daly meec webinar: clearpass access management

CONFIDENTIAL © Copyright 2012.Aruba Networks, Inc. All rights reserved

Multi-vendor Network Services

~ $650M revenueNASDAQ: ARUN

HQ: Sunnyvale, CA130 country operation

Mobility-Centric v. Port-Centric

Daly MEEC Webinar:

ClearPass Access ManagementJim Rowland Senior System Architect and Project Manager, Daly

Geoff Giulino Senior Systems Engineer, Aruba

CONFIDENTIAL

© Copyright 2013. Aruba Networks, Inc.

All rights reserved2

Daly and the MEEC Contract

IDIQ Contract for Desktops / Portables, Storage, Servers,

Network, Virtual Computing, Peripherals, and Related Service.

Contract No.: UB-12-B-19-D1

Managing Agency - University of Baltimore on behalf of the

Maryland Enterprise Educational Consortium (MEEC) and

University System of Maryland (USM)

Daly was ranked #1 in all categories. As the top ranked

contractor, Daly is designated as a Solutions Contractor

specifically authorized to provide integrated solutions using

technologies from across all categories of the contract. In this

capacity, Maryland educational institutions can utilize Daly’s

engineering and architectural capabilities as well as a multitude of

professional services to obtain the needed integrated systems.

CONFIDENTIAL



Veteran Management Team

Keerti MelkoteFounder, CTO

Dave LoganVP, Product Management

Jim Harold VP, Channel Sales

Kevin CantyVP, Operations

Mike KirbyVP Global Sales

Ben GibsonChief Marketing Officer

Dominic OrrPresident, CEO and Chairman of the Board of Directors

Michael GalvinCFO

Pandian GnanaprakasamVP, Engineering

Peter Cellarius VP, Business Development and Partnerships

CONFIDENTIAL



Trusted by Enterprises Worldwide

Telecom

Services

Retail

Media & Ent.

Primary Education Public Venues

Healthcare

Finance

Manufacturing

Public Transit

Government

Internet

Oil & Gas Hospitality

Higher Education

High Tech

http://www.verizonwireless.com/b2c/index.html

http://www.verizonwireless.com/b2c/index.html

http://www.sydneycricketground.com.au/default.aspx

http://www.sydneycricketground.com.au/default.aspx

http://www.halliburton.com/pps

http://www.halliburton.com/pps

http://navymedicine.med.navy.mil/

http://navymedicine.med.navy.mil/

http://images.google.com/imgres?imgurl=http://www.hinterglemm-events.at/images/CA Logo.jpg&imgrefurl=http://www.hinterglemm-events.at/Saalbach_Event_en/Veranstaltungen_en.htm&usg=__dAjp_dRi7mqCuameUvbOAV6Uxlw=&h=1350&w=1800&sz=99&hl=en&start=2&um=1&tbnid=o0M3dweuFKCGOM:&tbnh=113&tbnw=150&prev=/images?q=computer+associates+logo&hl=en&rlz=1I7GGLL_en&sa=X&um=1

http://images.google.com/imgres?imgurl=http://www.hinterglemm-events.at/images/CA Logo.jpg&imgrefurl=http://www.hinterglemm-events.at/Saalbach_Event_en/Veranstaltungen_en.htm&usg=__dAjp_dRi7mqCuameUvbOAV6Uxlw=&h=1350&w=1800&sz=99&hl=en&start=2&um=1&tbnid=o0M3dweuFKCGOM:&tbnh=113&tbnw=150&prev=/images?q=computer+associates+logo&hl=en&rlz=1I7GGLL_en&sa=X&um=1

http://images.google.com/imgres?imgurl=http://pulm.bumc.bu.edu/MouthDB/images/BMC_logo.gif&imgrefurl=http://pulm.bumc.bu.edu/MouthDB/links.html&usg=__A23fE8WykGG4fmYZrLCMZaR3Cu8=&h=75&w=164&sz=2&hl=en&start=3&um=1&tbnid=jdarXZgguYcGLM:&tbnh=45&tbnw=98&prev=/images?q=boston+medical+center+logo&hl=en&rlz=1T4GGLL_enUS319US319&sa=N&um=1

http://images.google.com/imgres?imgurl=http://pulm.bumc.bu.edu/MouthDB/images/BMC_logo.gif&imgrefurl=http://pulm.bumc.bu.edu/MouthDB/links.html&usg=__A23fE8WykGG4fmYZrLCMZaR3Cu8=&h=75&w=164&sz=2&hl=en&start=3&um=1&tbnid=jdarXZgguYcGLM:&tbnh=45&tbnw=98&prev=/images?q=boston+medical+center+logo&hl=en&rlz=1T4GGLL_enUS319US319&sa=N&um=1

CONFIDENTIAL



Networking for BYOD & Mobility

RECONFIGURE NETWORK, SECURITY & MANAGEMENT SYSTEMS

More devices

than People

Explosion of

mobile appsEven

customers

demand

access

PORT CENTRIC

Multiple touch points with separate silos

Hardware approach

MOBILITY CENTRIC

Policy & flows to unify systems (network + apps + devices)

Software approach

OR

CONFIDENTIAL



Mobility-Centric MOVE™ Architecture

ACCESSMANAGEMENT

ArubaOSClearPass Policy

Manager

NETWORKINFRASTRUCTURE

Access Switch

802.11ac AP

VIA VPN Client

Remote APs

DEVICE & APP

SOFTWARE

Analytics & Location Engine

Meridian Mobile Engagement

WorkSpace Agent

AirWave Management

CONFIDENTIAL



The Mobility Control Plane

CLEARPASS POLICY

MANAGER

ARUBAOS

Context-Aware Firewall

(eliminate VLAN, SSID, ACL config)

NAC + MDM + MAM In One

(single policy definition point)

Multi-vendor Management

Monitor the device & app experience

AIRWAVE MANAGEMENT

CONFIDENTIAL



Clear Pass: Single Policy Management

WHO WHAT WHEN WHERE HOW

Hardware or Virtual Appliance

On Any NetworkFaster Device

Deployments

Massive App

Ecosystem

NETWORK ACCESS

MANAGEMENT

MOBILE APP

MANAGEMENTDEVICE ONBOARDING

AND MANAGEMENT

CONFIDENTIAL



Unified Security Policy Examples

DEVICE CONTROLNETWORK CONTROL APPLICATION CONTROL

Wipe/Lock

Confidential

Apps

Increase

Network QoS

Location &

Sharing Rules

Based

Visibility

Latency Sensitive

UCC App

Initiate AirPlay

or AirPrint

Jailbroken Device

CONFIDENTIAL



Employees: WorkSpace App Enforces Policy

Personal

• WorkSpace App provisioned to device

@mycompany

• Employee self-service mobility• Personalized portal with Single Sign-On

Corporate

My AccessMy DevicesMy Apps

ACCOUNT

& GUESTS

BYOD

DEVICES

WORK

APPS

CONFIDENTIAL



Guest Web Portal for Policy Enforcement

Integrates with Lobby, CRM & patient systems

Push ads & messages to custom web & mobile

skins

Route guest access request to a sponsor

Self-register using customizable web portal ON ANY NETWORK

CONFIDENTIAL



Network Enforcement with Integrated Firewall

Mobility Controllers

AirPlayAirPrint

Microsoft Lync

Multicast Video

Cloud Apps

CONFIDENTIAL



Flexible Deployment Options

• Site-to-site IPSec VPN

• Split tunnel options

• Ideal for teleworkers, small branch

• Virtual controller with Instant APs

• Distributed forwarding

• Ideal for branch

CORE CONTROLLER

CONTROLLER-LESS

DMZ CONTROLLER

• One touch point for VLANs & IP

• Speeds up L3 roaming

• Ideal for campus

CONFIDENTIAL



Controller-less (Aruba Instant)

Web-based management and

automatic cloud updates

Master AP as virtual controller

Automatic configuration download

Faster network Faster maintenance Stronger securityFaster setup

CONFIDENTIAL



AirWave: Manage Network Operations

Centralized

Management

Monitoring &

Visibility

Reporting &

Compliance

Wi-Fi

Wired

Remote

RFClient

Device

App

Network

Dashboards

Rogues

Historic Logs &

Custom Reports

CONFIDENTIAL



Enterprise-Grade Wi-Fi Access Points

CONTROLLERLESS &

CONTROLLER-MANAGED

- Purpose-Built 802.11ac &

802.11n APs

- Adaptive RF with airtime

fairness & app-awareness

- Zero-touch provisioning

(Controller-less APs)

Single- and dual-radio

Access Points

CONFIDENTIAL



Aruba ClientMatch™ Enables 802.11ac Wi-Fi

Enables use of

802.11ac Wi-Fi rates

- 98% of mobile devices

with higher signal quality

- 94% better performance

for “sticky” clients

- No client-side software

required

Match to

another AP

DEVICE TYPE INTERFERENCELOCATION CONGESTION

REAL-TIME RF CORRELATION

Patent: 8,401,554

CONFIDENTIAL



Enterprise Switches to Connect APs

Mobility Access Switches ONLY WIRED NETWORK SOLUTION

DESIGNED FOR MOBILITY

- Role-based access for wired network

- Wi-Fi integration with controller tunneling

- Stacking across wiring closets

CONFIDENTIAL



Extend Work Desk to Remote Locations

Remote Access Points

Aruba Virtual Intranet Access (VIA) client

DESIGNED FOR BRANCH OFFICES, HOME

OFFICES & BUSINESS TRAVELERS

- Secure access to corporate resources

- Zero-touch provisioning

- Wired & wireless connectivity (APs)

CONFIDENTIAL



Northbound APIs for 3rd Party Apps

ISVs

UCCLOCATIONSECURITY &

COMPLIANCEMDMCONTENTSERVICESANALYTICS

Network + Device

+ App Policies

Real-time Visibility

& Flow Controls

PROGRAMMABLE INTERFACE

CONFIDENTIAL



Museums,Parks

Stadiums,Event Centers

Retailers CampusHealthcare

Centers

Visitor Engagement with Meridian

CONFIDENTIAL



Aruba Network

CAMPUS

Devices Access Core Data Center

BRANCH

SMALL OFFICE/HOME OFFICE

MOBILE WORKER

ClearPass

Airwave

Activate

App API

Mobility ControllerWorkSpac

e

OnBoard/

OnGaurd

Guest

BYOD

COMPAN

Y

GUEST

Ins

tan

t A

PC

am

pu

s A

P

Access

Switch

Access

Switch

RA

PV

IA

CONFIDENTIAL © Copyright 2012.Aruba Networks, Inc. All rights reserved

PORT CENTRIC v. MOBILITY CENTRIC

Architect for BYOD with Network + Device +

AppReduces IT Touch Points.

Rightsize Networks for Next-Gen WorkplaceApp-Aware Flows.

Software ApproachAny Vendor’s Network. No Upgrades.

CONFIDENTIAL



Customers

• High capacity 802.11n worldwide

• Video performance for Lyncand live video broadcast.

• Best video performance

• Only Wi-Fi to identify and prioritize Lync

• Superior guest & employee Wi-Fi experience at Disney parks

• 3G offload

• Single vendor network with wired & wireless access

• Complete unified solution: guest access, network management, access switches, controllers, Aps & Policy Enforcement Firewall

• Reliable managed Wi-Fi solution to retail & restaurants

• Offload cellular traffic

• Over 10,000 stores deployed

• ‘Carrier-free’ network used to offload data traffic

CONFIDENTIAL



Industry Recognition

Leader in the 2012 Magic

Quadrant for Wired and

Wireless LAN Access

30% YoY WLAN

Growth

7th fastest growing

tech company

CONFIDENTIAL



Global Presence & Support

London

Sunnyvale

Hong KongChennai

Paris

Tokyo

Cairo

Beijing

Sydney

Seoul

Manila

Munich

Bangalore

Singapore

• 14 Support Centers Worldwide

• 24 x 7 x 365 Operation; 27,000+ Customers

• 60,000+ Support Cases/Year

• 180+ Support Engineers

• Average Call Answer < 10 Sec

• CSAT Average ~ 9.04/Support Rep.

* ACE Engineer Locations Escalation GEC Locations Primary WC/GSC Locations

CONFIDENTIAL



Airheads Community

ARUBA SUPPORT MVP PROGRAM

For the Most Influential

3141

5358

G. Marconi

ARUBA

CERTIFICATIONS

Practical, Not AcademicACM

A

ACM

P

ACM

X

ACDX

SOLUTION EXPERT

Mesh

Airwave

ClearPass

CCxx

MCxx

CWx

x

AIRHEADS EVENTS

Engineers Only

Aruba

TAC

Case

Creation

Airheads Social

Social Hub for

Mobility Experts

CONFIDENTIAL



Aruba MOVE™ Architecture

ContextPolicy

RADIUS GRE / VPN OpenFlow

App Wrapper Context APIMDM Connector

Business Apps MDM Apps Location / Analytics Apps

CONFIDENTIAL



Events

October 9th

Daly Technology Showcase

The Place At Innsbrook

Richmond, VA

October 11th

Daly Technology Showcase

BWI Airport Marriott

Baltimore, MD

CONFIDENTIAL



Daly Contact Information

Jim Rowland

Senior System Architect and Project Manager

Daly

(301) 670-0381 ext 335

[email protected]

Or, contact our sales team at:

(301) 670-0381 option 2

[email protected]

mailto:[email protected]

mailto:[email protected]

daly meec webinar: clearpass access management

Documents