Configuring HPE Aruba Networking Gateways for Application Visibility and Control

The application visibility and control feature on HPE Aruba Networking Gateways enables administrators to monitor, analyze, and control application usage and bandwidth consumption in their networks. To provide in-depth visibility and insightful reporting of the applications in use, HPE Aruba Networking Gateways support Deep Packet Inspection (DPI Deep Packet Inspection. DPI is an advanced method of network packet filtering that is used for inspecting data packets exchanged between the devices and systems over a network. DPI functions at the Application layer of the Open Systems Interconnection (OSI) reference model and enables users to identify, categorize, track, reroute, or stop packets passing through a network. ) of applications accessed by the client devices in the SD-WAN Software-Defined Wide Area Network. SD-WAN is an application for applying SDN technology to WAN connections that connect enterprise networks across disparate geographical locations. network.

Based on application usage, network administrators can configure ACLs Access Control List. ACL is a common way of restricting certain types of traffic on a physical port. to control application access, prioritize mission-critical applications, and improve quality of experience by fine tuning bandwidth allocation per application or application category.

HPE Aruba Networking Gateways support the following types of application configurations:

• Configuring per-application limits from the list of applications and application categories. For more information, see Using Deep Packet Inspection
• Creating custom applications and application categories. For more information, see Using Deep Packet Inspection
• Configuring following types of application visibility and control features:
  • Firewall Visibility—Allows Gateways to log all firewall Firewall is a network security system used for preventing unauthorized access to or from a private network. sessions.
  • Deep Packet Inspection (AppRF)—Allows Gateways to perform a deep packet of inspection of the application traffic. For more information, see Using Deep Packet Inspection.
  • App Performance Monitoring—Enables application performance monitoring. For more information, see Enabling App Performance Monitoring.
  • Website Content Classification (WebCC)—Allows administrators to filter URLs Uniform Resource Locator. URL is a global address used for locating web resources on the Internet. based on website categories and security reputation score. When you enable WebCC, you can configure enable filtering websites based on IP reputation and geolocation. For more information, see Filter URLs Based on Web Content and IP Classification.