• Firewall function
• Device and User Restrictions
• Rogue AP detection

Firewall function

A stateful firewall function is implemented in MC, and access policies can be applied according to user privileges (roles).
Aruba Networks' wireless LAN employs a unique architecture that uses GRE tunnels, enabling the design of flexible access policies that minimize the impact on existing VLAN ACLs.
You can block communication that is not permitted by your access policy, or monitor and raise alerts.

Device and User Restrictions

User authentication (802.1x authentication) is the mainstream in wireless LAN, but there are also cases where terminal authentication is used. Terminal authentication uses MAC addresses and electronic certificates to authenticate terminals.
In the future, when an organization introduces smart devices or promotes the use of personal devices owned by users, double authentication of users and devices will become important.
For example, if you want to use MAC address authentication for terminal authentication, MC can use both user authentication (802.1x) and MAC address authentication (MAC RADIUS authentication), and these authentication information can be centrally managed by the authentication server. increase.

Rogue AP detection

Since the AP monitors the surrounding radio wave conditions, it is possible to detect radio waves from APs that are not managed by the company. These can be peripheral interference APs, rogue APs connected to the company's NW. You can check the SSID of these APs from the MC management screen, and you can also grasp the approximate location of the unauthorized AP by three-point positioning.
You can also purchase an optional RFP license to prevent connections to rogue APs.

You can grasp the information of the access point that seems to be illegal. If you break down from this management screen, you can also check information on unauthorized access points and their installation locations.

Information on unauthorized access points (Image obtained from AirWave management screen)

• remote access point
• Account issuance for visitors

remote access point

A remote access point (RAP) is effective in environments where a secure network path such as VPN is not secured to the head office or data center, such as a small office or commercial facility tenant.
As long as there is an environment that can connect to the Internet, RAP creates an IPsecVPN tunnel to the MC, downloads configuration information from the MC, and provides wireless LAN services. Users can connect to the same wireless LAN at headquarters and branch offices and access resources within the company. Of course, both AP and RAP can be managed by the same MC.

Account issuance for visitors

You can easily issue a temporary account for connecting to a wireless LAN to a visitor. You can also set the account validity period in advance, and the account will automatically expire after the validity period has passed.
You can smoothly provide access to the Internet when the person in charge of an overseas business partner visits your company.