This document discusses Aruba's ClearPass guest access solution. It provides automated guest onboarding with sponsor approval, guest self-registration without IT involvement, and enterprise-grade security. ClearPass allows non-IT staff to manage guest access through an intuitive interface and offers compliance reporting, third-party integrations, and advertising capabilities.

1. CONFIDENTIAL
© Copyright 2012. Aruba Networks, Inc.
All rights reserved 1

2. CONFIDENTIAL
© Copyright 2012. Aruba Networks, Inc.
All rights reserved 2
GUEST ACCESS FUNDAMENTALS
Presented by:
Neil Bhave
Channel Enablement Manager

3. 3 3
CONFIDENTIAL
© Copyright 2012. Aruba Networks, Inc.
All rights reserved
Guest Access Services
• Training Rooms
• Ads/Target Marketing
• Public Hotspots
• Locations Services
• Registration Kiosks
• … and more

4. 4 4
CONFIDENTIAL
© Copyright 2012. Aruba Networks, Inc.
All rights reserved
Exponential Pressure on IT Departments
Network security devices not
optimized for guest access
Multiple devices, screens, and
vendors to deal with
Little to no integration or
interoperability
Compliance and auditing of
guest access
Do guests get the network
shared WPA key?
Do you type proxy details into
guest browses?
Is IT required for guest network
access?
Is there an audit trail for guest
network activity?
Network AdminsSecurity Admins
Uncontrolled guest access and unauthorized / unmanaged user devices
can expose a network to unnecessary risk, compound compliance
mandates, and impact employee productivity

5. CONFIDENTIAL
© Copyright 2012. Aruba Networks, Inc.
All rights reserved 55
CONFIDENTIAL
© Copyright 2012. Aruba Networks, Inc.
All rights reserved
Guest Access with Aruba ClearPass

6. 6 6
CONFIDENTIAL
© Copyright 2012. Aruba Networks, Inc.
All rights reserved
Automate Guest OnBoarding
1.
3.
Access Network
2.Sponsor prompted
to confirm that
guest is valid
ClearPass Policy Manager
Account enabled,
visitor notified via
screen, SMS, or emailCollect visitor
information
New Visitor
Sponsor

7. 7 7
CONFIDENTIAL
© Copyright 2012. Aruba Networks, Inc.
All rights reserved
Demo
iPad Guest Access with Sponsor approval example
http://www.arubanetworks.com/video.php?v=case-studies/iPad_Guest.mov&w=960&h=540

8. 8 8
CONFIDENTIAL
© Copyright 2012. Aruba Networks, Inc.
All rights reserved
Guest Self-Registration
• Self-provisioning
captive portals
– No IT involvement
– Integrated SMS delivery
– Linked with existing
security policies
– Customizable fields to
capture specific
information about guests /
devices

9. 9 9
CONFIDENTIAL
© Copyright 2012. Aruba Networks, Inc.
All rights reserved
Skin Technology
• Complete
Customization
– Replicate existing
corporate web / intranet
for guest administration
and access portals
– Automatically identifies
and optimizes content for
mobile browsers
– Familiarity for employees
& brand loyalty for
customers

10. 10 10
CONFIDENTIAL
© Copyright 2012. Aruba Networks, Inc.
All rights reserved
Enterprise-Grade Security
• User requests access
• NAS server redirects request
to ClearPass Guest server
• ClearPass Guest maintains
account and access
credentials
• Access credentials passed
to user
• User logs in and is
authenticated to network
• Network access is granted
Strong AAA-based authentication model
Aruba
ClearPass
Guest

11. 11 11
CONFIDENTIAL
© Copyright 2012. Aruba Networks, Inc.
All rights reserved
Role-based Administration
Let staff handle it, not IT
• Intuitive Role-based User Interface
– Allows non-IT staff to efficiently handle guest and device
access management
– Full auditing and reporting of all
administrative activities
• Streamlined Workflow
– Menu-driven wizards
• Customizable Fields
– Request specific information
about guests / devices allowed
on network

12. 12 12
CONFIDENTIAL
© Copyright 2012. Aruba Networks, Inc.
All rights reserved
Import Visitor Accounts
• Receptionist or other
admins
• Pre-load Visitor Profiles
– Supports bulk import in
XML, CSV, TSV, or plain
text formats
– Copy and Paste lists
• Assignable roles,
expiration times, user
names, passwords
• Set future activation dates
(seminars / training
sessions)

13. 13 13
CONFIDENTIAL
© Copyright 2012. Aruba Networks, Inc.
All rights reserved
3rd Party Integrations
• No training required
– Eliminates the need for ClearPass Guest specific training /
certification
• Integrate ClearPass Guest into Existing Solutions
– CRM
– Lobby management systems
– Patient check-in systems
• XML / SOAP APIs for Custom Integrations
Request XML / SOAP
ClearPass
Guest Server
3rd Party
Appliance /
Application
Custom
workflow
XML / SOAPOutput

14. 14 14
CONFIDENTIAL
© Copyright 2012. Aruba Networks, Inc.
All rights reserved
Compliance & Auditing
• Full visibility and reporting of all guest activities
– Who created the account
– When was account created
– Where did guest access network
– How long was guest on network
– How much bandwidth was used by
guest(s)

15. 15 15
CONFIDENTIAL
© Copyright 2012. Aruba Networks, Inc.
All rights reserved
Visitor Intelligence
Recognise previously registered visitors
from their device’s MAC address
§ Personal Greetings
§ Birthday coupons
§ Volume/Time quotas

16. 16 16
CONFIDENTIAL
© Copyright 2012. Aruba Networks, Inc.
All rights reserved
Advertising

17. 17 17
CONFIDENTIAL
© Copyright 2012. Aruba Networks, Inc.
All rights reserved
Advanced Reporting

18. CONFIDENTIAL
© Copyright 2012. Aruba Networks, Inc.
All rights reserved 1818