Rigorous access control on all your connected devices helps you ensure your network’s visibility. But how do you get started? In this interactive session, we’ll discuss how Aruba ClearPass and Device Insight can give you an overview of all your wired and wireless networks.

1. Reducing Risk and Improving
Operational Efficiency
Through Visibility, Control and
Automation
ARUBA
Peter Andries
Channel System Engineer Manager

2. MACRO TRENDS IN SECURITY
IOT EXPANDING THE ATTACK SURFACE
VULNERABILITIES
IDENTIFIED PER YEAR
Source: MITRE CVE
Note: 2019 only small subset of total year
ORGANIZATIONS ARE
STRUGGLING TO KEEP UP

3. HALF OF ENTERPRISE STRUGGLING TO SECURE IOT
Source: Ponemon Institute

4. Security SIEM Device Management MFA Services
TOO MANY SECURITYTOOLS
SECURITY TOOLS NEED
TO WORK TOGETHER
Security Challenges – Separate Systems

5. Attack Response
Event-triggered actions
One Role, One Network
Wired, Wireless and Remote Access
Precision Access Privileges
Identity and context-based rules
Device Discovery and Profiling
Custom Fingerprinting
Visibility Authorization
EnforcementAuthentication
INTRODUCING CLEARPASS: END-TO-END
VISIBILITY, CONROL AND AUTOMATION

6. Visibility - What’s on your network ?
Total number
of devices
Device
Fingerprints
Device
Types

7. Visitor
EmployeeEmployee BYOD
Headless
Contractor
Administrator
IoT
Infrastructure
Servers
Data & Storage
Internal Applications
Cloud Applications
Network Infrastructure
KNOW WHATS
CONNECTED
• REALTIME 24x7
• AGENTLESS
Visibility – Profile Everything

8. user/role device type / health
locationtime / day
Control – Automated Authentication & Authorization
• IoT
• BYOD
• CORP

9. CLEARPASS: COMPLETE
POLICY MANAGEMENT IN A SINGLE SOLUTION
Onboard
Device provisioning and privileges
OnGuard
Device posture assessment
Guest
Policy
Engine
Reporting
3rd Party
Integrations
Flexible
Enforcement
Network
Device
Admin

10. ROLE-BASED ACCESS CONTROL:
AUTHENTICATION AND AUTHORIZATION
Any
TRANSPORT
Any
VENDOR
Any
DEVICE
Any
RESOURCE
Enterprises define who can
access resources
ClearPass enforces
those policies
Defines WHO and WHAT DEVICES can connect to:

11. CLEARPASS AUTHORIZATION
Context-aware Policy
Engine
Enables context-based
enforcement based on
access method, user,
device and location
Comprehensive
Feature Set
Use and manage all
security services from a
single platform
Granular Methods
Leverage multiple identity
stores and authentication
methods
to fit any use case –
Login/password,
certificates or type of
endpoint

12. VISIBILITY:
PROFILE ALL
THE THINGS
IoT
BioMed
Employee
BYOD
Visitor
Administrator
Employee
Servers
Data and
Storage
Internal
Applications
Cloud
Applications
Network
Infrastructure
KNOW WHATS CONNECTED
REALTIME 24x7
AGENTLESSContractor

13. ARCHITECTURE
OVERVIEW
On-premises data collector
(appliance or virtual) and cloud-
based analyzer
Through Deep Packet Inspection
(DPI), device attributes are
extracted and metadata is sent to
the cloud for analysis
Campus Branch
DEVICE
INSIGHT
ANALYZER
CLOUD PLATFORM
Device Insight
Virtual Collector
V
Device Insight
Hardware Collector
Device Insight
Virtual Collector
V
Device Insight
Hardware Collector

14. CLOUD-ENABLED
COMMUNITY CROWDSOURCING
Aruba receives
the signature
Signature is made
available for use by
all customers
Customer labels a device
using clusters or rules
Signature is tested
and validated

15. Multi-Vendor
Switching
Multi-Vendor
WLANs
Internet of
Things (IoT)
BYOD and
Corporate Owned
ClearPass Device Insight
ENHANCED DISCOVERY / PROFILING
Bi-Directional
Data Exchange
CLEARPASS POLICY MANAGER
AUTOMATING SECURE ACCESS
150+ Partners
ClearPass Policy Manager
AUTOMATED SEGMENTATION AND
ENFORCEMENT