Product and

Technology Overview

All Wireless Workplace for

#GenMobile

Nguyen Tran Thuc

HP Enterprise VietNam
Thuc.tran@hpe.com
Leader in Wired & Wireless LAN Magic Quadrant
 Who Is Aruba?

Leading provider of
secure mobility
for the enterprise

HQ: Sunnyvale, CA
2K Staff

Industry’s most secure

WLAN
~ $700M in
annual revenue

Since 2002

Leader in
Gartner MQ 30K+ Customers
9 years

CONFIDENTIAL © Copyright 2015. Aruba Networks, Inc. All rights reserved

 Recognized as an Industry Leader

Leader: 2014 Wireless LAN Solution Leader: 2014 Wired & Wireless
Magic Quadrant

CONFIDENTIAL © Copyright 2015. Aruba Networks, Inc. All rights reserved

Leader in Wired & Wireless LAN Magic Quadrant
2015

HP Positioned in
Gartner’s Leaders
Quadrant

This Magic Quadrant graphic was published by Gartner Inc. as part of a

larger research note and should be evaluated in the context of the entire
report. The Gartner report is available upon request from HP. Gartner
does not endorse any vendor, product or service depicted in its research
publications, and does not advise technology users to select only those
vendors with the highest ratings. Gartner research publications consist of
the opinions of Gartner's research organization and should not be
construed as statements of fact. Gartner disclaims all warranties,
expressed or implied, with respect to this research, including any
warranties of merchantability or fitness for a particular purpose.
 The Tide Has Shifted: Gartner Critical Capabilities

UNIFIED WIRED + ENTERPRISE SMALL OR HIGH DENSITY

GUEST ACCESS
WIRELESS WLAN REMOTE OFFICE VENUE

1. CISCO 3.86 1. ARUBA 4.27 1. ARUBA 3.93 1. ARUBA 4.26 1. ARUBA 4.03

2. ARUBA 3.82 2. HIVE 3.84 2. CISCO 3.85 2. HIVE 3.81 2. XIRRUS 3.91

3. HP 3.65 3. CISCO 3.59 3. HP 3.66 3. CISCO 3.66 3. HIVE 3.89

4. EXTR 3.56 4. EXTR 3.29 4. EXTR 3.59 4. EXTR 3.35 4. CISCO 3.81

5. HIVE 3.53 5. AVAYA 3.26 5. HIVE 3.56 5. AVAYA 3.31 5. EXTR 3.56

6. JNPR 3.52 5. HP 3.26 6. AVAYA 3.49 5. HP 3.31 6. AVAYA 3.52

CONFIDENTIAL © Copyright 2014. Aruba Networks, Inc. All rights reserved

 Trusted by Enterprises Worldwide
Technology Social & New Media Finance Media & Ent,

Higher Education Government Healthcare Retail

Primary Education Public Transit Public Venues Services

Oil & Gas Manufacturing Hospitality Telecom

CONFIDENTIAL © Copyright 2015. Aruba Networks, Inc. All rights reserved

IS HERE
 Before #GenMobile In 2005

CONFIDENTIAL © Copyright 2015. Aruba Networks, Inc. All rights reserved

 #GenMobile in 2013-2015

CONFIDENTIAL © Copyright 2015. Aruba Networks, Inc. All rights reserved

South East Asia
95% 45%
+ + +

APAC
92% 59%
+ + +

U.S.
93% 65%
+ + +
 GenMobile# Expectations/Pains

New app Wi-Fi Frequent

for every at every device
new task pause refresh

Poor User Manual

Experience Configuration

CONFIDENTIAL © Copyright 2015. Aruba Networks, Inc. All rights reserved

 #GenMobile Imperative: All-Wireless Campus

STABLE AIR
Wi-Fi that doesn’t slow down
as many people connect

SECURE AIR
Secure resources when personal
devices and guests connect

SIMPLE AIR
Easy to setup and manage.
Easy BYOD & Guest access.

SMART AIR
Provide Visibility to WLAN.

CONFIDENTIAL © Copyright 2015. Aruba Networks, Inc. All rights reserved

 Benefits of Aruba Instant
5 3

Rogue Devices

2
7

Data Center Wiring

Closet
6
1
4
CONFIDENTIAL © Copyright 2015. Aruba Networks, Inc. All rights reserved
 Benefits of a Mobility Controller

6 2

Home/Branch

1 Cellular

Data Center
Wiring
Closet 5
Wired, Wireless, Remote
VLANs
4 Voice Data

Wireless Guest
Provisioning
3
Video
BYOD Remediation

CONFIDENTIAL © Copyright 2015. Aruba Networks, Inc. All rights reserved

 Benefits of a Mobility Controller
ACCESS DISTRIBUTION CORE DATA CENTER
EMPLOYEE

3
103 3
3
GUEST
203
3
3
103 4 4
203 FLOOR 3
EMPLOYEE

STANDBY
2
102 2 2
202 2
GUEST 2 103 203
102
102 202
202
FLOOR 2
101 201
EMPLOYEE ACTIVE
1 5 5
1
101 1

201 1
1
GUEST 101
GRE TUNNELS
201
FLOOR 1

CONFIDENTIAL © Copyright 2015. Aruba Networks, Inc. All rights reserved

 A Hybrid “Site Survivable” Campus

ClearPass Applications
Master Controller
AirWave

Internet/WAN

Local Controller Standalone (master) Controller Instant Cluster

School 1
CAP CAP IAP
School 3

CONFIDENTIAL © Copyright 2015. Aruba Networks, Inc. All rights reserved

School 2
 Flexible Architecture

Mobility Controllers Aruba Instant Enterprise

Complex VLAN topologies Ideal for small campuses

Many individual remote sites
Centralized encryption
No on-site IT expertise
Better DPI, L3 mobility
Minimal onsite HW and cost
Bandwidth limits by user role

CONFIDENTIAL
© Copyright 2011. Aruba Networks, Inc.
18 All rights reserved
 Outdoor Access Points Hospitality Access Points

270 Series
205H AP-103H
First & only
3 ports 2 ports
enterprise-
802.11ac 802.11n
grade 11ac

Indoor Access Points Remote APs

RAP-3
Access 320 Series
Highest Density
Dual uplink, 2.5 Gpbs
3 ports

Points 220 Series

RAP-109
4 ports
High Density/Perf.
Dual uplink, 1.7 Gpbs

RAP-155
210 Series 4 ports
Carpeted space
1.7 Gbps
205H
200 Series 3 ports
Lower density 802.11ac
1 Gbps
802.11ac AP portfolio selection
Model Location Performance Density Vertical

200 Moderate K-12

Indoor Moderate
Series (50 active) Retail

210 Moderate
Indoor High Carpeted space
Series (75 active)

Lecture Halls
220 High
Indoor High Venues
Series (125+ active)
Warehouses

320 Highest Lecture Halls

Indoor Highest
Series (150+ active) Venues

270 High
Outdoor High Outdoor
Series (125+ active)
 High-level Product Summary
Lowest cost dual radio 2x2 11n hospitality APs for low-density
deployments
– Up to 32 concurrent clients

Entry-level Hospitality variant of AP-103

Part numbers:
– AP-103H: Entry-level dual-radio 2x2 802.11n hospitality AP, integrated antennas,
2 local network ports, passive Pass-Through port.
– No Instant variant

Dual radio, 802.11n 2x2:2 (300Mbps max at HT40)

– All the standard radio features: SDM, CSD, STBC, MRC, LDPC
– Advanced Cellular Coexistence (ACC)

Platform:
– QCA chipset: AR9344 SoC (“Wasp” ) + AR9582 2nd radio (“Peacock”)
– 64MB SDRAM, 16MB FLASH

Wired interfaces:
– 1x Gb Ethernet (uplink), console port (pin header), DC power, reset button,Minimum
LED SW versions

– 2x Fast Ethernet (local), one pair passive RJ45 Pass-through ports AOS: 6.4.1

Power:
– Aruba
CONFIDENTIAL © Copyright 2015. DC Networks,
or 802.3af POE,
Inc. All rights 9.5W
reservedmax peak
 Introducing the Aruba 205H

High performance dual radio 2x2 11ac Hospitality/Branch AP

– Base platform identical to AP-205, with all typical features (including ACC)
– Integrated “somewhat directional” antennas
– Intended for vertical (wall/desk) orientation (only)
– Three active GbE local ports. One can supply POE-PSE (when DC or 802.3at powered)
– Set of RJ45 pass-through ports (back to bottom)
– USB host interface (5W), DC power (48V), reset button, LEDs (2x: system, PSE), console

Both controller based and Instant product variants

Size (wall mounted, with plate): 86mm (w) x 150mm (h) x 40mm (d)
– Slightly higher and deeper than AP-103H

Software: AOS 6.4.3.0, Instant version 4.2.0.0

Orderable: now for AOS, March pricelist for Instant

Shipping: late March for AOS, April for Instant

Remember: always check compliance website for the latest local

certification status

CONFIDENTIAL © Copyright 2015. Aruba Networks, Inc. All rights reserved 22

 Product Use-Cases and Positioning

Hospitality – Wall Branch – Desk

– High-end alternative to AP-103H – Needs optional kit for this
• 11ac, PSE, USB, GbE ports, etc. • AP-205H-MNTR
• Instant option – 11ac dual radio RAP option
– Limited impact on existing – 802.11ac alternative to RAP-
products 109

CONFIDENTIAL © Copyright 2015. Aruba Networks, Inc. All rights reserved 23

 270 Series & 228 Hardened AP Portfolio

AP-275 (K2) AP-274 (K2) AP-277 (Pumori)

Integrated Omnis Connectorized Integ. Directional
Dual Radio 11ac 3x3:3SS Dual Radio 11ac 3x3:3SS Dual Radio 11ac 3x3:3SS

AP228 (Wutai)
6 x RPSMA
Dual Radio 11ac 3x3:3SS

CONFIDENTIAL © Copyright 2015. Aruba Networks, Inc. All rights reserved

 AP-270 Series APs

AP-275 AP-274
FEATURES BENEFITS
• Smallest Total Volume • Stealth radio that blends with
street furniture
• Dual 11ac 3x3:3 • Next Generation Outdoor
Now!
• Simplified installation
• Reduced Training
• Operates with: • Fewer Man Hours
• Aruba Mobility Controllers
• Aruba Instant • Build to meet end user needs

CONFIDENTIAL © Copyright 2015. Aruba Networks, Inc. All rights reserved

 AP-270 Series

Antenna Gain: 5 dBi

2G: 3x3:3 11ac (2.4 GHz)
5G: 3x3:3 11ac (5.15 to 5.875 GHz)
11ac Beamforming
Conducted Tx Power
2G: 23 dBm per branch (27.7
aggregate)
MAX EIRP = 36 dBi
5G: 23 dBm per branch (27.7
aggregate)
MAX EIRP = 36 dBi
Power Interface: AC and 802.3at (PoE+)
Power Consumption: 25 W
WAN + LAN Port
Advanced Cellular Coexistence
IP66 and IP67
-40° to +65°C
No Heater. Start and operate.

CONFIDENTIAL © Copyright 2015. Aruba Networks, Inc. All rights reserved

 AP-275

CONFIDENTIAL © Copyright 2015. Aruba Networks, Inc. All rights reserved

 AP-277 802.11ac Outdoor Campus AP

Outdoor 3x3 802.11ac

– Industrial temperature rated. -40 to + 60°C.

Dual radio:
– 802.11ac 3x3:3 HT40 2.4GHz(450Mbps)
• Supports Turbo QAM and 802.11ac beamforming
• 11n compatible
– 802.11ac 3x3:3 VHT80 5GHz(1.3Gbps)
Aggregate TCP platform throughput performance >1Gbps
Antennas
– 6 Integrated Directional elements 6.5 dBi
Wired interfaces
– Network: 2x 10/100/1000Base-T Ethernet
– USB 2.0 host interface, console port,
Power
– Powered by 110/220V AC or 802.3at power

CONFIDENTIAL © Copyright 2015. Aruba Networks, Inc. All rights reserved

 AP-277: Campus Access / Outdoor Retail

Clean front face

• Non descript so will blend in to the environment
• Small compared to other solutions

AP-277 AP-ANT-38

8.5” 7.5”

CONFIDENTIAL © Copyright 2015. Aruba Networks, Inc. All rights reserved

 AP-228 Extended Temp Indoor AP

• Weather protected extended temperature 3x3 802.11ac

– Industrial temperature rated. -40 to + 60°C.

• Dual radio:
– 802.11ac 3x3:3 HT40 2.4GHz(450Mbps)
• Supports Turbo QAM and 802.11ac beamforming
• 11n compatible
– 802.11ac 3x3:3 VHT80 5GHz(1.3Gbps)
• Aggregate TCP platform throughput performance >1Gbps
• Antennas
– 6 RPSMA connector
• Wired interfaces
– Network: 2x 10/100/1000Base-T Ethernet
– USB 2.0 host interface, console port,
• Power
– Powered by 802.3at power

CONFIDENTIAL © Copyright 2015. Aruba Networks, Inc. All rights reserved

 Why AP-228

• 49er’s stadium
– Every other place in the world is too hot or too cold for the 225
– Need a connectorized unit for high gain LPV antennas
• Some customers still want
an enclosure solution
– Vandalism and physical
security of the AP
• It is a simple product
extension from AP-270
series

CONFIDENTIAL © Copyright 2015. Aruba Networks, Inc. All rights reserved

 Product Installation Options
Ceiling-mounting

Wall-mounting

CONFIDENTIAL © Copyright 2015. Aruba Networks, Inc. All rights reserved

Reading the Waves – 802.11ac
 Multi-User MIMO on the 320 series

4x4:3SS
MU-MIMO W2
2x multiple with
3 stream multi-user
MIMO

W2
600 Mbps total
capacity
W2
 Aruba 320 series with 802.11ac Wave 2

IAP/AP-325 IAP/AP-324
MU-MIMO simultaneously up to 3 clients
Aruba ClientMatch® with MU-MIMO
grouping
4SS for up to 1.7 Gbps with 80MHz
channels
Integrated BLE and dual GbE uplink
ArubaOS 6.4.4 / InstantOS 4.3.0
 Multi-User MIMO aware ClientMatch®

Up to 42% boost over

competitive solutions
Critical in early
days of Wave 2

W2
W2
W1
ClientMatch
 Wave 2 milestones
2016-17 2015+
2015 End Points 2.5GbE
Infrastructure N-Base-T or
MG-Base-T ?

W2
Wired backhaul for 802.11ac

2.5 Gbps
1 Gbps Limited number of the initial
Available today Wave 2 deployments
with PoE+ Competing
standards
 Access network infrastructure in the campus

Dual 1Gbps

200 series Visibility & management

HP stackables
11ac Wave 1 with AirWave / IMC

2.5Gbps with SDN and

SmartRate Mobility Controllers

Policy management with

HP 5400R zl2
300 series ClearPass
11ac Wave 2
Modular switches

10504 10508 10508V 10512

• 4, 8 and 12-slot chassis

7503 7502/3 7506 7506V 7510 • 40 GbE capable (up to 96
ports)
• 2, 3, 6 and 10-slot chassis • 100 GbE Ready
• 40 GbE capable • 576 10 GbE or 1 GbE ports
5406/5412 R
• 84 10 GbE ports, 480 1 GbE ports • Full L3 features & IPv6/MPLS
• 6 and 12- slot compact chassis • High-density PoE+ • IRF stacking
• Redundant management and • Full L3 features & IPv6/MPLS • UWW
power for modules • IRF stacking
• 96 10 GbE ports, 288 1 GbE • UWW
ports
• 288 ports full PoE+ capable
• Full L3 features
• SDN OpenFlow 1.3
• Limited Lifetime Warranty 2.0
SMB and Branch Core Enterprise access Campus Core
 Fixed port switches
5500 HI
3800
• Layer 3 Advanced
• Layer 3 • 24 or 48 ports
5500 EI
Advanced 24 or • Enhanced
3500 • Layer 3 48 ports MPLS/VPLS
2920/2915 5130 EI Advanced 24 or • Low-latency
• Layer 3 support
Layer 3 with static 48 ports • Highly resilient • Dual Redundant
• Layer 3 with & RIP routing Advanced
• Redundant Mesh PS
static & RIP • 24 or 48 ports • 24 or 48 ports
3600 v2 EI routing • Modular 10 GbE
power Technology • IRF
Gig • IRF • Redundant • Fixed and modular
• 8, 24, 48 ports • PoE+ models uplink
2620/2615 • Layer 3 • OpenFlow power 10GbE uplinks
2530 Advanced with
Gig • 4 fixed 10 GbE • Redundant power • Replaceable • OpenFlow
• Layer 3 with • PoE+ models • OpenFlow
mcast routing uplinks fans
• Layer 2 static & RIP • Stacking
• 24 or 48 ports • Redundant • OpenFlow
• 8, 24 or 48 ports routing • Redundant
• 10/100 power
• 10/100 & 1 GbE • 8, 24 or 48 ports power • 9 chassis IRF
• 10/100 • PoE+ models
• 10 GbE uplinks • Modular 10GbE • OpenFlow 1.3
• PoE+ models • IRF
• PoE+ uplinks
• sFlow, ACLs, • Redundant • OpenFlow
IPv6 power
• Fanless & • GbE uplinks
compact models

SMB & Branch Core Enterprise

access
 Campus Controller Portfolio Snapshot

CAMPUS
7240
2048 CAP/2048 RAP
7220
32K Users
1024 CAP/1024 RAP
40 Gbps Firewall
24K Users
Scale

7210 40 Gbps Firewall

512 CAP/512 RAP
BRANCH / 16K Users
20 Gbps Firewall
LARGE OFFICE

7205
128 APs
8K Users
12 Gbps Firewall
7030
64 APs
4K Users
7010 8 Gbps Firewall
32 APs
2K Users
12 POE Ports 7024
4 Gbps Firewall 32 APs
7005 2K Users
16 APs
24 POE Ports
1K Users
4 Gbps Firewall
2 Gbps Firewall
Performance

CONFIDENTIAL © Copyright 2015. Aruba Networks, Inc. All rights reserved

 Controller Portfolio

CONFIDENTIAL © Copyright 2015. Aruba Networks, Inc. All rights reserved

 Network management

Central AirWave IMC

Cloud-based On-prem On-prem
Instant APs and switches Aruba and 3rd party APs Campus core and data
Zero-touch provisioning Aruba and 3rd party switches center
Guest access Visual RF, WIDS Reports Support for 220
App + network visibility manufacturers
WIDS reports
Automation and
orchestration
SDN app support
 Deployment flexibility for WLANs

Controller Based Controllerless (Instant)

Centralized encryption/switching Same AP Many individual remote sites
Larger mobility domains Hardware Simplified management
Advanced services at scale Minimal onsite HW and IT

CONTROLLER INSTANT INSTANT

AirWave Central
Large sites, many branches Same Cloud-based management
Controller and switch management Workflows Simple maintenance and setup
Multivendor support Many independent branches
 Cloud-based Aruba Central

Public cloud subscription One interface

Multiple sites
Multiple clusters in a single site
Enterprise management
Remote monitoring and troubleshooting
Central configuration and firmware management
Comprehensive e-Support
Compliance records and historical data and community
True zero touch provisioning

HQ BRANCH

BRANCH BRANCH
HOME OFFICE
Aruba Central with guest access management

ACME CORP.
On-prem network management with AirWave
MANAGE ANY NETWORK
Users Optimize
Devices
Wireless
AIRWAVE Troubleshoot
Resolve
Wired Secure
Traffic / Applications Report / Comply

MULTI-VENDOR USER EXPERIENCE VISUAL RF

 20/100 visibility
Infrastructure health
 20/40 visibility
App awareness
 20/20 visibility
Mobility experience
management (Q4’CY15)
 Management options

INSTANT CENTRAL AIRWAVE

LOCAL MGMT

Management as a Service
DEPLOYMENT n/a Onsite
No Hardware, No Software

Instant APs, ArubaOS APs, Aruba

One cluster of Instant APs, Aruba Switches
MANAGEMENT Switches, Third-Party Wired &
Instant APs Multiple Sites, Multiple Clusters
Wireless

ADVANCE Guest/Visitor Management VisualRF, Advanced Reporting, Alerts

CAPABILITIES
Simple Guest Wi-Fi
(Auth options & Customization) & Customizations

Perpetual S/W License per AP/Switch

Subscription per AP/Switch - 1/3/5yr
PRICING Free + Recurring Annual Maintenance +
Tech Support Included
HW (optional)
 Aruba Central for HP wired Roadmap

Integrated, simple wired and wireless

Zero-touch provisioning
Integrated access control
Unified alerts, reporting &
troubleshooting
Automated L2-3 configuration
 STABLE AIR
Wi-Fi slows down as many people connect

CONFIDENTIAL
© Copyright 2013. Aruba Networks, Inc. 54
All rights reserved
 More APs Don’t Always Help

CONFIDENTIAL © Copyright 2014. Aruba Networks, Inc. All rights reserved

 Aruba ClientMatch™ Enables 802.11ac Wi-Fi

REAL-TIME RF CORRELATION

DEVICE TYPE LOCATION CONGESTION INTERFERENCE

Match to Enables use of

another AP 802.11ac Wi-Fi rates
Patent:
8,401,554  98% of mobile devices
with higher signal quality
 94% better performance
for “sticky” clients
 88% higher network
performance
 No client-side software
required
CONFIDENTIAL © Copyright 2014. Aruba Networks, Inc. All rights reserved
 ClientMatch in Action

CONFIDENTIAL © Copyright 2014. Aruba Networks, Inc. All rights reserved

CONFIDENTIAL
© Copyright 2013. Aruba Networks, Inc.
All rights reserved 58 @arubanetworks
 Secure Air: Identity based Security

Key Features
Single Point of
Security Control
Mobility Controller AAA
Universal Infrastructure
Access Point Staff Unique Rights,
Authentication
QoS, VLAN
Staff
Role-Based Virtual AP 1 BYOD
Access Control SSID: Company
VoIP Device
Stateful Firewalls Students
Contractor
High-Speed
Virtual AP 2
Encryption
SSID: GUEST
Voice Guest user
Hardware-based
Processing Captive
Portal
Automatic Client Contractors
Blacklisting Open Default DHCP
Ports
Flexible Policy VLAN
Guest
Creation Router

CONFIDENTIAL © Copyright 2014. Aruba Networks, Inc. All rights reserved

 Secure Air: App Visibility and Enforcement

Visibility and control Integrated Next-Gen Orchestrate QoS

of over 1,500s apps Mobility Firewall with DPI & troubleshooting

CONFIDENTIAL © Copyright 2014. Aruba Networks, Inc. All rights reserved

 AppRF 2.0

• Incorporates Protocol-Aware Deep Packet

Inspection technology
– Uses advanced techniques for application ID
– Over 1500 Applications
• Operates at user role level to provide automated
application control
– Block application or categories of apps
– QoS application at L2 or L3
– Bandwidth contracts for applications
• New Category Dashboard element
• Shows apps by category such as Peer-to-Peer,
Streaming video
• Graphically based application blocking work flow

CONFIDENTIAL © Copyright 2014. Aruba Networks, Inc. All rights reserved

 Role-Based Security App Policy Control

Multiple classes of users on same

infrastructure easily separated

Access On- Mobility Controller

Ramps
Access Point Staff FW QoS App

SSID: Company
VOIP FW QoS App
AAA Services
RADIUS, LDAP,
AD
Access Point BYOD Device FW QoS App
SSID: GUEST

Contractor FW QoS App

S2500/3500
Wired Ports Guest FW QoS App

Security Services
Anti-Virus, IPS, URL
Role-based Access Control Filtering

CONFIDENTIAL © Copyright 2014. Aruba Networks, Inc. All rights reserved

 Web Content Filtering

• Shows web browsing breakdown by categories and risks

• Use web categories and risks in AppRF policy making
• Block, QoS, Bandwidth limit, mirror, log web content just like IP
addresses and applications
• Allows blocking of sites that present a security risk to end
users

CONFIDENTIAL © Copyright 2014. Aruba Networks, Inc. All rights reserved

 SIMPLE AIR
Easy to Setup and manage BYOD.
Guest management make easy.

CONFIDENTIAL
© Copyright 2013. Aruba Networks, Inc.
All rights reserved 64 @arubanetworks
Securing
GenMobile
Safeguarding Network Access with ClearPass

8M authentications per day

at Ohio State University

100K onboarded devices

at a top 10 bank

1M devices per year

at University of Washington
 The ClearPass Platform
Expandable Applications

Guest Onboard OnGuard

ClearPass

Baseline Hardware or VM Appliances

Remote Location
 Automated Onboarding of Personal Devices

Authentication With Unique Device Certificates

1 2 3
User’s device detected Settings & certificate configured Automatically places user
& redirected to portal after credentials entered on proper network segment

Doctor

• Easy • Secure • Flexible

CONFIDENTIAL © Copyright 2014. Aruba Networks, Inc. All rights reserved 68

 Extending MDM with Network Policy

DEVICE AND APP

MANAGEMENT NETWORK ACCESS

Access
User/Device enforcement
MDM roles (Deny/Allow)
Context-
based policy

Jailbreak ClearPass
App
detection MDM
blacklist
Connector

Push /
provision
apps
Device
wipe & ClearPass Policy Management
control

MDM Partners
Policies based
on Device
Agentless
attributes
onboarding
(Jailbreak
(IT & BYOD)
Checks for status, etc.)
profiles Access App Auto
visibility Sign-On

CONFIDENTIAL © Copyright 2014. Aruba Networks, Inc. All rights reserved 69

 Sponsor-Based Guest Wi-Fi

Problem:

CONFIDENTIAL © Copyright 2014. Aruba Networks, Inc. All rights reserved

 Automated Guest Onboarding
New Visitor ClearPass Policy Manager
Access Network

3.
Sponsor
Account enabled,

1.
visitor notified via
Visitor Registers screen, SMS, or email
for access, email

2.Sponsor
sent to sponsor
prompted
to confirm that
guest is valid
CONFIDENTIAL © Copyright 2014. Aruba Networks, Inc. All rights reserved
 Sponsor-Based Guest Wi-Fi

Custom experience in Optimized for any

stadium and on campus mobile device

CONFIDENTIAL © Copyright 2014. Aruba Networks, Inc. All rights reserved

 Translating access policy to enforcement

Aruba ClearPass

Unified policy Best of breed

enforcement security systems
ClearPass for multi-vendor wired infrastructure

Existing deployments of
HP switch ports

Device profiling
Onboard
Wired NAC
Guest access Existing deployments of
Trends & insights Cisco switch ports
ClearPass Exchange program
 SMART AIR
Smart Air: Reliable Collaboration
Can’t see over the air
Manage user
experience

CONFIDENTIAL
© Copyright 2013. Aruba Networks, Inc.
All rights reserved 76 @arubanetworks
 Smart Air: Client Visibility

• Floor plan with AP/Client relation link.

CONFIDENTIAL © Copyright 2014. Aruba Networks, Inc. All rights reserved

 Smart Air: Client Health Visibility
Simplified Searching
By user/device name, IP or MAC
address
Displays relevant devices matching
search criteria
Client health overlay
Helps identify if the problem
is with the client or RF environment
RF Performance
Display the clients with low client
health
Proactively monitor client / RF
issues
Watched client / VIP
perspective

CONFIDENTIAL © Copyright 2014. Aruba Networks, Inc. All rights reserved

 Application Overlay
•AppRF overlay for clients
•Identifies clients contributing to the selected Application.
•Thresholds for showing red (high), orange and red usage for clients contributing to that
application

CONFIDENTIAL © Copyright 2014. Aruba Networks, Inc. All rights reserved

 Smart Air: Unified Communications

NE
W
Interactive UC
dashboard for
wireless LANs
With AirWave 8

CONFIDENTIAL © Copyright 2014. Aruba Networks, Inc. All rights reserved

 Say Goodbye to the Desk Phone

CONFIDENTIAL © Copyright 2014. Aruba Networks, Inc. All rights reserved

 Making Wi-Fi and
Bluetooth Work Together

Analytics and Presence Real-Time Location

© Copyright 2014. Aruba Networks, Inc. All rights reserved #airheadsconf

Enabling engagement
like never before

Use Wi-Fi analytics

to fuel decision making

Increase loyalty with

personalized digital ads
Unlocking the Value
Aruba ALE
of Network Context
Location Redefining
Our Experiences
 Meridian App Platform
and AppMaker

© Copyright 2014. Aruba Networks, Inc. All rights reserved #airheadsconf

Meridian Software Development Kits (SDKs)
 Aruba Beacons with
Bluetooth Low Energy (BLE)

Enterprise-grade and Battery life of 1.5 to 2 years

simple to deploy or USB powered

Compatible with Excellent accuracy

iBeacon API (<1m) for location

Low latency (<2sec)

Protects user privacy
for notifications
 Mapping and
indoor wayfinding
 Glowing blue dot indoors
with Aruba Location Beacons

Beacons are always User downloads the app App calculates the real-
chirping at the same and permits the use of time location of the
power strength location mobile device
 Proximity-based mobile
notifications

© Copyright 2014. Aruba Networks, Inc. All rights reserved #airheadsconf

 Push notifications indoors
with Aruba Proximity Beacons

Proximity beacon Mobile app wakes up Meridian tells the app

is chirping at and notifies the to display a local
varying strengths Meridian cloud push notification

© Copyright 2014. Aruba Networks, Inc. All rights reserved #airheadsconf

First solution with end-to-end
beacon management

Battery powered
Aruba Beacons

USB
Aruba Beacons
 Comprehensive
management tools

Beacons Mobile App

Update indoor map and
measure accuracy

Meridian Cloud
Monitor beacon status,
battery power level,
and update firmware
 How does Aruba Wi-Fi
help manage Aruba Beacons?
Aruba Beacon details
Aruba USB Beacon AP communicates with are monitored and
plugs into an Aruba battery-powered beacons modified within the
Wi-Fi access point and Meridian cloud Meridian cloud
Imagine
a Future
 Personalized digital signages, per location
Aruba
WLAN
Engagement
App

Digital Sign

Business
Intelligence System
Aruba Beacons
 Automated controls to secure BYOD
IT Systems

MDM

Aruba ClearPass
Cellular Network

Compromise
d Device
Automated meeting room attendance and booking
Aruba WLAN

Robin

IoT Digital Sign

Nav Kit

Aruba ClearPass
Aruba Beacons
DRM and geofencing for sensitive data

Aruba WLAN
ClearPass
Policy

Mobile Device
Management
 Digital roll call and classroom management

MyClass
App
Student
Aruba WLAN Information
System

Aruba ClearPass
Location and identity driven physical security

Physical Security
System

ClearPass Policy
Protection against lost devices

ClearPass
Aruba Beacons at the Policy
building perimeter

Mobile Device
Management
 Architecting for Tomorrow

Mobile Cloud
Gigabit Wi-Fi
Transformation workshop
Mobile UC
Open standards
Business continuity
Dual vendor
Guest access, BYOD
Rightsized solution
Location services