The Aruba ClearPass Policy Manager platform provides role and device-based network access control for employees, contractors and guests across any multivendor wired, wireless and VPN infrastructure.

With a built-in context-based policy engine, RADIUS, TACACS+ protocol support, device profiling and comprehensive posture assessment, onboarding, and guest access options, ClearPass is unrivaled as a foundation for network security in any organization.

For wider security coverage, using firewalls, EMM and other existing solutions, ClearPass Exchange allows for automated threat protection and workflows to third-party security and IT systems that previously required manual IT intervention.

In addition, ClearPass supports secure self-service capabilities for end user convenience. Users can securely configure their own devices for enterprise use or Internet access. Aruba wireless customers can provide registration of AirPlay-, AirPrint-, DLNA-, and UPnP-enabled devices for sharing.

The result is a comprehensive and scalable policy management platform that goes beyond traditional AAA solutions to deliver extensive enforcement capabilities for IT-owned and bring-your-own-device (BYOD) security requirements.

KEY FEATURES

• Role-based network access enforcement for multivendor Wi-Fi, wired and VPN networks.
• Industry-leading performance, scalability, high availability and load balancing.
• Intuitive policy configuration templates and visibility troubleshooting tools.
• Supports multiple authentication/authorization sources (AD, LDAP, SQL dB) within one service.
• Self-service device onboarding with built-in certificate authority (CA) for BYOD
• Guest access with extensive customization, branding and sponsor-based approvals.
• Supports NAC and EMM/MDM integration for mobile device assessments.
• Comprehensive integration with third party systems such as SIEM, Internet security and EMM/MDM.
• Single sign-on (SSO) and Aruba Auto Sign-On support via SAML v2.0.
• Advanced reporting of all user valid authentications and failures.
• Built-in profiling using DHCP and TCP fingerprinting.
• Hardware and virtual support for ESXi and Hyper-V appliances.
• Automatic cluster upgrade

THE CLEARPASS DIFFERENCE

The ClearPass Policy Manager is the only policy solution that centrally enforces all aspects of enterprise-grade mobility and NAC for any industry. Granular network access enforcement is based on a user’s role, device type and role, authentication method, EMM/MDM attributes, device health, location, and time-of-day.

Offering unsurpassed interoperability, ClearPass offers extensive multivendor wireless, wired and VPN infrastructure support which enables IT to easily rollout secure mobility policies across any environment.

Deployment scalability supports tens of thousands of devices and authentications which surpasses the capabilities offered by legacy AAA solutions. Options exist for small to large organizations, from local to distributed environments.