Legal Disclaimer: The resource assets in this website may include abbreviated and/or legacy terminology for HPE Aruba Networking products. See www.arubanetworks.com for current and complete HPE Aruba Networking product lines and names.
Licensing
Is there any change in the workflow for new customers for on-boarding gateways and assigning subscriptions in IDPS?
Yes, there is a change in the workflow for new customers for on-boarding a gateway from HPE Aruba Networking Central 2.5.5. The features like adding devices and assigning licenses are available on HPE GreenLake. To use IDPS Intrusion Detection and Prevention System (IDPS) monitors, detects, and prevents threats in the inbound and outbound traffic. Aruba IDPS provides an extra layer of protection that actively analyzes the network and takes actions on the traffic flows based on the defined rules. It inspects data packets, and if any threat is identified, acts real-time to prevent it., you must assign license to gateways.
For more information on adding devices, see Onboarding Devices.
How do I apply a license to evaluate the features of IDPS?
To evaluate the IDPS features, you must assign evaluation license to the gateways.
Is the evaluation license specific to IDPS-supported gateways?
No, the license gives all features of an Advanced subscription along with security license. You can use it as an evaluation license for IDPS-supported gateways. It allows you to evaluate up to 10 devices with HPE Aruba Networking IDPS and advanced SD-Branch features.
Can I use the evaluation license on the production environment of IDPS?
Yes, the evaluation license can be used on the production environment.
What features are supported for evaluation license?
The evaluation license supports all features of an license.
How do I move from an evaluation subscription to a paid subscription?
To move from an evaluation subscription to a paid subscription, you must assign a valid subscription to gateways in the page.
I am an existing customer and I am using a SD-WAN license. How do I upgrade to a security license?
To upgrade from a Foundation or an Advanced SD-WAN Software-Defined Wide Area Network. SD-WAN is an application for applying SDN technology to WAN connections that connect enterprise networks across disparate geographical locations. license to a security license, you must assign a valid subscription with security license.
I am an existing customer with IDPS supported gateways. How do I move the gateways from production cluster to beta cluster?
To move the gateways from production cluster to beta cluster for testing purpose, you must unassign the subscriptions from the devices, on-board the devices to the new cluster, and then assign valid subscriptions to the devices in the new cluster.
I am an existing customer without IDPS supported gateways. How do I upgrade to a security license?
To upgrade to a security license, you must on-board IDPS supported gateways and then assign a valid subscription with security license.
Why does the gateway reboot when I apply a security license?
When a security license is applied, the gateways reboots as the traffic inspection engine is activated for the first time. It is recommended that you apply the security license after business hours, as this might result in a downtime in the network.
Does the gateway reboot when IDPS is enabled?
No, gateway does not reboot for enabling or disabling IDPS. Only when the security license is applied to the device, it goes through a reboot automatically.
However, the gateway does not automatically reboot If the license is switched from a Security license to a Non-Security license. Manual reboot must be done, otherwise it will operate with the same resource allocation until reboot is done. For more information, see Enabling Traffic Inspection on Gateways
How to check the status of a subscription?
You can check the status of the subscription using the Devices option in HPE GreenLake platform.
Can I rollback from a security license to a non-security license?
No, you must purchase a new valid subscription without security after the expiry of the current subscription.
Is there any impact to IDPS licensing model and functionality after moving to Common Cloud Services Platform?
No, there is no impact to the IDPS licensing model or functionality. However, managing subscriptions is done through the HPE GreenLake portal.
For more information on managing subscriptions, see Managing Subscription Keys.
Can I use both the security license and capacity license together for IDPS?
Capacity license is applicable only for HPE Aruba Networking 9240 gateway. Capacity license does not support IDPS. However, HPE Aruba Networking 9240 gateway supports IDPS feature and its functionalities with Gateway WLAN Wireless Local Area Network. WLAN is a 802.11 standards-based LAN that the users access through a wireless connection. Advanced with Security, SD-Branch Foundation with Security, SD-Branch Foundation Base with Security, or SD-Branch Advanced with Security licenses.
I have SD-Branch Foundation with Security license for HPE Aruba Networking 9240, which persona can I use it for?
You can use it either for the branch gateway or VPNC persona on a SD-Branch deployment or mobility gateway persona in a WLAN deployment. For more information, see Preparing to add IDPS-Supported Gateways.
