OPSEC Partners

Aruba Networks

Product Version Certified: Aruba 800 and Aruba 52 AP (2.3.0.0 Build 9108 code) with Integrity 5.1

Product Description: Designed for branch office applications, the Aruba 800 mobility controller supports up to 16 APs and hundreds of simultaneous users. The Aruba 800 comes equipped with eight 10/100 Mbps Ethernet ports and one Gigabit Ethernet (GBIC) uplink. Integrated hardware-accelerated encryption provides high-speed performance enabling the Aruba 800 to deliver up to 200 Mbps of encrypted throughput.

Key Features and Benefits

OPSEC Integration

Company Description: Aruba Networks is a fast-growing, privately held networking company that manufactures mobility systems for enterprise networks. The company's products, which include mobility controllers, wired and wireless access points and mobility software, are positioned at the intersection of two of the world''s fastest growing technology markets -- wireless and security. Headquartered in Sunnyvale, California, Aruba operates in offices around the world with regional headquarters in Tokyo, Japan and London, England.

Key Features and Benefits

Aruba's mobility network systems let companies easily and securely integrate wireless into their networks, enabling user mobility across the entire enterprise. User access, security, performance, reliability and mobility services are all centrally controlled without disrupting the existing wired IP infrastructure. All changes, upgrades, services and optimization of the infrastructure are executed from a single point. This overlay architecture and centralized control radically reduces the operational expenses and capital costs associated with deploying and managing discrete appliances.

OPSEC Integration

Network devices that support the 802.1X specification (RFC 3580) can integrate with Check Point Integrity to analyze and act upon an endpoint's current security stature. Aruba mobility controllers communicate with Check Point Integrity to verify endpoint compliance with corporate security policy prior to enabling full access to the network. Non-compliant endpoints are automatically placed in a 'quarantine' VLAN where network access is limited to remediation tools. Once the endpoint has been brought into a compliant state, it can be moved to the 'compliant' network segment where it gains appropriate access to network resources. This process ensures insecure or compromised systems are shielded from the production network until they have been properly cleaned and protected.