make your network work for you quality of service, iot ... › sites › thechannelco › ... ·...

Make your network

work for you

Quality of Service,

IoT, and SecurityDale OldenkampMES Fall September 2017

2

Agenda

• Today’s changing market dynamics

• Top IT considerations

• The Aruba portfolio

• Third party partnership advantages

• Q & A

70% SAY A MOBILE DEVICE MAKES THEM MORE

PRODUCTIVE AT WORK

By 2018 60% of users in mature markets will own and use more

than 3 personal devices

50% of enterprises will allow employees to supply their own

devices in 2017

Forrester – CIOs Must Empower the Digital Workplace

Forrester – The State of Enterprise Worker Mobility

Gartner – The Role of the Desktop in Our Multi-Device World

80%+ NEW IOT PROJECTS TO BE DEPLOYED WITH WIRELESS NETWORK ARCHITECTURE

Installed base of IoTendpoints will grow from

12.1B in ‘15 to 30B+ in ‘20

WLAN will become IoTconnectivity method of choice for many organizations and choosing

the wrong wireless tech can hinder the value of IoT

IDC – Planscape Optimizing the WLAN for IoT

IDC – Worldwide, Internet of Things Forecast Update, 2016-2020

BY 2020, 50% OF THE GLOBAL WORKFORCE WILL BE MILLENNIALS

Millennials believe their personal technology is more

effective at work

63% of millennials work for a company that offers a flexible

work environment

Trends 2016 – Code Conference, Mary Meeker Annual Presentation

Gartner – Millennial Digital Workers Really Are Different From Their Elders

LESS THAN 50% OF EMPLOYEES ARE

SATISFIED WITH TECH THEY HAVE AT WORK

Employees want an environment where they can access and use the technology hey need to do

their best work

Enterprises need to think how untethered employees can move

easily and seamlessly from personal workspace to huddle

area to open areas

Trends 2016 – Code Conference, Mary Meeker Annual Presentation

Gartner – Millennial Digital Workers Really Are Different From Their Elders

CONFIDENTIAL © Copyright 2016. Aruba, a Hewlett Packard Enterprise Company. All rights reserved

User behavior

Has Evolved

Logging in from anywhere

Consumerization of IT

New security threats


Numbers

To Consider

Over 1.3 Bil mobile workers

2/3rds NOT office based

67% use BYOD regardless of policy

IDC

Microsoft study

77% privileged misuse internal usersVerizon study


Top IT Considerations

Authentication

and AuthorizationNAC Services

Deployment

Architecture

and Coverage

Visibility and

Control

Workflow automation

Template-based simplicity

Intelligent reporting

Wi-Fi / wired enforcement

Device visibility

Identity-based policies

Multi-factor auth

Controlled access for IT-

owned, BYOD, Iot

Managed guest access

Health checks

Scalability

Real-time context

3rd-party integration


IT Needs ControlFor Mobile Requirements

Logging In: consistent accessregardless of device, location, biz unit

Policy: context determines privileges

Visibility: web-based GUI, dashboards, reporting, device profiles

GARTNER MAGIC QUADRANT FOR THE WIRED AND WIRELESS LAN ACCESS INFRASTRUCTURE

This graphic was published by Gartner, Inc. as part of a larger research document and should be evaluated in the context of the entire document. The Gartner document is available upon request from Aruba, a Hewlett Packard Enterprise company. Gartner does not endorse any vendor, product or service depicted in its research publications, and does not advise

technology users to select only those vendors with the highest ratings or other designation. Gartner research publications consist of the opinions of Gartner’s research organization and should not be construed as statements of fact. Gartner disclaims all warranties, expressed or implied, with respect to this research, including any warranties or merchantability or fitness for

a particular purpose. | Source: Gartner Magic Quadrant for the Wired and Wireless LAN Access Infrastructure August 2016. Tim Zimmerman, Christian Canales, Bill Menezes, Danilo Ciscato ID Number: G00291908

Gartner once again positions HPE Aruba in the Leaders

Quadrant of the latest Wired and Wireless LAN Access

Infrastructure Magic Quadrant

HPE Aruba feels this should be considered further

validation that HPE Aruba is a leader in connecting the

world with intelligent mobility


ClearPass Policy Manager

Guest Onboard OnGuard

Hardware or

VM Appliances

(500, 5000, 25000)

Expansion Applications

REMOTE LOCATION

ClearPass for Mobile and IoT

What’s Inside

Base Services

Policy Engine

RADIUS/CoA

TACACS+

Profiling+

+100 RADIUS

dictionaries

Advanced reporting

IT Tools

Policy simulation

Access tracking

Template-based policy

creation

LDAP browser

Per session logs

User Tools

AirGroup

Bonjour/DLNA

Device registration

Certificate revocation

Basic guest

Built-in Add-ons

Pool of 25 Lic.

Onboard

Guest

OnGuard

Exchange

API

Syslog


Policy Solving SSID Overload

NEW WAY:

Simplify with ClearPass, separate traffic dynamically

OLD WAY:

Without advanced policy, separate traffic by SSIDs

ClearPass OnConnect for Wired NAC

NEW WAY:

Simplify controls that use non-AAA for multivendor

switching

Old Way:

Wide open wired ports in

conference rooms and on desktops

User or device

not allowed if

not recognized

Implement adaptive policies for IoT and mobilePowered by ClearPass and Ecosystem Partners

Five steps with Aruba ClearPass 6.6

1. Classify unknown devices with custom profiling

2. Onboard mobile devices with multi-factor auth

3. Segment network per role and/or device type

4. Exchange context with security systems in real-time

5. Gain deep visibility with ClearPass Insights

Multi-factor

authentication for mobile

Real-time threat

prevention for IoT / mobile

Aruba

ClearPass


BYOD:

Employees Login with

Personal Devices

User and IT friendly:

One time user registration / no IT

intervention

Security: IT managed, 802.1X and

Certificates

Context: Data added to profile for

adaptive policy and troubleshooting


Flexible Guest Loginsfor Any Visitor

Visitor uses self registration

Rich self-service workflows to

control guest access privileges

Logon support for social, sponsor

Mac Caching for repeat visitors


Automated Health ChecksBefore Access

Wired/Wireless: Ensures posturecompliance for laptops/computers

Security: Forces use of Anti-Virus,Anti-Spyware, firewalls, disk encryption…

Remediation: Manual or auto

Visibility: Identifies poor behavior

Multi-Factor Authentication (DUO Workflow)

Step 1 – Who are you?Step 2 – 1st Factor

Something You HaveStep 3 – Request Approval

from Known Device

Step 4 – Approve from Known Device

Step 5 – 2nd FactorSomething You Know

Step 6 – Logging in!

ClearPass Exchange: End to End Controls

Internet of

Things (IoT)

BYOD and

corporate owned

REST API,

Syslog Security monitoring and

threat prevention

Device management and

multi-factor authentication

Helpdesk and voice/SMS

service in the cloud

Multi-vendor

switching

Multi-vendor

WLANs

Aruba ClearPass with

Exchange Ecosystem

Why ClearPass

User-experience driven applications

True Guest, BYOD and NAC solution

Secure IoT on Wired and Wireless devices

Multivendor & 3rd Party integration

The Intel & HPE Advantage

InteL® XeoN® Processors InteL® SSDs InteL® NICS

InteL® XeoN PHI ™ Processors

InteL® Omni-path fabric

HPC

Pro

du

cts

Combined with HPE Platforms

Technology leadership

Global manufacturing

Supply chain excellence

Industry standards

Global marketing and sales collaboration

Innovation centers

Innovative solutions and software optimization

Complete lifecycle support

HPE and Intel have one of the best end-to-end relationships within industry.


Thank

You

make your network work for you quality of service, iot ... › sites › thechannelco › ... ·...

Documents