HPE Aruba Networking ClearPass Policy Manager vs. NordLayer

Aruba ClearPass is suited well for large enterprise networks with many connecting buildings and branches. Aruba ClearPass protects your endpoints from unauthorized or unknown devices accessing your network. You can apply policies that prevent devices from meeting the required policies in ClearPass. ClearPass will allow only authorized access for devices that are using the policies.

Incentivized

NordLayer has become an invaluable resource for our security posture and day-to-day activity. The primary use case is preventing staff members from accessing sensitive resources on an unencrypted connection, applying NordLayer and conditional access policies in congruency. The ability to create teams and assigned them to specific dedicated servers is also helpful and allows for further security segmentation

Incentivized

• You can use ClearPass authenticate using wired and wireless network devices. This is helpful that you don't have to have multiple systems to accomplish this.
• Because devices can have different purposes Clearpass can configure groups that will specify what access they have. You can use parameters such as vendor or mac address so clearpass know what group to push them to.
• It is very easy to view device logs. This is really helpful to troubleshoot auth issues. Once you find the device Clearpass provides more than enough info to know what the issue is and to fix it.

Incentivized

• Easy to use
• Simple user interface desgin
• Support many VPN protocol
• Fast and reliable connection

Incentivized

• Going to the end of the page to edit the rules and save them later causes problems.
• An AND operation can be performed within a rule, but an OR operation cannot. therefore having to write too many rules
• The license structure seems very complex at first.

• The browser plugin needs some work, or some research about what browser/OS restrictions may limit its functionality. Ours does not work at all even after contacting support so we do not use it
• Toast/Windows notifications scheduled or deployed through admin center would be amazing. The ability to remind a user who has been disconnected for X hours would be a great feature

Incentivized

It's a great product, does what we expect from it however it's not easy to set up. You'll likely need an integrator to assist

Incentivized

Though Aruba ClearPass offers a lot of insight and features, it is not the easiest to navigate. A lot of other systems can be figured out as you go, but Aruba ClearPass often requires a lot of research in order to set something up correctly. It's not always easy to find what you're looking for. Once you learn the basics, it becomes a lot more manageable, but it's definitely worth investing in some sort of training.

Incentivized

We have it as a cluster

Incentivized

It’s very responsive

Incentivized

This product has consistently provided the results needed from it and when issues arose, Aruba TAC was able to provide support effectively. In the previous question, I stated that Aruba Wireless is used as well. With those systems in place with ClearPass troubleshooting becomes much easier. I am sure other issues may arise if calling support while using another vendor for wireless such as Cisco, Juniper, etc.

Incentivized

From my experience, ClearPass has been the best NAC server of all I've seen. Even though configuration is somewhat hard and it's hard to get training, once you learn how to configure it it works very well. The policies are very granular and scalable and the interface is a well-done web GUI that does not need any extra plugins installed, as some of Cisco's product require. There are many more options than with FortiNAC, and many more integration options. Also, troubleshooting and logging is good.

Incentivized

easy configuration and use case

It’s very reliable

Incentivized

Got the job done

Incentivized

• ClearPass has streamlined everything so we don't have to have as many people managing our device auth systems.
• Our Security team loves that ClearPass can deny unauthorized users and devices from the network. This alone has probably saved us a lot of money and headaches.

Incentivized

• Improved sercurity
• Incresed productivity
• Performance impact

Incentivized