We have quite a few visitors to our campus and we don't want to have a set PSK for the wireless so we have configured a guest network where visitors can create an account and gain access to the internet and we don't have to "manage" it since the accounts will expire after a certain time. We have RF scanners in our warehouses and we want them to be allowed on the network and be put into its own VLAN. ClearPass can do this flawlessly by keying off of the MAC address when it comes online and putting it into the correct VLAN. This makes it so we don't have to add each device individually to the system. The only time ClearPass would not be appropriate is in a small deployment where the cost to value wouldn't make sense.
I love the equipment for small-scale commercial solutions and quality without the price tag. I might not recommend their products for a large organization with multiple locations and servers. However, the GUI interface will allow remote access and setup across the network. I think this is a great solution for small businesses and families or home office solutions, provided there is some IT knowledge for setup and maintenance.
Aruba Clearpass is straight forward in terms of day to day use for monitoring and basic user connectivity issues. The system is very robust on the back end, therefore some larger configuration changes may not be the most intuitive. System upgrades and license management are not the most intuitive either.
We had some issues with ClearPass integration with AirGroup on Aruba Controller Clusters. Basically, it was tough to get coordinated between the controller support and the ClearPass support.
We have not needed to contact support, except to replace one device that was damaged in shipping. The company immediately issued an RMA without delay, and we had our replacement product within a week
From my experience, ClearPass has been the best NAC server of all I've seen. Even though configuration is somewhat hard and it's hard to get training, once you learn how to configure it it works very well. The policies are very granular and scalable and the interface is a well-done web GUI that does not need any extra plugins installed, as some of Cisco's product require. There are many more options than with FortiNAC, and many more integration options. Also, troubleshooting and logging is good.
Prior to this, we used Cisco Meraki wireless access points, which did not allow for centralized control, therefore several access points shared the same SSID. Because the client's movement from one device to another was not as seamless and reliable as it is with the current Ubiquiti solution, this shift cost both time and stability during configuration.
