliance #ArubaAirheads 10

Dynamic Segmentation SCALABILITY Entire Network Segment Users and Devices Enterprise Campus (Medium-large Sites) SD-Branch (Distributed Sites) Traditional controller-based architecture with Central-managed Branch Gateways with APs APs and switches and switches #ArubaAirheads 11

5 reasons WHY 1. Better Security - for IoT and user devices at corporate, branches, classrooms, hotel rooms and more 2. Consistent access - fewer frustrated users 3. Simplified IT operations – time saved, less errors, faster service 4. Unified - works on switches and Wi-Fi 5. Scalable and simple – deploy with no rip & replace #ArubaAirheads 12

Dynamic Segmentation DEPLOY IT 1 2 Combine and deploy Aruba building blocks Dynamic Segmentation Public Venues Campus Mobility Controller/Gateway ü Wired and Wireless Access ü Layer 7 Stateful Firewall (DPI) ü Intelligent Role-based Branch Hotel awareness ü Customizable Device Profiling ü Centralized Policy Enforcement Access Switch Access Point Hospital Retail Store #ArubaAirheads 13

Demo #ArubaAirheads 14

THANK YOU! #ArubaAirheads 15