• • Enterprise Level Security For Mobile Environments
    Aruba ClearPass Policy Manager is a wired and wireless, multi-vendor policy platform to centrally enforce enterprise-grade access security. Granular policy enforcement is based on a user's role, device type, device health, location, and time-of-day.
    Offers extensive multi-vendor wireless, wired and VPN infrastructure support which enables IT to easily rollout enterprise level security mobility policies across the enterprise.
    Deployment scalability supports tens of thousands of devices and authentications which surpasses the capabilities offered by legacy authentication, authorization and accounting (AAA) solutions.
    The ClearPass Policy Manager is available as hardware or as a virtual appliance.
  • Advanced Policy Management
    With Aruba ClearPass Policy Manager, organizations can deploy wired and wireless networking using standards-based 802.1X enforcement for strong authentication.
    Aruba ClearPass guest functions simplifies workflow processes so that receptionists, employees and other non-IT staff can create temporary guest accounts for WAP2 Wi-Fi and wired Internet access.
    The optional Aruba ClearPass Onboard add-on provides automated provisioning of Windows, Mac OS X, iOS, Android, Chromebook, and Ubuntu devices via a user driven self-guided portal.
    Aruba ClearPass OnGuard, an optional add-on, leverages persistent and dissolvable agents, to perform advanced endpoint posture assessments over wireless, wired and VPN connections.
  • Stronger, Together – Security In Depth
    With over 120 security technology partners including PaloAlto Networks, Duo and Carbon Black, Aruba ClearPass safeguards your business from the inside, acting against what the perimeter doesn't see.
    Multi-vendor is in our culture . Delivering enterprise infrastructure, securing wired and wireless, mobile and fixed assets, Corporate, IOT and bring your own device (BYOD) environments.
  • User And Entity Behavior Analytics (UEBA) Ready
    Using the network as a sensor, to make the business more security aware, sharing data and intelligence with Aruba IntroSpect User Entity Behavior Analytics Solution.
    Go from knowing what's on the network, to who and what are they trying to do, what is the risk, and stop it from spreading.

• Key Selling Points

  • Aruba ClearPass Policy Manager is a wired and wireless, multi-vendor policy platform to centrally enforce enterprise-grade access security. Granular policy enforcement is based on a user’s role, device type, device health, location, and time-of-day.
  • With Aruba ClearPass Policy Manager, organizations can deploy wired and wireless networking using standards-based 802.1X enforcement for strong authentication.
  • With over 120 security technology partners including PaloAlto Networks, Duo and Carbon Black, Aruba ClearPass safeguards your business from the inside, acting against what the perimeter doesn’t see.
  • Using the network as a sensor, to make the business more security aware, sharing data and intelligence with Aruba IntroSpect User Entity Behavior Analytics Solution.

SPECIFICATIONS
Appliances
ClearPass is available as hardware or as a virtual appliance. Virtual
appliances are supported on VMware vSphere Hypervisor (ESXi),
Microsoft Hyper-V, CentOS KVM & Amazon EC2.
• VMware ESXi 5.5 up to 6.5 Update 1
• Microsoft Hyper-V 2012/2016 R2 and Windows 2012/2016
R2 Enterprise
• KVM on CentOS 6.6, 6.7 and 6.8
• Amazon AWS (EC2)
Platform
• Deployment templates for any network type, identity store
and endpoint
• 802.1X, MAC authentication and captive portal support
• ClearPass OnConnect for SNMP-based enforcement on
wired switches
• Advanced reporting, analytics and troubleshooting tools
• Interactive policy simulation and monitor mode utilities
• Multiple device registration portals – Guest, Aruba
AirGroup, BYOD, and un-managed devices
• Admin/operator access security via CAC and TLS certificates
Framework and protocol support
• RADIUS, RADIUS CoA, TACACS+, web authentication,
SAML v2.0
• EAP-FAST (EAP-MSCHAPv2, EAP-GTC, EAP-TLS)
• PEAP (EAP-MSCHAPv2, EAP-GTC, EAP-TLS, EAP-PEAPPublic,
EAP-PWD)
• TTLS (EAP-MSCHAPv2, EAP-GTC, EAP- TLS, EAP-MD5,
PAP, CHAP)
• EAP-TLS
• PAP, CHAP, MSCHAPv1 and 2, EAP-MD5
• OAuth2
• Windows machine authentication
• SMB v2/v3
• Online Certificate Status Protocol (OCSP)
• SNMP generic MIB, SNMP private MIB
• Common Event Format (CEF), Log Event Extended Format
(LEEF)
Supported identity stores
• Microsoft Active Directory
• RADIUS
• Any LDAP compliant directory
• MySQL, Microsoft SQL, PostGRES and Oracle 11g
ODBC-compliant SQL server
• Token servers
• Built-in SQL store, static hosts list
• Kerberos
• Microsoft Azure Active Directory
• Google G Suite
RFC standards
2246, 2248, 2407, 2408, 2409, 2548, 2759, 2865, 2866, 2869,
2882, 3079, 3576, 3579, 3580, 3748, 3779, 4017, 4137, 4301,
4302, 4303, 4308, 4346, 4514, 4518, 4809, 4849, 4851, 4945,
5216, 5246, 5280, 5281, 5282, 5755, 5759, 6818, 6960, 7030,
7296, 7321, 7468, 7815, 8032, 8247
Internet drafts
Protected EAP Versions 0 and 1, Microsoft CHAP extensions,
dynamic provisioning using EAP-FAST, TACACS+, draft-ietfcurdle-pkix-00
EdDSA, Ed25519, Ed448, Curve25519 and
Curve448 for X.509, draft-nourse-scep-23 (Simple Certificate
Enrollment Protocol)
Profiling methods
• Active: Nmap, WMI, SSH, SNMP
• Passive: MAC OUI, DHCP, TCP, Netflow v5/v10, IPFIX,
sFLOW, ‘SPAN’ Port, HTTP User-Agent, IF-MAP
• Integrated & 3rd Party: Onboard, OnGuard, ArubaOS,
EMM/MDM, Rapid7, Cisco device sensor
IPv6 Support
• Web and CLI based management
• IPv6 addressed authentication & authorization servers
• IPv6 accounting proxy
• IPv6 addressed endpoint context servers
• Syslog, DNS, NTP, IPsec IPv6 targets
• IPv6 Virtual IP for high availability
• HTTP Proxy
• Ingress Event Engine Syslog sources