AppGate SDP (software-defined perimeter) from Cyxtera Technologies headquartered in Addison is a zero trust network security product.
N/A
HPE Aruba Networking ClearPass Policy Manager
Score 8.7 out of 10
N/A
The HPE Aruba Networking ClearPass Policy Manager provides role- and device-based network access control for employees, contractors and guests across multi-vendor wired, wireless and VPN infrastructures.
The existing system was Fortigate. The management of the system was a hassle. Because IT personnel had to manually create VPN accounts, user passwords were known to who created them and the end user did not have a way to change them. This created a security issue in the …
We currently use Microsoft NPS for various certificate and RADIUS authentications. We have found that when properly utilised Aruba ClearPass offers a whole lot more. Microsoft NPS has been the same for a long time, where Aruba ClearPass has implemented features, logging and …
Clearpass provides seamless protection to the enterprise network without the need of many licenses to be procured. Hardware LAN and Wireless are protected from unwanted or unknown visitors to the network. Unlike other vendors, you don't need multiple licenses, one device or …
Much easier to use, FortiNAC which used to be owned by Bradford was difficult to use. Unintuitive menus made it difficult to use and support was almost nonexistent. It may be different now, but we haven't looked back since using Clearpass. Licensing and support costs aren't bad …
Personally. I haven't used other NAC solutions. There are a few I've researched, but have stayed with Clearpass as my solution based on the features and use case for my organization. One large reason for staying with Clearpass is being an Aruba wireless network customer. Having …
From my experience, ClearPass has been the best NAC server of all I've seen. Even though configuration is somewhat hard and it's hard to get training, once you learn how to configure it it works very well. The policies are very granular and scalable and the interface is a …
ClearPass by far is a more versatile system it seems that it has more features and can configure how you want it. Cisco ISE is extremely complicated to deploy where I felt that ClearPass was more straight forward and user-friendly. Clearpass does what Cisco ISE can do and …
I would recommend AppGate SDP to anyone that has fairly clear cut use cases for systems with user access with less than 5K resources per user. We found it works well in those cases and fully as advertised. The application can easily hide applications and resources from unauthorized access and is a reliable tool in your ZeroTrust arsenal.
We have quite a few visitors to our campus and we don't want to have a set PSK for the wireless so we have configured a guest network where visitors can create an account and gain access to the internet and we don't have to "manage" it since the accounts will expire after a certain time. We have RF scanners in our warehouses and we want them to be allowed on the network and be put into its own VLAN. ClearPass can do this flawlessly by keying off of the MAC address when it comes online and putting it into the correct VLAN. This makes it so we don't have to add each device individually to the system. The only time ClearPass would not be appropriate is in a small deployment where the cost to value wouldn't make sense.
Live logging in the client. Currently you have to "download" the logs into a zip file and then open that zipfile to look at the logs. There's no logfile to tail or watch.
Load balancing between controllers could be better. Currently relies on round robin DNS and sometimes a browser will pick a different IP than previous and you'll get a big "LOST CONNECTION TO CONTROLLER" message.
Getting data out of ClearPass is difficult. You can get some with SNMP but he API is lacking. There is only a limited amount of info that you can get from it. Even some data that shows up in ClearPass Insight is not available to import into a 3rd party application.
In the past, if you have hardware/software issues you could troubleshoot them yourself through the CLI in a Linux type interface but now they have locked everything down and it makes troubleshooting difficult. You have to rely on them for everything. As a person who likes to understand the ins and outs of the systems I manage it is somewhat frustrating.
Steep learning curve, although support can assist and their forums like airheads can be helpful. This is a complex system and can take a while to grasp how everything works and integrates.
Though Aruba ClearPass offers a lot of insight and features, it is not the easiest to navigate. A lot of other systems can be figured out as you go, but Aruba ClearPass often requires a lot of research in order to set something up correctly. It's not always easy to find what you're looking for. Once you learn the basics, it becomes a lot more manageable, but it's definitely worth investing in some sort of training.
The company has been supportive overall of our needs and desired features. I have not personally called the support services, but I've heard no direct complaints either.
This product has consistently provided the results needed from it and when issues arose, Aruba TAC was able to provide support effectively. In the previous question, I stated that Aruba Wireless is used as well. With those systems in place with ClearPass troubleshooting becomes much easier. I am sure other issues may arise if calling support while using another vendor for wireless such as Cisco, Juniper, etc.
The existing system was FortiGate. The management of the system was a hassle. Because IT personnel had to manually create VPN accounts, user passwords were known to who created them and the end user did not have a way to change them. This created a security issue in the event an IT engineer left the company.
Clearpass provides seamless protection to the enterprise network without the need of many licenses to be procured. Hardware LAN and Wireless are protected from unwanted or unknown visitors to the network. Unlike other vendors, you don't need multiple licenses, one device or cloud setup will get you going to manage and monitor your network
It freed up IT personnel time. No longer did they have to manually create the account on the VPN endpoint and manually install the client or create VPN profiles on the employees computer.
Set and forget. It made a positive contribution in terms of labor and cost without needing much technical support. Since NAC and TACACS features come together, you can meet your needs with a single license.
The number of supporting companies may be limited in the country you are affiliated with. Therefore, agreements with third-party companies are expensive and your support requests may take a long time.
