Aruba Security Products
        Strong network security everywhere users and devices connect
      
      
      
ClearPass & Central NAC — Network Access Control You Can Trust
Control who and what connects to your network—whether you need enterprise-grade on-prem NAC or modern cloud-based access control.
On-Prem NAC with ClearPass
Enterprise-Grade, Proven SolutionClearPass Policy Manager enables role-based and device-based network access control across wired, wireless, and VPN infrastructures.
- Device profiling: Automatically identify and classify every device
 - Certificate-based authentication: Secure, passwordless access
 - Guest access workflows: Self-service portals for visitors and contractors
 - Dynamic segmentation: Enforce policies for employees, contractors, and guests
 - Unified policy: Same access control across wired, wireless, and VPN
 
Why This Matters
Simplify security
Use the same platform for wired, wireless, and VPN access control—reduce complexity and vendor sprawl.
Increase visibility
Know exactly who and what is connecting to your network, and enforce policies accordingly.
Cloud flexibility
With Central NAC, enjoy cloud-based deployment and include NAC as part of your Aruba Central management.
          Policy Management
Mobility and IoT can cause IT headaches.
Aruba ClearPass leverages known and trusted contextual information to create policies that secure network access from the inside out. That means all those unknown devices can connect without compromising the network.
Learn more about ClearPass
          
 Policy Firewall
            Policy Enforcement Firewall with deep packet inspection.
Every Aruba WLAN includes a stateful Policy Enforcement Firewall (PEF) to ensure that each connection and user session is secure. But unlike traditional firewalls, our next-gen mobility firewall is aware of user roles, device types and app flows.
Learn more about firewalls
          
 Intrusion Protection
            Wireless intrusion protection throughout your network
RFProtect software integrates wireless intrusion protection into your network infrastructure to prevent denial-of-service, man-in-the-middle and other security threats. With RFProtect, there's no need for separate RF sensors and security appliances.
Learn more about RFProtect
          
 VPN Services
            Get VPN-on-demand with the Virtual Intranet Access client.
A hybrid IPsec/SSL VPN client, VIA automatically scans and selects the best secure connection to the corporate network. Unlike ordinary VPN clients, VIA offers a zero-touch end-user experience and automatically configures Wi-Fi settings on devices.
Learn more about VIA
