Profiling in ClearPass Policy Manager Jonas Humble #ArubaAirheads - - PowerPoint PPT Presentation

▶

Dec 14, 2022 18 likes •179 views

Profiling in ClearPass Policy Manager Jonas Humble #ArubaAirheads Why Profile? #ArubaAirheads The definition of GENIUS is taking the complex and making it SIMPLE. Albert Einstein 3 Evolution of the NETWORK CLOUD ENABLED FIXED

SLIDE 1

#ArubaAirheads

Profiling in ClearPass Policy Manager

Jonas Humble

SLIDE 2

#ArubaAirheads

Why Profile?

SLIDE 3

“The definition of GENIUS is taking the complex and making it SIMPLE.”

Albert Einstein

SLIDE 4

4 #ArubaAirheads

IOT

FIXED MOBILE CLOUD ENABLED

Evolution of the

NETWORK

SLIDE 5

5 #ArubaAirheads

Key campus network

CHALLENGES

Policy administration complexity Security concerns with the growth of IoT Enhancing user (and device) experience

SLIDE 6

6 #ArubaAirheads

GUEST DATA VOICE CORP BYOD

Segmentation brings

COMPLEXITY

SLIDE 7

7 #ArubaAirheads

Permit APP 1 Deny APP 2 NAT APP 3 QOS APP 4

Lisa

Wired and Wireless access

GOALS

Beyond VLANs to Users

üBetter user experience üImproved security posture üFaster, dynamic

SLIDE 8

8 #ArubaAirheads

Aruba

DYNAMIC SEGMENTATION

Segmented Policy Centralized Policy Automated Policy

No more help desk calls to move devices from one port to another

SLIDE 9

9 #ArubaAirheads

Campus Controller Cluster

Corp BYOD IOT Guest

Office 365 Academic Records

n0tma1ware .biz

AirGroup

Access Point Access Switch

Users and Devices

Applications and Destinations

ClearPass

Roles are “Dynamic” “Segmentation” refers to the separation of traffic

Wired and Wireless

UNIFIED

SLIDE 10

10 #ArubaAirheads

Network Access Management Device Provisioning Device Visibility Visitor Management Compliance Aruba ClearPass Policy Manager

Centralized

POLICY

SLIDE 11

11 #ArubaAirheads

Dynamic Segmentation

SCALABILITY

Entire Network Segment Users and Devices Enterprise Campus (Medium-large Sites) Traditional controller-based architecture with APs and switches SD-Branch (Distributed Sites) Central-managed Branch Gateways with APs and switches

SLIDE 12

12 #ArubaAirheads

1. Better Security - for IoT and user devices at corporate,

branches, classrooms, hotel rooms and more

2. Consistent access - fewer frustrated users
3. Simplified IT operations – time saved, less errors, faster

service

4. Unified - works on switches and Wi-Fi
5. Scalable and simple – deploy with no rip & replace

5 reasons

WHY

SLIDE 13

13 #ArubaAirheads

Dynamic Segmentation

ü Wired and Wireless Access ü Layer 7 Stateful Firewall (DPI) ü Intelligent Role-based

awareness

ü Customizable Device Profiling ü Centralized Policy Enforcement

Aruba building blocks Combine and deploy

1 2

Retail Store Hospital Hotel Branch Campus Public Venues

Dynamic Segmentation

DEPLOY IT

Mobility Controller/Gateway Access Switch Access Point

SLIDE 14

14 #ArubaAirheads

Demo

SLIDE 15

15 #ArubaAirheads

THANK YOU!

SLIDE 16