Aruba ClearPass Reviews

We use this solution for controlling the security of our wireless network.

Aruba ClearPass has improved the security control in our network environment.

The most valuable feature for our network environment is the identification of discovered devices. 

Configuration should be more easy to understand between the link of two topics.

We used ClearPass for wireless 802.1x Authentication in a large campus deployment (more than 10,000 access points). 

We are also going to use it for our guest WiFi access solution. I would like to promote its use for wired network authentication as well.

• It eliminated the management of 10 different individual discrete RADIUS servers. 
• We are able to satisfy many different organizational needs because of its flexibility.

The ClearPass clustering model saved us staff time and reduced errors by eliminating the need to manage individual RADIUS servers. The mulit-vendor capability is also valuable.

The product's graphical user interface (GUI) could use an update and better integration between the guest management and policy management interfaces.

I'd also like to make sure there is support for Juniper switches.

It has been pretty stable, except sometimes when we go to upgrade to a different version - it hasn't been user-impacting - but we've had some issues.

We were using a different vendor's wireless infrastructure, and we switched to the Aruba platform - and ClearPass, that was part the package.

The most important criterion when selecting the vendor in this particular case was integration with a wireless infrastructure product because it was the same vendor.

There were two in total, Cisco and Aruba. We chose Aruba because their technical support was more responsive and knowledgeable than we had with Cisco.

Do a proof of concept. Actually get your hands on the product and don't just look at the brochure, the glossy about the product.

I rate it a nine out of 10 because it's done everything that we've been able to ask it to do.

We got rid of books after our third year of installing Aruba WiFi. Our educational delivery system is 99% online with the exception of a few AP classes dictated by the State. As IoT has started arriving on campus, the Aruba solution is already in place. 

ClearPass is the most valuable tool in my arsenal. It ties everything together: users, devices, IoT, mobile devices, guests, and networks. All of it.

It has an easy to learn web GUI and command lines.

• The AirWave Dashboard heat maps could be better designed. 
• Instructions on adding layouts are not as clear as they could be.

Every time I extend my environment: mobile device management, a dashboard to see all my switches, controllers, access points, devices, and users. Aruba has had the best solution. 

The support is top notch, expert, and very friendly. 

Cost is important. I switched because Aruba's costs were well below Cisco's. Aruba has outpaced Cisco in the marketplace and in performance.

I shopped six WiFi companies for a year before I decided on going with Aruba. Since then, I have replaced all of my Cisco products, with Aruba except the core, which I installed Juniper. This year Aruba has developed a premium core system, and we are putting it in. I like the fact Aruba has cloud or on-prem controllers. I like managing my own environments, so I use on-prem. 

We are an “Aruba House”.

OnBoard, OnGuard, SSO and IntroSpect UEBA, including Palo Alto integration. These are valuable from engineer to C-level executives, who want visibility, performance, statistics, and a platform which can take action for them without manual intervention, saving time and money.

Gives us network access control, visibility, scalability, security, and control in what is becoming an uncontrollable, inundated BYOD and IoT world.

Aruba is always finding better, innovative ways to make their products easier and more friendly. It is always being improved, but what I would like to see is “AAS”. Not only Aruba APs with central, but NAC/ClearPass, AirWave, and everything licensed as a Service. This way, like AWS, they can spin up what they need when they need it and vice versa.

None.

None.

Awesome tech support when needed. Each customer is given a customer number and TAC will follow through until all issues are resolved, whether it be a flaw in the product or a customer misconfiguration.

I did not personally use a previous solution.

Initial setup is straightforward. It is recommended to read the manual before implementation.

I provide straight answers. Licensing and pricing are extremely straightforward.

Run a 90 day free Proof of Concept (PoC) for each product by implementing and using it fully in your environment. This way you will be educated on its features, functionality, and manageability.

No.

ClearPass is the best Network Access Control "Swiss army knife" out there right now. It can do 802.1x (WPA2-Enterprise) for WiFi and LAN. It also has one of the slickest guest captive portal experiences and workflows out there, along with an easy, drop-in BYOD application.

I have not had too much experience with OnGuard, the endpoint integrity feature, but it does that too. With all of the ClearPass integrations and RADIUS Change of Authorization (CoA), it is possible to login wired or wireless endpoints based on a variety of identity stores, then create and associate security policies, e.g., DACLs, based on a device. 

Dynamically provision VLAN assignments, i.e., no more "color-coded ports", write Palo Alto Networks (PAN) NGFW policies that are associated with a specific user (rather than IP address), and quarantine or drop an endpoint off the network in an automated manner if an incident is detected.

All of this, naturally, comes with a lot of details in implementation, but my experience was, like all things InfoSec, implementing the controls is easy if you already have a clear, documented, executive-supported policy that you are using as the control to enforce. Otherwise, the control gets blamed for what is really a lack of clarity and leadership regarding the underlying business policy.

It makes it easy to require robust user authentication for both wired and wireless endpoints, including BYODs.

Access Tracker is definitely the feature that I use the most. It is invaluable for troubleshooting access control incidents and quickly getting to the root cause.

It should be clearer in the pre-sales stage that clear, documented, executive-supported InfoSec policy is the key to success.

All of the features work in concert to provide secure on-boarding for guests and bring-your-own-device users.

I implement this for other companies and they all greatly benefit. It's worked well in many sectors, such healthcare, financial, corporate, and transportation.

Helping streamline the setup and more in-depth tutorials would be helpful. The product is very complex and therefore the more info and tools that are available the better.

I've been using it for three years.

I feel the product is stable.

I feel the product is scalable.

Customer service is top notch.

Very technical. The techs always help until resolution and will escalate quickly when you ask.

It's the first AAA security product of its kind.

Whether the setup is straightforward or complex will depend on how you need to apply the product. It can be streamlined or be quite intricate.

I am the consultant who installs this for end-users.

Can come from the security or the ease of management it provides

It may be a little expensive or complex for very small clients.

It's very powerful, but the individual needs to have a lot of knowledge across several IT disciplines.

It's a reliable solution for our guest network access as well as mobile device registration.

The key functionality we're using is Active Directory in unison with device authentication, so every 45 days a user has to log in their password on their mobile phone so that you can use WiFi services in the office. We're going to be looking at ClearPass to do device authentication, which means the users will only have to register the device once and never have to re-enter the password again.

It was a complex solution to set up because of its newness. We needed a third-party implementor to help us.

It's a brand new installation for us, and we've only had it for a month.

So far, we haven't had any issues with deployment.

From what we've seen it's been pretty stable.

Right now, it's scaled. We're using it for guest internet services and it seems to be working pretty well. Our next phase with that would be to roll in for device registration as we roll out to our mobile device strategy.

10/10 for HP and 8/10 for the third-party.

We haven't really run into any support issues yet. On the integration side, there's obviously some expertise with the vendor, which is going to help us take care of some issues in the future, but it hasn't really been a difficult product to support.

We decommissioned other options. We had another, but we've since decoupled it and are now using ClearPass to do that.

Because of its newness it was complex, but the end result was pretty straightforward.

We did need a third party to come in and help us do the implementation. We had some initial help from an HP engineer on the Aruba side who spent some time with us, showing us an evaluation version of it, but when we went into production we had to get a third party to help us.

We're not really calculating ROI for the service. It's a necessary service delivered by IT to the corporation.

We're currently doing an entire refresh of our access point network, which is approximately 80 access points across the country. We've recently acquired all new hardware. We're refreshing the entire footprint.

Because Aruba was our primary vendor for our access points, it just made more sense for us to try to consolidate more services towards the new strategy.

It's only providing a very small service to us right now. It's not like we're looking at ClearPass on a very full-blown basis. My advice would be to just make sure to do a proper spectrum analysis, and each of your properties are areas that you intend to put WiFi, because it will be critical to where you put APs and how closely you put them together.

The most valuable feature for us is the ability to manage each access point from a single application.

As we are a reseller, we had it installed in our office for our customer test. Also, we were using it as our demonstration tool. I found ClearPass made our work easier as we were connected to WiFi on our laptop, meaning we weren't constrained to our desks.

They need to improve the wizard to make things easier to manage. When we had the access point, I was not sure how to get it to work with Aruba. I tried to follow the guide from Aruba support and the internet, but found it very limited even though I went through one of the two-day technical presentations. The wizard needs to show what you need to configure and what needs to be in there in terms of users. In the end, I got support from one of the Aruba systems engineers to get it to work.

I've used it for one year.

We had no issues deploying it.

We have had no stability issues.

We have had no issues scaling it.

I got support from one of the Aruba systems engineers to get it to work, but I haven't had to use them for anything else.

Our prior solution was a bit complex to configure things prior to deployment.

We deployed it with assistance from our distributor.

You should go for it.