profiling in clearpass policy manager
play

Profiling in ClearPass Policy Manager Jonas Humble #ArubaAirheads - PowerPoint PPT Presentation

Profiling in ClearPass Policy Manager Jonas Humble #ArubaAirheads Why Profile? #ArubaAirheads The definition of GENIUS is taking the complex and making it SIMPLE. Albert Einstein 3 Evolution of the NETWORK CLOUD ENABLED FIXED


  1. Profiling in ClearPass Policy Manager Jonas Humble #ArubaAirheads

  2. Why Profile? #ArubaAirheads

  3. “The definition of GENIUS is taking the complex and making it SIMPLE.” Albert Einstein 3

  4. Evolution of the NETWORK CLOUD ENABLED FIXED MOBILE IOT #ArubaAirheads 4

  5. Key campus network CHALLENGES Enhancing user Policy Security concerns (and device) administration with the growth of experience complexity IoT #ArubaAirheads 5

  6. Segmentation brings COMPLEXITY DATA VOICE GUEST CORP BYOD #ArubaAirheads 6

  7. Wired and Wireless access GOALS Beyond VLANs to Users ü Better user experience ü Improved security posture Permit APP 1 Lisa ü Faster, dynamic Deny APP 2 NAT APP 3 QOS APP 4 #ArubaAirheads 7

  8. Aruba DYNAMIC SEGMENTATION Segmented Policy Automated Policy Centralized Policy No more help desk calls to move devices from one port to another #ArubaAirheads 8

  9. Wired and Wireless UNIFIED “ Segmentation ” Roles are refers to the separation of “ Dynamic ” traffic Users and Applications and Destinations Devices Access Office Switch Corp ClearPass 365 Academic BYOD Records n0tma1ware IOT .biz Campus Guest AirGroup Controller Access Cluster Point #ArubaAirheads 9

  10. Centralized POLICY Network Access Aruba ClearPass Policy Management Manager Device Provisioning Device Visibility Visitor Management Compliance #ArubaAirheads 10

  11. Dynamic Segmentation SCALABILITY Entire Network Segment Users and Devices Enterprise Campus (Medium-large Sites) SD-Branch (Distributed Sites) Traditional controller-based architecture with Central-managed Branch Gateways with APs APs and switches and switches #ArubaAirheads 11

  12. 5 reasons WHY 1. Better Security - for IoT and user devices at corporate, branches, classrooms, hotel rooms and more 2. Consistent access - fewer frustrated users 3. Simplified IT operations – time saved, less errors, faster service 4. Unified - works on switches and Wi-Fi 5. Scalable and simple – deploy with no rip & replace #ArubaAirheads 12

  13. Dynamic Segmentation DEPLOY IT 1 2 Combine and deploy Aruba building blocks Dynamic Segmentation Public Venues Campus Mobility Controller/Gateway ü Wired and Wireless Access ü Layer 7 Stateful Firewall (DPI) ü Intelligent Role-based Branch Hotel awareness ü Customizable Device Profiling ü Centralized Policy Enforcement Access Switch Access Point Hospital Retail Store #ArubaAirheads 13

  14. Demo #ArubaAirheads 14

  15. THANK YOU! #ArubaAirheads 15

More recommend