Aruba ClearPass vs. Extreme Networks Wired Access - Switches

We have quite a few visitors to our campus and we don't want to have a set PSK for the wireless so we have configured a guest network where visitors can create an account and gain access to the internet and we don't have to "manage" it since the accounts will expire after a certain time. We have RF scanners in our warehouses and we want them to be allowed on the network and be put into its own VLAN. ClearPass can do this flawlessly by keying off of the MAC address when it comes online and putting it into the correct VLAN. This makes it so we don't have to add each device individually to the system. The only time ClearPass would not be appropriate is in a small deployment where the cost to value wouldn't make sense.

Incentivized

If you have a big environment with a lot of edge switch needs and department groups, then Extreme's fabric connect can save a lot of management time. If your environment is small then you may want to stick with the traditional model since fabric connect costs more. Also if you make lots of configuration changes all the time then fabric connect will be helpful. Otherwise, making an occasional change you don't need fabric connect.

Incentivized

• wide range of compatible devices
• have an easy-to-understand and hierarchical rule-writing structure
• easy-to-use interface and extensive documentation
• seamless MS AD integration

• Cloud management
• SFP+ uplinks
• Stacking capability
• Robust CLI

Incentivized

• The user interface is outdated
• Support is not as responsive as it used to be
• I'd like to be able to build dashboards

Incentivized

• Improved Extreme Management Console UI.
• More robust CLI auditing/logging.
• Easier log harvesting for adverse events.

Incentivized

Aruba Clearpass is straight forward in terms of day to day use for monitoring and basic user connectivity issues. The system is very robust on the back end, therefore some larger configuration changes may not be the most intuitive. System upgrades and license management are not the most intuitive either.

Incentivized

We had some issues with ClearPass integration with AirGroup on Aruba Controller Clusters. Basically, it was tough to get coordinated between the controller support and the ClearPass support.

Incentivized

There hasn't been a single problem with the code or hardware that hasn't been resolved in a timely fashion. You get technicians who know the product and who will work with you to get things fixed. That being said, I never ran into a problem with Cisco tech support either. I love that both groups were willing to teach me as they fixed things.

Incentivized

From my experience, ClearPass has been the best NAC server of all I've seen. Even though configuration is somewhat hard and it's hard to get training, once you learn how to configure it it works very well. The policies are very granular and scalable and the interface is a well-done web GUI that does not need any extra plugins installed, as some of Cisco's product require. There are many more options than with FortiNAC, and many more integration options. Also, troubleshooting and logging is good.

Incentivized

Foundry, HP, Cisco, Brocade. Extreme performance is equivalent or better without the price tag added just for their name

Incentivized

• It has simplified our SSID management
• It has made it very easy for us to segment our network based on security groups
• It was relatively easy to implement with the support of a VAR

Incentivized

• Extreme [Ethernet Switches] have a long-life. You can easily get 7 years in main production life depending on when you buy in the product life-cycle.
• Extreme [Ethernet Switches] are expensive, no doubt, but we also don't have "weird" network problems or other issues with the network randomly going down.
• If you use fabric connect switches then the ease of managing many switches is of no concern.

Incentivized