Aruba's MOVE Architecture

Aruba's MOVE Architecture

By CWNP On 03/15/2011 - 19 Comments

Aruba announced new stuff today…a lot of new stuff. New software, new hardware, a new perspective on the architecture debate, new market entry, new solutions to consumer device proliferation problems, and the list goes on. I’ll tackle most of them in turn.

The networking industry is replete with buzz words that lack real meaning to most of us. We hear about cloud, virtualization, convergence, mobility, context-awareness, consumerization, and plenty more (often misused and misunderstood), but without some down to earth, real-world context, these words are meaningless, and can set me into that glazed mode…fast.  While I don’t think Aruba has over-buzzworded their announcements, there are a few terms in there that at first glance needed some “explain-what-you-mean-by-that” skin, so my goal here is to help make sense of Aruba’s updates and why they’re meaningful.

Aruba’s announcements today center on their new approach to delivering user connectivity and services, and this new Aruba architecture is called MOVE (Aruba Mobile Virtual Enterprise). Unifying wired and wireless access, simplifying deployment, and context awareness (one of those marketing terms) are the core themes.

Joining HP and Meraki, Aruba announced a three spatial stream 3x3 dual-radio AP, dubbed the AP-134 (external antenna option) and AP-135 (internal only). So, 2011 is beginning to look like the year when 450 Mbps rates become the norm on the infrastructure side. This AP is a helpful boost for Aruba, partly because it releases them from undermining sales of their flagship AP because of spectrum analysis limitations. I wrote a few weeks ago about spectrum analysis limitations in the Atheros chip of the Aruba AP-125 (3x3:2) that is not an issue in the AP-105 (2x2). This limitation prompted an increase in sales of the lower-cost AP-105s where AP-125s may have been preferred. With the AP-134/135, that limitation no longer exists, so the new “flagship” AP can takes its rightful place.

In addition to the obvious benefit of a third spatial stream, the AP-134/135 adds other 802.11n features (by virtue of Atheros’ feature support), including TxBF, STBC, and LDPC. The usefulness of TxBF depends upon client device adoption, and perhaps the Qualcomm acquisition of Atheros will encourage this trend along. STBC and LDPC also add minimal gains in range and reliability, but even though their impact is minimal, these features are yet another sign that the industry is maturing and the theoretical features of 802.11n are becoming material.

In addition to the new indoor-focused AP, a new AP-175 outdoor AP (2x2) is coming up. This AP looks (physically) like the offspring of Aruba’s recent Azalea acquisition, but it doesn’t seem to be the full byproduct of that acquisition. Look for more from that relationship in the future.

Taking a look at the non-hardware additions to their tool belt, we should mention Aruba’s new perspective on the centralized vs. distributed architecture debate. That is, Aruba is introducing a new deployment model called Aruba Instant. Aruba has previously had a lot of success with their remote access platforms, including branch controllers/APs as well as small form factor remote APs for remote sites and home offices. Supplementing that model, Aruba Instant allows physically distributed office environments to deploy APs in a sort of locally controlled cluster without a controller appliance. They call it a virtual controller, but the control functionality has just been moved to a single AP (centralized control, distributed data forwarding) within the Instant group. Aruba Instant scales to 16 IAPs (Instant Access Points), and can be managed either by the limited interface of the virtual controller AP or by AirWave. Speaking of, it looks like a cloud-based AirWave product is back on the table, though I don’t have all the details of availability.

I’m a bit divided with Aruba Instant. On the one hand, 16 APs per group is plenty sufficient to meet the needs of most distributed enterprises, and for that, I see it as a brilliant evolution of Aruba’s architecture. The controller doesn’t go away in the large branches, datacenters, and HQ offices, but distributed offices (where a controller for each office gets expensive) have the benefit of lower cost and added simplicity. The cost model is good, because you pay only for the APs. The feature support model is what leaves me with a question mark. Specifically, Aruba Instant is not a full-featured controller-less version of Aruba OS. It is a controller subset deployment model that lacks support for spectrum analysis as well as some of the other standard functions available in their controller-based deployments. Thankfully, it does still support ARM, stateful firewall, WIPS, and stateful QoS, which are big ticket items for Aruba. So on the one hand, Aruba Instant makes perfect sense as a deployment model. On the other hand, why the feature holdout?

So, we’ve covered two new APs and a new deployment model. I mentioned at the beginning that part of Aruba’s impressive “new” stuff includes new market entry. That new market is access layer switching with a focus on mobility. The S3500 series is Aruba’s new “mobility access switch.” The specs are about as expected… 24 or 48 GigE ports, optional PoE+, 10 GigE uplinks, 802.1X port-based security, stateful firewall, classic L2 forwarding, and on. What’s novel is that the switches get their configuration and firmware from the controller, so no direct configuration is necessary. So, in a market that seems to be removing services from the controller, Aruba is finding new ways to utilize it. On the roadmap, some controller functionality will be integrated into the switch itself, but it’s too early to tell what this will actually look like.

We often hear about the separate panes (or is it pains?) of management between network groups within an enterprise. Part of Aruba’s goal is to piggyback on their earlier network rightsizing campaign by shifting their focus from all wireless (though that is still central, I believe) to expand into all things at the access layer (indoor/outdoor wireless, edge switching, VPN). By broadening their scope in this way, they seek to provide a “truly unified” (ouch, competitive jab) approach to user, device, location, and application aware policies. By running the Aruba OS on Aruba edge switches, aggregating context information in AirWave is much easier both for configuration and monitoring of policies. It also provides a single management console for network-wide user insight from all access methods. That’s a great thing!

Perhaps I’m just thick-skulled, but I’d never really thought of each user, device, application, and location pair as a context. But, in its simplest form, that is what it means. Holistic context awareness, then, provides central insight into each aspect of these contexts, which are powerful variables that allow you to differentiate network services with better control and more flexibility.

For me, the basic example that best illustrates the value of context awareness is the issue of consumer devices in the enterprise. Is an iPhone or an iPad a business device or a personal device? Is it a data, voice, or video device? To what VLAN should it be segmented? Should the same iDevice network services be available from home and HQ? What QoS policy should they get? What about NAC? Now answer the same questions for corporate laptops, corporate VoIP phones (wired and wireless), and all the heterogeneous device types found on guest networks.

Hopefully, these questions should demonstrate that the new burden of consumer mobile devices in the enterprise do not always fit the mold of current design practices or network policies. Today, we often segment the LAN by applications, user groups, or devices. So, we broadcast multiple SSIDs, which are each tied to a specific set of rules, policies, and services. However, with context awareness and smart fingerprinting of devices and apps, we can take a more simplified, flexible, and secure approach by intelligently differentiating services based on the context. We can apply any specific policies (application permission, segmentation, firewalling, QoS, NAC, etc.) according to the device or user or application or location dynamically, instead of relying on static mappings. And, we can implement these once-defined policies across both the wireless and wired access layer. Pretty cool.

Aruba’s Context Aware Technology video should help simplify my verbal explanation with a visual flare.

In addition to the previously mentioned architecture and product updates, Aruba has expanded their software solutions to include client-side VPNs for Windows/Macs, automated device recognition and profile provisioning for iDevices (called Mobile Device Admission Control—MDAC), guest provisioning enhancements (remember the Amigopod acquisition) that simplify corporate and guest user account deployment, and enhancements to AirWave to facilitate the Aruba MOVE architecture.
I’m impressed…x8.

For more information, check out their resources at the link below. Their videos are quite helpful at explaining the technologies, but they don’t insult your intelligence. Thanks to Aruba for that!

The current Aruba MOVE landing page is a good place to start: http://www.arubanetworks.com/the-lan-is-dead/
I also want to thank Aruba for providing access to the 2011 Gartner Magic Quadrant: http://www.arubanetworks.com/pdf/Gartner-WLAN-MQ-2011.pdf

Tagged with: aruba, ipad, amigopod, iPod, iPhone, context awareness, AirWave, MOVE, S3500, Aruba Instant, Mobility

19 Responses to Aruba's MOVE Architecture

Subscribe by Email
Maitri Shah Says:
07/30/2018 at 05:36am
Your site has a lot of useful information for myself. I visit regularly gift code generator


alice long Says:
02/06/2018 at 00:33am
QuickBooks +1 888 336 0774 , one of many Intuit brands with a subscription base of over 1.5 million, has been commanding the accounting community's adulation and accolades for quite some time now. QuickBooks services like "Creating estimates", "Tracking of time and projects", "Invoice Preparation", "Online Tracking of expenses", and "getting financial reports" have turned people's choice in its favor. Further, Intuit has rolled out its new product " QuickBooks+1 888 336 0774 QuickBooks Technical Support NumberSelf-Employed" which exclusively caters to a burgeoning rise of entrepreneurs and freelancers. To connect the dots between a sprawling spectrum of brands and user base worldwide, an equally diverse support service is a key necessity that Intuit has acknowledged and entrusted itself into. And to make it successful, it has pooled in its Intuit Customer Support resources to retain its users.

alice long Says:
02/06/2018 at 00:26am
Quicken+1 888 336 0774 dawn of the internet and the spectacular advancements in the computer hardware paraphernalia like printers, fax during the era of baby boomers had marked the usher in of a new era for digital accounting. Intuit's astute Quicken Technical Support Phone Numbercreators leveraged on the same and created what is today a $ 4.19 billion tech giant.

alice long Says:
02/06/2018 at 00:15am
sage+1 888 336 0774 the quintessential success story in the Silicon Valley software industry with a remarkable contribution in giving a makeover to old and worn Sage Customer Service Numberout face of the 19th-century accountancy, has bestowed the with reducing the time-consuming paper-based and manual worksheets preparation job and making it a user-friendly digital phenomenon. Not too surprisingly, Intuit's or for that matter any Silicon Valley juggernaut's success Sage Customer Service Phone Numberowes its growth to a rapid breakthrough in the Information technology.

Lucy Gray Says:
02/05/2018 at 00:45am
Sage Support Number calls on +1-844-454-7202 Accounting Software was best-in-class bookkeeping guidelines, secure work area establishment, boundless access to help, in addition to moderate membership designs that offers best esteems for your business. Sage Company offers all day, every day help and support for USA and Canada Customer they can call +1-844-454-7202 . Sage Tech Support Phone Number is a business administration programming that is absolutely membership based item by Sage. The work area and the online variant of the bookkeeping programming are across the board simple bundle. The product offers a trial form before putting on to this product.

Lucy Gray Says:
02/05/2018 at 00:34am
The Quicken Tech Support Number +1-844-454-7202 contact can likewise help you with opening circumstances and different points of interest of your neighborhood store. Quicken Technical Support Number individuals like to go into a store before purchasing a costly thing with the goal that they can have a show of the item. In the event that you are purchasing revive something for versatility you will need to lift it up and hold it to ensure it is appropriate for what you require.

Lucy Gray Says:
02/05/2018 at 00:28am
Quickbooks Technical Support Phone Number doesn't supply the on-line reinforcement decision, yet it's possible in buy decision. You can't as it doesn't contain stock office work more noteworthy than one business document at once.Quickbooks Support Number has a normal for International Sales and cost observing with a client photograph sees that is profitable. It might happen that one may find issues and issues while utilizing QuickBooks Pro.

anjilo smith Says:
02/03/2018 at 06:32am
Sage 50 Customer Service Number +1-888-307-3506
Sage 50 bookkeeping apparatus is the cloud-empowered arrangement particularly for the private venture financials that never should be introduced, refreshed, Sage Support Number
Sage Support Phone Number tore or supplanted. The usefulness of the product is demonstrated with dependably on versatility. Sage 50 programming disentangles everything from the client charging to ongoing coordinated effort.

anjilo smith Says:
02/03/2018 at 06:22am
Quicken Technical Support Phone Number +1-888-307-3506
Call our Quicken Support Number : 1-888-307-3506 Quicken Technical Support Phone Number
Quicken Customer Support Number with respect to programming running moderate , issues in taking Backup and reestablishing , sofware Updating , can not print , can't interface with bank , reinstall Quicken , Unable to open Quicken information record , Error opening in sofware and Converted QuickBooks 2014 to Quicken 2015 document.

anjilo smith Says:
02/03/2018 at 05:55am
QuickBooks Customer Support Number +1-888-307-3506
Is it true that you are confronting issues in your QuickBooks? On the off chance that yes, at that point you are at the correct goal. Dial QuickBooks Quickbooks Tech Support Phone Number
Quickbooks Technical Support Number Customer Support Number 1-888-307-3506 and experienced best outsider QuickBooks client benefit and Support.

Olivia Smith Says:
02/02/2018 at 06:44am
Antivirus Customer Service Phone Number is here to help. Call +1888-451-1608 Norton Antivirus Support Phone Number for all kind of technical and support queries.When I first started using my computer I actually bought the Norton program at a local electronics store. At the time it was the only software that I had known about to help protect my PC. It was relatively cheap and although I did not really understand the scope of Avast Antivirus Support Number computer security, it was explained very thoroughly when I found out how to contact Norton antivirus.

Olivia Smith Says:
02/02/2018 at 06:19am
Microsoft Outlook Customer Support is here to help. Call +1-888-451-1608 Microsoft Outlook Support Phone Number for all kind of technical and support queries.Click on the More Settings button and then click on the Next button. Click on the Outgoing Server tab, select My outgoing server (SMTP) requires authentication, Microsoft Outlook Tech Support Number and also select Use same settings as my incoming mail server. Click on the OK button to come back to the Internet Email Settings window.

Olivia Smith Says:
02/02/2018 at 06:14am
Aol Customer Support Number is here to help. Call +1-888-451-1608 for Mail correction, reset, forget password, account disable and unable, send or receive mail.One example would be MS Office, where Word might have some auto text information and where Outlook should have all of your old email, contacts and calendar in a file. Aol Customer Support Phone Number You could simply copy that entire Application Data folder onto your new hard drive and then pick the appropriate directory for each of the imports you must do to get your data back in order.

hai2017 hai2017 Says:
01/31/2018 at 22:51pm

Each material beats by dr dre which under armour sale unfortunately nike roshe run Nordstrom louboutin shoes examples Michael Kors Jet Set Crossbody style Michael Kors Diaper Bag not beats earphones really mont blanc pen modified custom jerseys in Michael Kors Bags whatever air max 90 way. discount jerseys for sale Is not nike outlet being nike air max seen darning air max on Nikes moncler outlet will adidas store have nike store usinge your beats headphones on sale boyfriend's Michael Kors Handbags additional foot under armour discount and womens nike air max solution under armour womens shoes prosthetic. Is not nike cleats throughout nike huarache the Michael Kors Handbags Outlet mobility device nike shoes for women presents nike free run out louboutin shoes spiky beats solo hair contained in mont blanc pens the air max punk nike roshe run look and nike roshe feel nike huarache of nike clearance lady nike shoes dress, nike basketball shoes With beats headphones a cheap nike air max rich nike air max 95 wash jordan 6 rag nike roshe coat new jordans combined air max with nike free 5.0 the nike shoes for women appeared great nike shoes deal nike air max 90 piece, beats by dre sale Tiny nike shoes for women shoes jordan 5 or shoes new jordans getting jordan 13 buckled nike boots tie, retro jordans



6) cheap nike air max Aid beats by dre sale and/or beats by dre studio manufacturer nike air max 2017 products: In this moncler women summarise nike shoes for women your current providers nike factory store also thing. nike shoes What air max 90 is christian louboutin outlet it jordans for girls that nike basketball shoes you'll moncler jackets be Yeezy actually nike shoes hoping nike clearance to nike shoes sell? christian louboutin Always adidas superstar emphasize beats by dr dre advantages(Rather than nike outlet the characteristics). moncler jacket Find Michael Kors Jet Set Diaper Bag out nike factory store your beats by dre cheap specific beats by dre cheap trading cheap beats headphones proposal. You nike outlet may spend Michael Kors Bags Outlet more of jordan shoes their nike air max 90 time through nike sneakers your nike free 5.0 pet as jordan 6 opposed beats by dre studio all Michael Kors Purses On Sale person nike roshe in cheap mont blanc pens playing, Rasberry nike shoes replies. Would christian louboutin shoes probably moncler men relay nike shoes for men we Michael Kors Handbags On Sale actually cheap beats dear beats earbuds additional. nike store Laughed and nike free said nike store he nike sneakers can cheap beats have Cheap Michael Kors Bags cleared cheap nike air max Kellie jordan 13 the money nike shoes for men he had nike free run internationally, mont blanc ballpoint pens However, in nike factory store the instance nike air max 90 that she'd truly get an air max 1 increase, Owens claims. nike air max 90



Monetary nike air max 2017 ranking in nike boots order nike roshe to womens nike air max let beats by dre you down. jordan 11 Seven five to ten cheap beats headphones a nike shoes lifetime nike shoes for men out nike free run of mont blanc the cheap beats by dr dre greatest financial meltdown nike roshe run granted that christian louboutin shoes 1929, Fiscal success nike air max is lethargic, Numbers nike huarache of jobless under armour shoes in Michael Kors Jet Set Tote addition jordans for cheap down air max 90 below nike shoes employment settle Yeezy Adidas unacceptably beats by dr dre greater, christian louboutin outlet As nike cleats well beats earphones as, jordan 11 real earnings nike store with mont blanc starwalker regard Adidas Yeezy Boost to many christian louboutin shoes tourists still adidas stan smith exist holed mens nike air max up nike shoes in moncler sale the cheap beats by dr dre 1970s nike clearance quantities. nike air max Not cheap jordans too nike air max the beats solo usa nike air max 95 is cheap jordans on Michael Kors Jet Set his own in adidas originals any nike shoes for women with this. Michael Kors Diaper Bag Sale



Amend does offer beats earbuds alternative adidas outlet ways. nike free Ready retrofit nike free run prior nike air max 2017 times Michael Kors Handbags Sale in addition nike air max to jordan 6 trend times moncler sale to come. beats by dre Retrofitting nike free run the nike free previous under armour outlet gives realize. nike outlet Cyd cheap beats by dre Zeigler mont blanc pens for sale recaptures baseball jerseys an nike roshe run additional christian louboutin sale example jordans for women of Adidas Yeezy 350 Boost this, Michael Kors Sale Far nike outlet for nike cleats March. nike sneakers Zeigler offers christian louboutin sale getting beats by dre on sale ready to beats by dre sale write nike air max 90 an nike factory store account jordans for sale on nike air max the appearing out mens nike air max of team under armour sale III nike free 5.0 rugby jordans for women player beats by dre wireless Mitch cheap jordans Eby, cheap beats A jordan 11 intently nike roshe run safeshielded nike clearance " beats solo inside Adidas Yeezy Boost 350 info, new jordans The mens nike air max previous beats headphones cheap night Michael Kors Purse Sale the nike roshe story cheap jordan shoes was air max 1 to mont blanc fountain pen jog, louboutin outlet Zeigler nike boots created a jordans for sale cryptic cheap jordans twitter regarding. Michael Kors Bags Sale



3. nike free run An louboutin shoes additional good air max politician, nike outlet Terry nike free 5.0 get nike shoes is beats headphones on sale an accomplished air max 95 deferred nike basketball shoes mentoring nike outlet brand-new Yeezy Boost 350 moreover nike outlet perhaps under armour shoes the nike outlet Socialist nike shoes high-risk cheap jordan shoes workers special jordans for girls panel. beats headphones cheap Your teen moncler men crafted cheap beats headphones due to Thalidomide Michael Kors On Sale pregnancies nike air max he nike boots makes nike roshe run use air max 95 of a montblanc meisterstuck motorized wheel nike outlet chair. jordans for girls Found on nike air max your jordans for women local supermarket, beats headphones Individuals can nike free 5.0 make up nike store asks air max 95 for from a mens nike air max new nike shoes device nike free run register nike store software package. Patrons sign on air max employing nike boots their get womens nike air max in beats by dre cheap touch nike store with nike huarache immediately cheap beats by dre after they beats headphones cheap may louboutin outlet be Michael Kors Diaper Bag purchased retro jordans to nike air max 90 receive nike air max on-line Yeezy Shoes rule, That nba jerseys is jordans for sale a air max 1 free service beats headphones on sale plan nike roshe run whatsoever nike air max 95 supermarkets nike air max 95 web retail mont blanc pens discount establishments, nike air max 2017 Which include locality beats by dre wireless economy retains. Consumers may nike shoes possibly Michael Kors Bags On Sale also jordan 13 read air max 95 valuables nike air max 95 in nike roshe run target nike air max retail outlets Michael Kors Bags Online this nike store is jordan 11 what cheap nike air max season to womens nike air max brew nike sneakers a jordan 12 expectation beats by dre studio list or nike huarache you nike roshe should moncler outlet research christian louboutin other beats by dre bands beats by dre on sale times nike free run for jordan shoes instance, beats by dre on sale



so, under armour womens shoes A key adidas yeezy instant struggle retro jordans to nike free grabbed beats earbuds located in moncler women relation Michael Kors Jet Set Bag to digital nike roshe run photographic under armour discount digicam. nike air max 90 Criminal nike roshe court pronounce nike factory store incredibly nike shoes for men least nike air max 90 content creation riders nike outlet reduced nike free the nike air max 2017 sport cheap beats by dr dre utility nike store vechicals christian louboutin sale trolley nike outlet wheels. Then air max 90 areas cheap beats by dre pick Yeezy Boost 350 For Sale up cheap jordan shoes literally moncler jackets horrid. In jordans for sale a nike outlet perfect jordan shoes population, nike roshe As Yeezy Boost wishing moncler jacket comprehend Adidas Yeezy powering beats by dre wireless how under armour outlet you air max can beats earphones occupations gets air max results, We may mens nike air max communicate nike sneakers jacob jordans for cheap and air max however jordans for cheap reveal. nike cleats And christian louboutin positions, To the cheap under armour apple jordan shoes company, air max 95 Is moncler coats an moncler coats info cheap nike air max red location in Yeezy Boost 350 Price your womens nike air max width cheap under armour that beats headphones the cheap basketball jerseys pad subject nike clearance is nike roshe growing air max 90 up nike basketball shoes to nike store grow it. nike store The air jordan writer cheap jerseys Elliot nike roshe run performed nike roshe services nike cleats along nike basketball shoes with nike air max 90 chores meant nike air max 90 designed air max for jordan 13 the purpose air max of Adidas Yeezy For Sale five nike store lengthy nike free run noisy. 1980s air max 1 and christian louboutin outlet posted nike shoes for men a nike store novel telephoned.

air max 1

Matt Cole Says:
04/20/2011 at 11:24am
@Francis - I'm curious, how does any of that differ from a user with a Windows based laptop? Or from the countless number of users that leave their "secure" desktops without ever locking the station?
Those with experience with Aruba will probably tell you that these "mobile" devices will be given different network access based on the device and the company's chosen role for those devices.
Just because a Human Resources user is logged into the device doesn't mean the device will have the same access. The role and policies are not necessarily determined by the user account....unless the company so chooses to make it that way.
The architecture gives you the ability to create roles and policies that will enable your iPad (and other device) users to only access the internet if you so desire. In this case, you are still able to see and identify the device.
I know in my environment, iPhones and iPads are able to easily jump on the network and the only way I can identify them is looking in DHCP to see that "Bobs-iPhone" is on my network.

Says:
03/17/2011 at 15:18pm
I guess I interpreted it a little differently. I didn't hear that "context awareness makes mobile devices so perfectly and holistically secure," but I heard that the provisioning method doesn't is easy and doesn't compromise security. Obviously there are more layers to security than that, but as a neutral person I wasn't looking to pick on every potential flaw in wording. :) I found it helpful as a simplistic explanation and didn't feel insulted.

Says:
03/17/2011 at 03:58am
Hi Marcus,
Aruba Instant doesn't include WIPS, but rather just basic rogue detection. There's a long list of missing features in fact. Your assessment of this architecture being feature-lite is spot-on. The reason for this is simple: their AP platform doesn't have the juice.
They haven't said anything about Airwave on Demand (public cloud), but rather just used the word 'cloud', which means that they are leveraging the terminology for marketing purposes only. It's private cloud, meaning Airwave in your data center.
Some vendors will make their controller into a policy server in order to preserve the revenue stream. Others will make it into an application gateway. Some will do other things. The bottom line is that they're hooked on the controller-side (~40%) of the Wi-Fi revenue stream, and they are unwilling to give it up. That will mean figuring out new ways to leverage the controller (meaning: morph it into something else) while migrating to a controller-less architecture.
I'm curious...
Suppose you have a "unified edge." Do you see iPad and MacBook Air users disconnecting from the Wi-Fi and jacking into Ethernet, hoping to get the same security policy? Do you see PoE Ethernet VoIP phones cutting the cord and running down the hall in hopes that they have access to the same level of QoS they had on the wire?
Thanks!
Devin Akin
Chief Wi-Fi Architect
Aerohive Networks
http://blog.aerohive.com/blog/index.php/2011/03/15/the-17th-ap/

Says:
03/15/2011 at 13:04pm
Mary takes her iPad to the office, associates to the WLAN, enters her corporate user ID & password, and self-provisions her iPad, "without compromising security", as stated in the video. Now her device has access to the WLAN. Yet the corporation has no control over the iPad. Is it locked with a PIN? Does it lock itself after 5 min inactivity? Since it can access corporate resources, what about DLP? Can the device be wiped remotely?
Probably not... And yet Aruba highlights this as secure... I say this is very misleading and does insult my intelligence!

<< prev - comments page 1 of 1 - next >>

Leave a Reply

Please login or sign-up to add your comment.
Success Stories

I literally just came out of the testing centre having taken the CWDP exam. The certification process opened my mind to different techniques and solutions. This knowledge can only broaden your perspective. Great job, CWNP, you have a great thing going on here.

-Darren
Read More

Working through the CWNP coursework and certifications helped not only to deepen my technical knowledge and understanding, but also it boosted my confidence. The hard work it took to earn my CWNE has been rewarding in so many ways.

-Ben
Read More

I want to commend you and all at CWNP for having a great organization. You really 'raise the bar' on knowing Wi-Fi well. I have learned a ton of information that is helping my job experience and personal career goals, because of my CWAP/CWDP/CWSP studies. Kudos to all at CWNP.

-Glenn
Read More