Aruba ClearPass Policy Manager

What i like most abou Aruba Clearpass Powerful policy Engine Cearpss offers exceptional flexibility in defining access control policies. You can buid rules based on user roles, device type, authentication methods, time of day and moreall in very granular way. Seamless itegration It integrates smoothly with a wide range of infrastructure components. Security-centric design Clearpass is built with security in mind, supporting advanced authentication protocols and enforcment mechanisms that help protect the network from unauthorized access.

Comprehensive device authentication, seamless integration and visibility.

We use Clearpass as our AAA for our wired & wireless environment along with other Aruba products (such as Wireless Controllers, Access Points, SD Branch Gateways, Switches and Aruba Central) which comprises our wireless network for large offices and branches across the globe. The support of Aruba is truly exceptional when it comes to working with TAC for issues, raising RFE's for enhancements with product level management and working with accounts team who do not just think of sales but help in push the right buttons when there is a need to solve technical or admin issues by involving the right set of folks.

What i like least about Aruba ClearPass Steep learning curve The interface and configuration logic can be overwhelming for new users. understanding how enforcement policie, profiles, and services interact takes time and experience. The licensing structure is not very intuitive. It's based an the number of endpoints and features, which can lead to unexpected costs and confusion during planning or scaling. Performance limitations in large deployments In high-density environments, Clearpass may require significant hardware resources and fine-tuning to maintain optimal, especially during peak authentication loads. Upgrade Planning Software updates often equire careful planing and testing to avoid service disruptions. Some updates have dependencies or compatibility issues that are not always clearly documented.

Steep learning curve and complex initial setup.

With Clearpass I cant find a major dislike. However, my comment is with respect to the SD Branch setup where the controllers are used as gateways in this architecture which becomes internet facing. Hence strong features of a native firewall/router should be present(for example doing a dry run of user traffic between source/destination) and many more. Once that is in place - together with user-roles and UBT it would be clear advantage and a selling point for Aruba.