Aruba ClearPass Reviews

We are a gold partner of Aruba. We have deployed it in different educational institutions. It is mainly being used by the students. They onboard their mobile devices on ClearPass so that they can use them securely, and the IT team can have more visibility on the product. This is the main use case for ClearPass.

The visibility and security features are most valuable. We get a clear view. It is a very secure product for educational institutions. 

It is very user-friendly. It is easy to configure and use. The dashboard is very intuitive, and it can give you a very clear view. You can see all the students and all the onboarded devices on the dashboard.

The improvement can be in the cloud area. They can improve it for the cloud so that we can deploy it on the cloud.

In terms of new features, I don't have anything in mind, but Aruba is always working on new features. They are doing releases every quarter or six months.

We have been working with Aruba products since 2004. We are one of the oldest partners of Aruba in the Middle East. We've been working with ClearPass for 10 years.

It is very stable. 

It is highly scalable. You can start with a couple of users, and you can scale up to 10,000. We have a deployment of 25,000 users in one of the biggest universities in Lebanon.

They are really fast and highly knowledgeable.

It is really easy to set up. It is very user-friendly and easy to configure.

It doesn't take a lot of time to deploy and configure ClearPass. It takes about a week or a maximum of 10 days for the whole deployment.

It is affordable. In Lebanon, companies are small, and they do not have a big budget. They cannot invest a lot of money, and Aruba ClearPass is quite affordable for them.

ClearPass is one of the best solutions we have ever worked with. It is very stable and secure, and it has a lot of features that an institution can benefit from.

I would easily rate it a nine out of 10.

ClearPass provides authentication solutions for endpoints. 

ClearPass is effortless to use and configure. It's not hard to learn the tool, and it has lots of features.

ClearPass' interface could be more user-friendly. 

I've used ClearPass for more than four years.

ClearPass is stable. In my opinion, it's the best solution of its kind.

ClearPass is highly scalable.

ClearPass support is fine because we have a good relationship with the vendor, so we can call them whenever we have questions. 

Deploying ClearPass is very straightforward. We are an Aruba integrator, and we've installed ClearPass for more than 10 clients. You can deploy it with two or three engineers, and the time needed for deployment depends on the client. Installing ClearPass for a larger client will take about one week, but a smaller client takes only about three days. 

We pay a yearly subscription.

I rate Aruba ClearPass eight out of 10. 

If for example, a user in my office received a particular VLAN for the USA and relocated to the UK, they will not get the same access. This is the challenge that we are trying to achieve through the CPPM. 

Document authentications allows us to decide which users can connect to an office VLAN and this has been the most valuable feature. It is dependent upon the policies that we have created on CPPM. If a domain laptop needs a Windows update, the device is updated. 

This solution could be improved by making it possible to use it across different territories. Currently, if a user moves from the US to the UK, their usage and access will be restricted. 

I have been using this solution for one year. 

This is a stable solution.

This is a scalable solution. 

The initial setup is straightforward. 

The suitability of this solution is dependent upon the requirements of the business. You need to consider if you want authentications for every network devices like switch, routers, firewalls and wireless. This can depend on the type of projects you are running. 

We needed the enterprise authentication because we needed the wifi dot certification. Using this, we can access network devices and policies. 

I would rate this solution a seven out of ten because the Aruba dashboard is quite simple compared to other solutions.

We use this solution mainly for NAC, network access control.

It's security control after all so just like you have an EDR installed, we double verify whether a machine is compliant with our policy on the one hand, and on the other hand, if it's also one of our machines so that we can let it into the network. It's security control.

The most valuable feature for us is the policy compliance. They have an API that assists you in checking whether a machine has specific clients. For example, we check whether the EDR is updated and whether there are specific clients whose machine should be allowed to connect to the network.

The user interface should be improved. The logs and how the logging mechanism works can also use an upgrade. It should also have better reporting, we were trying to do the reports and didn't manage to do them because technically we couldn't. 

Better documentation on the API would be useful as well.

The solution is stable.

The scalability is good. We didn't have any problems there. We deployed it in 12 hours worldwide, so it's pretty scalable. There are about 2,500 users currently, in total.

In terms of increasing our user base, we increase the license whenever we acquire a company so it depends on whether we're growing organically or not organically. It's in the pipeline, so once we buy a company they go through us, pick a stage, and we implement all the security enforcement for that company. So as long as we buy companies, we implement this as well.

Most of the problems we had were solved by the integrator. The technical support is medium to good.

The initial setup was complex. The deployment was fast, but in order to tune the policy, install the agent, and do everything else, I would say it took around 4 to 6 months.

We used an integrator. They were very good. Most of the shortcomings were technology based, not implementation based.

My advice is to get a good integrator.

I would rate this solution as an eight and a half out of ten.

We use this solution for controlling the security of our wireless network.

Aruba ClearPass has improved the security control in our network environment.

The most valuable feature for our network environment is the identification of discovered devices. 

Configuration should be more easy to understand between the link of two topics.

OnBoard, OnGuard, SSO and IntroSpect UEBA, including Palo Alto integration. These are valuable from engineer to C-level executives, who want visibility, performance, statistics, and a platform which can take action for them without manual intervention, saving time and money.

Gives us network access control, visibility, scalability, security, and control in what is becoming an uncontrollable, inundated BYOD and IoT world.

Aruba is always finding better, innovative ways to make their products easier and more friendly. It is always being improved, but what I would like to see is “AAS”. Not only Aruba APs with central, but NAC/ClearPass, AirWave, and everything licensed as a Service. This way, like AWS, they can spin up what they need when they need it and vice versa.

None.

None.

Awesome tech support when needed. Each customer is given a customer number and TAC will follow through until all issues are resolved, whether it be a flaw in the product or a customer misconfiguration.

I did not personally use a previous solution.

Initial setup is straightforward. It is recommended to read the manual before implementation.

I provide straight answers. Licensing and pricing are extremely straightforward.

Run a 90 day free Proof of Concept (PoC) for each product by implementing and using it fully in your environment. This way you will be educated on its features, functionality, and manageability.

No.

I mostly use ClearPass for network separation.

I would like to see better integration with the firewall for zeroing out blacklisted users.

I've been using Aruba solutions for almost 20 years.

When working with a virtual solution, it's always the same image when you do the initial installation, but you need to have a picture of the scale you want to achieve. 

For example, let's say you are switching from a medium-sized solution to a larger-scale solution. Suppose you overestimate and wind up with too many endpoints. In that case, you'll need to reinstall the solution because it reserves resources of your virtual infrastructure, depending on the type of installation that you do. 

Say, for instance, I want my next solution to service 5,000 endpoints, and in the end, you have 12,000. That means you needed the bigger version. The license is the same, but the installation reserves the resources of the virtual infrastructure.

We handle all our support in-house. Our engineers have the highest certifications.

Generally speaking, setting up a network access control solution is complex. You have to integrate the use cases.

I rate Aruba ClearPass eight out of 10. It's a great solution with multi-vendor support. That's always useful. My advice is to take advantage of Aruba's identification solution called ClearPass Insight in addition to the network access control.

I use this solution when I need deep authentication regarding security issues, passwords and so on. ClearPass is also available on the Captive Portal. We're also finding that customers with many IOT devices are interested in the product. We are customers of Cisco and deploy this solution for our customers. 

ClearPass works, it's quite stable and the solution is NAC and will stay that way. The QBT technology is very good.  

There is an issue on the technical side with ClearPass. Many devices work with SSL certificates but Aruba ClearPass only has the ability to handle one certificate for both the management process and also for the Captive Portal. I would like Aruba to permit the use of different certificates for the Captive Portal and for the management interfaces.

The solution is stable. 

There is scalability but it's linked to the licensing model and is quite inferior to other solutions like Cisco ISE or Macmon.

When we sell this solution to our customers it's always with a really, really high SLA. The support engineers at Aruba are knowledgeable and they provide good support.

If you know what you're doing, deployment doesn't take much time. It requires first deploying a V-LAN schema so you have to keep that in mind. 

I would recommend this solution and rate it nine out of 10.