Extreme Networks Wired Access - Switches vs. HPE Aruba Networking ClearPass Policy Manager

If you have a big environment with a lot of edge switch needs and department groups, then Extreme's fabric connect can save a lot of management time. If your environment is small then you may want to stick with the traditional model since fabric connect costs more. Also if you make lots of configuration changes all the time then fabric connect will be helpful. Otherwise, making an occasional change you don't need fabric connect.

Incentivized

Aruba ClearPass is suited well for large enterprise networks with many connecting buildings and branches. Aruba ClearPass protects your endpoints from unauthorized or unknown devices accessing your network. You can apply policies that prevent devices from meeting the required policies in ClearPass. ClearPass will allow only authorized access for devices that are using the policies.

Incentivized

• Uptime has been fantastic. We have had no issues with our switches shutting down or crashing
• Policy, We have the ability to enforce Policy at the port

Incentivized

• You can use ClearPass authenticate using wired and wireless network devices. This is helpful that you don't have to have multiple systems to accomplish this.
• Because devices can have different purposes Clearpass can configure groups that will specify what access they have. You can use parameters such as vendor or mac address so clearpass know what group to push them to.
• It is very easy to view device logs. This is really helpful to troubleshoot auth issues. Once you find the device Clearpass provides more than enough info to know what the issue is and to fix it.

Incentivized

• They are working on it, but a single console to manage the policies across all switches.
• For those with a Cisco background, the CLI commands are different with Extreme so you have to get used to that. Nothing necessarily wrong though.
• If you want a chassis core switch/router then those are becoming less available and won't find many options with Extreme.

Incentivized

• Going to the end of the page to edit the rules and save them later causes problems.
• An AND operation can be performed within a rule, but an OR operation cannot. therefore having to write too many rules
• The license structure seems very complex at first.

Great product, great support and very happy with the reliability.

Incentivized

It's a great product, does what we expect from it however it's not easy to set up. You'll likely need an integrator to assist

Incentivized

Very easy to use, the CLI is a little different than competing products, but the GUI is very intuitive.

Incentivized

Though Aruba ClearPass offers a lot of insight and features, it is not the easiest to navigate. A lot of other systems can be figured out as you go, but Aruba ClearPass often requires a lot of research in order to set something up correctly. It's not always easy to find what you're looking for. Once you learn the basics, it becomes a lot more manageable, but it's definitely worth investing in some sort of training.

Incentivized

We have it as a cluster

Incentivized

It’s very responsive

Incentivized

There hasn't been a single problem with the code or hardware that hasn't been resolved in a timely fashion. You get technicians who know the product and who will work with you to get things fixed. That being said, I never ran into a problem with Cisco tech support either. I love that both groups were willing to teach me as they fixed things.

Incentivized

This product has consistently provided the results needed from it and when issues arose, Aruba TAC was able to provide support effectively. In the previous question, I stated that Aruba Wireless is used as well. With those systems in place with ClearPass troubleshooting becomes much easier. I am sure other issues may arise if calling support while using another vendor for wireless such as Cisco, Juniper, etc.

Incentivized

We upgraded to Extreme Switches from Cisco SG500 and SG250 small business switches. Extreme Switches offer a much easier to use GUI management platform called Extreme CloudIQ, which makes visibility into our network much easier and user friendly. Performance wise these offered higher uplink speed as well.

Incentivized

From my experience, ClearPass has been the best NAC server of all I've seen. Even though configuration is somewhat hard and it's hard to get training, once you learn how to configure it it works very well. The policies are very granular and scalable and the interface is a well-done web GUI that does not need any extra plugins installed, as some of Cisco's product require. There are many more options than with FortiNAC, and many more integration options. Also, troubleshooting and logging is good.

Incentivized

It’s very reliable

Incentivized

Got the job done

Incentivized

• Extreme [Ethernet Switches] have a long-life. You can easily get 7 years in main production life depending on when you buy in the product life-cycle.
• Extreme [Ethernet Switches] are expensive, no doubt, but we also don't have "weird" network problems or other issues with the network randomly going down.
• If you use fabric connect switches then the ease of managing many switches is of no concern.

Incentivized

• ClearPass has streamlined everything so we don't have to have as many people managing our device auth systems.
• Our Security team loves that ClearPass can deny unauthorized users and devices from the network. This alone has probably saved us a lot of money and headaches.

Incentivized