Licensing

What subscription is required to use SaaS Express?

Gateway Advanced or Gateway Advanced + Security license is required for the SaaS Express feature on HPE Aruba Networking Central. For more information, see Ordering Guide.

How to enable the SaaS Express feature in HPE Aruba Networking Central?

SaaS Express is enabled automatically when the Advanced subscription is applied to the gateway device. To use SaaS Express, configure it on the device configuration page in HPE Aruba Networking Central. For more information, see Provisioning Devices Using UI-based Workflows.

Does First Packet Classification require the SaaS Express subscription?

No, the First Packet Classification is an essential characteristic of the DPI Deep Packet Inspection. DPI is an advanced method of network packet filtering that is used for inspecting data packets exchanged between the devices and systems over a network. DPI functions at the Application layer of the Open Systems Interconnection (OSI) reference model and enables users to identify, categorize, track, reroute, or stop packets passing through a network. engine in AOS and is available with the Foundation subscription.

Does Fast DPI require the SaaS Express subscription?

The FastDPI service is leveraged by SaaS Express to get granular FQDN and prefix-list information about specific Microsoft 365 applications by probing aka.ms/IPURLWS. It is enabled with the Gateway Advanced and Gateway Advanced + Security subscriptions.

What will I miss if I have created a custom application that is a SaaS application, but do not have the SaaS Express license?

SaaS Express custom applications are defined globally, which means that the configuration option is available to all customers in HPE Aruba Networking Central. However, gateways without the Gateway Advanced or Gateway Advanced + Security subscriptions do not make use of such aliases, as they do not receive the SaaS Express configuration. If configured as part of routing ACLs Access Control List. ACL is a common way of restricting certain types of traffic on a physical port., these will not match (ACL will skip to the next).

What is the advantage of using the Advanced + Security license? Can security functions be extended to Advanced features?

The Gateway Advanced + Security subscription is a super-set of the Gateway Advanced subscription, so it introduces additional security features such as HPE Aruba NetworkingIDPS Intrusion Detection and Prevention System (IDPS) monitors, detects, and prevents threats in the inbound and outbound traffic. Aruba IDPS provides an extra layer of protection that actively analyzes the network and takes actions on the traffic flows based on the defined rules. It inspects data packets, and if any threat is identified, acts real-time to prevent it.. For more information, see Ordering Guide.

How to find out which gateways have the SaaS Express license?

License entitlement is found in HPE Aruba Networking Central under Account Home > Key Management.