Aruba ClearPass vs. Aruba Instant Wi-Fi Access Points

We have quite a few visitors to our campus and we don't want to have a set PSK for the wireless so we have configured a guest network where visitors can create an account and gain access to the internet and we don't have to "manage" it since the accounts will expire after a certain time. We have RF scanners in our warehouses and we want them to be allowed on the network and be put into its own VLAN. ClearPass can do this flawlessly by keying off of the MAC address when it comes online and putting it into the correct VLAN. This makes it so we don't have to add each device individually to the system. The only time ClearPass would not be appropriate is in a small deployment where the cost to value wouldn't make sense.

Incentivized

It is possible that we have a bad luck with the deployment. However, It is capable to perform enterprise-level security to fit some of the organization's standards. With Airwave and other tools, it's easy to manage and administrate your wireless environment. Make aware of the IPsec tunnel from each user to the controller if you are using Clearpass for NAC. If you have a remote office with local resources, you will need controller or IAP to route traffic locally. If you have many remote offices, you will need to deploy controllers or IAP in each office, which lead to additional cost and management.

• wide range of compatible devices
• have an easy-to-understand and hierarchical rule-writing structure
• easy-to-use interface and extensive documentation
• seamless MS AD integration

• They offer both a controller-based and controller-less option. This allows customers of all sizes to deploy a wireless network without the upfront cost of controller hardware. A controller can be added later.
• Aruba also offers Airwave which is a single management point for all AP swarms in the environment. It offers many reporting features as well as visual RF maps displaying heatmaps of the AP signals and client positioning.
• The Aruba Access Point we have (224s and 225s) also offer both PoE and external power supplies for those smaller deployments that may not have PoE capable switches.

Incentivized

• The user interface is outdated
• Support is not as responsive as it used to be
• I'd like to be able to build dashboards

Incentivized

• We have had a bunch of these stop working after a power outages. We are guessing a surge or something caused them to stop working.
• Some of the documentation is outdated. It seems they like to make changes to how things work and it usually mean less access and insight into the devices you manage.
• The auto signal strength feature could use a little work. It seems like even when we turn it down all the way it tries ot increases the signal strength.

Incentivized

Aruba Clearpass is straight forward in terms of day to day use for monitoring and basic user connectivity issues. The system is very robust on the back end, therefore some larger configuration changes may not be the most intuitive. System upgrades and license management are not the most intuitive either.

Incentivized

Aruba Networks Wireless LAN is very intuitive to use. After the initial learning curve for the Aruba OS platform, it is straightforward. Day-to-day tasks, such as deploying an access point with a configuration, are very straightforward. Standard incremental system upgrades are also very intuitive. If you have any past experience with Aruba network switching or Cisco switching, the command structure is relatively similar.

Incentivized

We had some issues with ClearPass integration with AirGroup on Aruba Controller Clusters. Basically, it was tough to get coordinated between the controller support and the ClearPass support.

Incentivized

It is a reliable and complete solution for providing wireless network to users. I had no technical problems during those years. The Aruba controller and access points have always worked very well and we have greatly improved the relationship with customers and we now have absolute control over the wireless network traffic. It has quality assurance and support with efficient service as well.

Incentivized

From my experience, ClearPass has been the best NAC server of all I've seen. Even though configuration is somewhat hard and it's hard to get training, once you learn how to configure it it works very well. The policies are very granular and scalable and the interface is a well-done web GUI that does not need any extra plugins installed, as some of Cisco's product require. There are many more options than with FortiNAC, and many more integration options. Also, troubleshooting and logging is good.

Incentivized

Cisco Aironet did not even compare to Aruba, Aruba was so far advanced from Cisco back when we used them. Aruba solved several business problems all in one ecosystem, all Cisco did was acted as somewhat intelligent Access Points. Aruba enabled us to leverage VoIP, use APs as VPN endpoints/devices, manage individual devices as assets, etc.

Incentivized

• It has simplified our SSID management
• It has made it very easy for us to segment our network based on security groups
• It was relatively easy to implement with the support of a VAR

Incentivized

• Excellent uptime and reliability
• If licensed properly, failover is easy
• The newest version upgrade is somewhat cumbersome as they want us to replace hardware, which seems silly, so we are on the most current legacy supported version. Once unsupported, we will need to replace hardware.

Incentivized