Security

Cloud Authentication and Policy

The Cloud Authentication and Policy provides a seamless and secure way to onboard and authenticate clients and users to wired and wireless networks by integrating with common cloud identity stores such as Google Workspace and Microsoft Azure Directory.

With Aruba Central, administrator can configure separate user policy and client policy as part of configuring user and client access policy. This flexibility of configuring independent user and client access policies allows the administrator to configure security levels at both user and client level.

For more information about Cloud Authentication and Policy, see Cloud Authentication and Policy Overview.

Cloud Guest

License Applicability: Cloud Guest is available for the AP Foundation License.

The Cloud Guest access enables the guest users to connect to the network. This is provided through the splash page profile that is created by the administrators for the guest users in the Guests tab under Manage. The Summary page in the Manage > Guest Access application is the monitoring dashboard that displays the number of guests, guest SSID Service Set Identifier. SSID is a name given to a WLAN and is used by the client to access a WLAN network., client count, type of clients, and guest connection. Cloud Guest deals with the AP, so the license that is assigned to the AP is also applicable to Cloud Guest. By default, the Foundation License is applicable. The Advanced License features will also be available if the Cloud Guest is assigned to it.

For more information about Cloud Guest, see Guest Access.

Clients Profile

License Applicability: Clients Profile is available for the AP Foundation License.

The Clients Profile enables network and security administrators to discover, monitor, and automatically classify new and existing devices that connect to a network. You can identify devices that include IoT Internet of Things. IoT refers to the internetworking of devices that are embedded with electronics, software, sensors, and network connectivity features allowing data exchange over the Internet. devices, medical devices, printers, smart devices, laptops, VoIP Voice over IP. VoIP allows transmission of voice and multimedia content over an IP network. phones, computers, gaming consoles, routers, servers, switches, and so on.

For more information about CPDI ClearPass Device Insight provides a full-spectrum of visibility across the network by intelligently discovering and profiling all connected devices.-based Clients Profile, see Clients Profile.

Intrusion Detection and Prevention (IDS or IPS)

License Applicability: IDS Intrusion Detection System. IDS monitors a network or systems for malicious activity or policy violations and reports its findings to the management system deployed in the network. and IPS Intrusion Prevention System. The IPS monitors a network for malicious activities such as security threats or policy violations. The main function of an IPS is to identify suspicious activity, log the information, attempt to block the activity, and report it. is available for Foundation with Security Gateway License, Foundation Base with Security Gateway License, and Advanced with Security Gateway License.

The IDS and IPS monitors, detects, and prevents threats in the inbound and outbound traffic. Aruba IDS or IPS adds an extra layer of security that focuses on users, applications, network connections, and can be integrated with the Aruba SD-Branch solution.

For more information about IDPS Intrusion Detection and Prevention System (IDPS) monitors, detects, and prevents threats in the inbound and outbound traffic. Aruba IDPS provides an extra layer of protection that actively analyzes the network and takes actions on the traffic flows based on the defined rules. It inspects data packets, and if any threat is identified, acts real-time to prevent it., see Overview of Aruba IDPS.

RAPIDS

License Applicability: RAPIDS is available for Foundation and Advanced Licenses for APs.

The RAPIDS feature enables Aruba Central to quickly identify and act on interfering APs in the network that can be later considered for investigation, restrictive action, or both. Once the interfering APs are discovered, Aruba Central sends alerts for security events to the network administrators about the possible threat and provides essential information needed to locate and manage the threat.

This feature is part of the AP Foundation License. However, as API Application Programming Interface. Refers to a set of functions, procedures, protocols, and tools that enable users to build application software. streaming is available for Advanced License only, Aruba Central would not stream any security events for APs with Foundation License. For APs with Advanced License, API streaming of security events is available for further diagnosis and threat management.

For more information about RAPIDs, see RAPIDS.