Aruba ClearPass Reviews

The primary use case of ClearPass is for network access control, wireless access and policy enforcement. We use it for authentication, verification and authorization, and then patch it to our users. We are system integrators. 

The advantage of Aruba is that it is open to any operating system or mobile app. The compatibility of Aruba ClearPass is a key valuable feature and makes it a stronger product than Cisco ISE in this area.

The cost of Aruba is very, very high. It's the biggest challenge we have with this product. It would be helpful if Aruba would integrate the SDN controller into the solution. Cisco is moving towards that in order to create one platform. 

We've been using this solution for 10 years. 

Scalability depends on the design policy. One device has a scalability provision of 20,000 but you might only use 5,000 licenses initially so it really depends on your needs.

The technical support is excellent. 

The initial setup is easy and there is no need to install anything whether you buy the virtual platform or the appliance. It's all very open and clear and a matter of configuring for policy enforcement. 

There are licensing options but this is a very expensive product. 

Forescout and ClearPass are both trying to build their system as an open platform for everyone which is why their reachability is very high. If you're using ClearPass or Forescout, you can use any open switches on the market. Cisco has a limited category that it has developed for its own products and infrastructure. If you use different switches and different Wi-Fi, it doesn't provide the pure solution inside. 

I rate this solution 10 out of 10. 

I mainly use ClearPass to issue and authenticate certificates.

ClearPass has simplified our security as an automatic email is now sent to concerned users when something goes down. For example, if your AP or controller is down, a log is immediately generated stating what's happened, and we can use that to work with local engineers or OEM to resolve it. This reduces the impact on business and has simplified around 70% of our work.

ClearPass' best features are authentication, support for multiple devices, and monitoring.

ClearPass' GUI could be more user-friendly.

I've been using Aruba ClearPass for almost three years.

ClearPass is stable - we haven't had any issues since deployment.

ClearPass' scalability is up to the mark.

The initial setup was a bit complex and took a couple of days.

I implemented ClearPass myself.

I would rate ClearPass nine out of ten.

I have a few customers that are using Aruba ClearPass.

The most valuable feature of Aruba ClearPass is the ease of deployment and integration with other equipment in the network.

Aruba ClearPass could improve the complexity of the initial usage. It takes some time to be good at it. It's not simple to build and connect the rules to the network you want to deploy them on.

In a feature release of Aruba ClearPass, they should add a more graphical way to deploy the rules.

I have been using Aruba ClearPass for approximately two years.

Aruba ClearPass is stable.

I rate the stability of Aruba ClearPass a nine out of ten.

The scalability of Aruba ClearPass could improve. It is easy to make room but some aspects are difficult.

We have approximately 2,000 to 3,000 users that use Aruba ClearPass.

The response time and the knowledge of the support could improve from Aruba ClearPass.

I rate the support from Aruba ClearPass a three out of five.

Neutral

The initial setup of Aruba ClearPass is straightforward. When you need to activate the rules it becomes difficult.

We have one person that is needed to use to support Aruba ClearPass.

The price of Aruba ClearPass is expensive. However, Cisco ISE was as expensive when we were comparing.

We compared Cisco ISE before choosing Aruba ClearPass. Aruba ClearPass is better to use, especially if you have a mixed environment from different deployers or different hardware, it scales better.

I rate Aruba ClearPass a seven out of ten.

Our clients use Aruba ClearPass for identity authentication on their local area network and their Wi-Fi. For one of our clients, we're using the OnGuard function for health checks, and we're also using the Guest Captive portal.

The most valuable thing about Aruba ClearPass is ease of use for security policies, as it has a much better granular configuration on policies for security. It also allows us to do certain functions which we would not be able to do without Aruba ClearPass, particularly with mobile devices and security. The platform has helped us in a lot of ways where there are aspects that we are limited to, and can't be done in our environment without the server.

The only area that really needs improvement in Aruba ClearPass is the onboarding for doing TLS authentication. The biggest problem we've seen in our environment is Huawei not being able to get onto Google Play. No Huawei device can be onboarded via Aruba ClearPass easily.

An additional feature we'd like to see in the next release of Aruba ClearPass is for its OnGuard function, its health check function. We'd like it to have the functionality for installing or copying files that are required for remediation on health checks. For example: if you're using Aruba ClearPass and you do a health check, if the client is missing a file or a particular product such as an antivirus product, we would like the opportunity to have the files copied or installed in the platform, because currently there are some limitations when you want to do remediation.

If the client is missing a file and you want them to install a specific application, we have to provide an HTTP download so they can download the file for the remediation to work. What I would like to see is a bigger storage area in Aruba ClearPass so we can upload those files in the platform, rather than having those files in an external server for downloading, because we've had huge problems with doing remediation to locations that require an HTTP download.

What we'd like is having the ability to put the applications on Aruba ClearPass directly, to make the remediation steps for clients when they're missing software, to get those directly from the platform, because currently, you can't put a big file onto Aruba ClearPass as there are size limitations.

I've been using Aruba ClearPass continuously within the last 12 months.

Aruba ClearPass has always been very reliable. I've always been well-impressed with it as it's a very stable product. The only problems I've experienced with it was because of people doing something else and causing Aruba ClearPass to malfunction. For example: people deleted authentication sources out of the platform without letting us know that they've deleted those authentication sources, creating problems on Aruba ClearPass because they changed the configuration.

I've been working directly with Aruba ClearPass and I've not had any problems with it, it usually works properly. If no one changes anything, it works.

Technical support from Aruba has always been fantastic, especially the support for Aruba ClearPass. I usually get responses from their technical team very quickly, especially for any T1 call. I've never experienced a problem with the technical support for Aruba ClearPass. They've always been exceptional.

Setting up Aruba ClearPass is complex. It's a complex installation.

I work with Aruba ClearPass and Aruba Wi-Fi, and we do have clients who use Aruba ClearPass with their Cisco equipment. I'm an ACPP professional on Aruba ClearPass, so I work with a few clients who use the platform.

I've been working with version 6.9.9 of the platform.

I'm scoring Aruba ClearPass a ten out of ten. If I can score it higher than ten, twelve for example, I would, because it's that good. It's an unbelievable system and it unlocks a lot of limitations on Wi-Fi and LAN, in terms of security.

Aruba ClearPass is used for enforcing certain security policies all around the organization, it covers certain security policies, which is in turn, is deducted from the business requirements. You start with a security policy, then you need technology to enforce it, this is where Aruba ClearPass is used.

A lot of the issues in Forescout are mitigated in Aruba ClearPass, it supports all the expected protocols.

Aruba ClearPass has fewer deployment scenarios and flexibility than Forescout.

I have been using Aruba ClearPass for five years.

Aruba ClearPass is reliable.

I have found Aruba ClearPass to be scalable.

I have approximately two clients with 400 users each, giving a total of 800 users using the solution.

Aruba ClearPass has a very good technical support team. Whenever we need the vendor to be involved, we find a good deal of technical support.

I have used Forescout and I would rate Aruba ClearPass second best.

The initial installation is simple. The deployment could be better since it has fewer capabilities than other solutions, it could be more flexible.

We have a dedicated engineer for Aruba ClearPass when it comes to deploying and support of the solution. One engineer is enough for my client's environment.

The licensing model is very straightforward. There are two types of licensing for Aruba ClearPass, a perpetual license, and a subscription. Both of them are straightforward. We don't need to read an ordering guide, it's very clear.

I would recommend this solution to others if they have a certain use case. If there is a lot of Cisco environments that need to be implied under the security policy, then ClearPass is the right solution for them. It supports a wide range of Cisco technologies and Cisco protocols.

I rate Aruba ClearPass an eight out of ten.

We mainly use it for 802.1X authentication.

Our customers like its ability to authenticate using not just certificates but also MAC addresses is very helpful in mitigating unauthenticated access on networks and switches.

There is room for improvement in terms of scalability. 

I have experience with Aruba ClearPass for five to six years.

I would rate the stability a nine out of ten.

I would rate the scalability an eight out of ten. Our customers are mostly medium-sized businesses.

I have some years of experience with FortiGate, Fortinet Firewalls, and Fortinet switches. Mostly with FortiSwitch models 6450, 548, and 124F.

I didn't set it up myself. I'm involved in operating the system.

Overall, I would rate the solution an eight out of ten.

I use this solution for securing company-wide logs.

I'm using the latest version. It's deployed on the public cloud. Microsoft Azure is the cloud provider.

Everyone in our organization uses this solution. It's about 300 people. There are four people who specifically operate the solution, do daily checks, check for errors, and help users who are having trouble with their login sessions.

I like that it's usable in both an on-premise and hybrid and cloud native environment. I like the integration options with a multitude of other vendors and Aruba applications.

The user interface could be more polished and modern. It would be useful to have more options for automation.

I would like to have more collaboration between different security platforms. For instance, the Fortinet portfolio, which we also use extensively.

I have used this solution for about one year.

It's very stable. We did have some issues with under provisioning the underlying resources, so that needs to be taken into account. If you do, then it is very stable.

The scalability is very high. You just need to add extra nodes. I would rate the scalability as eight out of ten.

Technical support is only approached by our third party network service provider.

Deployment took one day.

Implementation was done through a third party. We outsourced the deployment to our network vendor.

Maintenance is also outsourced. For the application itself, maintenance takes about four hours a month. For the actual usage of the applications on a day-to-day basis, we do that ourselves.

Compared to the functionality, the pricing is very favorable. It's affordable and provides good value for the money.

I would rate the pricing as three out of ten.

We evaluated other on-premises solutions, but they aren't very comparable to Aruba.

I would rate this solution as nine out of ten.

I would recommend Aruba ClearPass to others.

If for example, a user in my office received a particular VLAN for the USA and relocated to the UK, they will not get the same access. This is the challenge that we are trying to achieve through the CPPM. 

Document authentications allows us to decide which users can connect to an office VLAN and this has been the most valuable feature. It is dependent upon the policies that we have created on CPPM. If a domain laptop needs a Windows update, the device is updated. 

This solution could be improved by making it possible to use it across different territories. Currently, if a user moves from the US to the UK, their usage and access will be restricted. 

I have been using this solution for one year. 

This is a stable solution.

This is a scalable solution. 

The initial setup is straightforward. 

The suitability of this solution is dependent upon the requirements of the business. You need to consider if you want authentications for every network devices like switch, routers, firewalls and wireless. This can depend on the type of projects you are running. 

We needed the enterprise authentication because we needed the wifi dot certification. Using this, we can access network devices and policies. 

I would rate this solution a seven out of ten because the Aruba dashboard is quite simple compared to other solutions.