CyberArk Privileged Access Management vs. HPE Aruba Networking ClearPass Policy Manager

The system is great for enterprise or larger IT departments or teams where temporary or full access may be given using privileged IDs. Requirements for needing local admin access is also eliminated which can help with specific Windows workstation related tasks. It can be very useful when working with remote teams or contractors who may need temporary access to a system when required.

Incentivized

Aruba ClearPass is suited well for large enterprise networks with many connecting buildings and branches. Aruba ClearPass protects your endpoints from unauthorized or unknown devices accessing your network. You can apply policies that prevent devices from meeting the required policies in ClearPass. ClearPass will allow only authorized access for devices that are using the policies.

Incentivized

• Managing local administrator accounts for Windows Servers
• Managing local root accounts for Unix Servers
• Managing service accounts for Windows Servers
• Managing IIS Application pool passwords for Windows web servers.

Incentivized

• You can use ClearPass authenticate using wired and wireless network devices. This is helpful that you don't have to have multiple systems to accomplish this.
• Because devices can have different purposes Clearpass can configure groups that will specify what access they have. You can use parameters such as vendor or mac address so clearpass know what group to push them to.
• It is very easy to view device logs. This is really helpful to troubleshoot auth issues. Once you find the device Clearpass provides more than enough info to know what the issue is and to fix it.

Incentivized

• GUI - right now everything is on one page/dashboard. Some level of folder/Safe type view would be great
• More options when storing passwords - especially for network based passwords
• Better integrations with vendors like Cisco so that admins dont need to really get the password from the vault (think Last Pass type add on)

Incentivized

• Going to the end of the page to edit the rules and save them later causes problems.
• An AND operation can be performed within a rule, but an OR operation cannot. therefore having to write too many rules
• The license structure seems very complex at first.

It's a great product, does what we expect from it however it's not easy to set up. You'll likely need an integrator to assist

Incentivized

I think CyberArk is a great product and there are many different modules to incorporate. There are many great feature sets available right out of the box and you feel safer just implementing some of the basics. The more features you implement the better the product performs. There are definitely some implementation hurdles, but typically they are too difficult to figure out.

Incentivized

Though Aruba ClearPass offers a lot of insight and features, it is not the easiest to navigate. A lot of other systems can be figured out as you go, but Aruba ClearPass often requires a lot of research in order to set something up correctly. It's not always easy to find what you're looking for. Once you learn the basics, it becomes a lot more manageable, but it's definitely worth investing in some sort of training.

Incentivized

We have it as a cluster

Incentivized

It’s very responsive

Incentivized

I've been an engineer and architect in the Identity space for many years and CyberArk is the #1 tool I've found to help me secure accounts and credentials. I've architected CyberArk and built the implementation from the ground up twice in previous roles and found it here upon my arrival at my current job. I wouldn't want to have to live without it as it helps me sleep at night

Incentivized

This product has consistently provided the results needed from it and when issues arose, Aruba TAC was able to provide support effectively. In the previous question, I stated that Aruba Wireless is used as well. With those systems in place with ClearPass troubleshooting becomes much easier. I am sure other issues may arise if calling support while using another vendor for wireless such as Cisco, Juniper, etc.

Incentivized

It is known as one of the safest products in the market. It has good support and is also available as on-premise. You can run it virtually on VMWare (and probably on other hypervisors as well). You can have a second instance on bare metal and that makes it a very safe system.

Incentivized

From my experience, ClearPass has been the best NAC server of all I've seen. Even though configuration is somewhat hard and it's hard to get training, once you learn how to configure it it works very well. The policies are very granular and scalable and the interface is a well-done web GUI that does not need any extra plugins installed, as some of Cisco's product require. There are many more options than with FortiNAC, and many more integration options. Also, troubleshooting and logging is good.

Incentivized

It’s very reliable

Incentivized

Got the job done

Incentivized

• A positive impact is passing SOX audits when it comes to privileged account management. Making sure we are compliant with password expiration policies and complexities.

Incentivized

• ClearPass has streamlined everything so we don't have to have as many people managing our device auth systems.
• Our Security team loves that ClearPass can deny unauthorized users and devices from the network. This alone has probably saved us a lot of money and headaches.

Incentivized