The only area that really needs improvement in Aruba ClearPass is the onboarding for doing TLS authentication. The biggest problem we've seen in our environment is Huawei not being able to get onto Google Play. No Huawei device can be onboarded via Aruba ClearPass easily.

An additional feature we'd like to see in the next release of Aruba ClearPass is for its OnGuard function, its health check function. We'd like it to have the functionality for installing or copying files that are required for remediation on health checks. For example: if you're using Aruba ClearPass and you do a health check, if the client is missing a file or a particular product such as an antivirus product, we would like the opportunity to have the files copied or installed in the platform, because currently there are some limitations when you want to do remediation.

If the client is missing a file and you want them to install a specific application, we have to provide an HTTP download so they can download the file for the remediation to work. What I would like to see is a bigger storage area in Aruba ClearPass so we can upload those files in the platform, rather than having those files in an external server for downloading, because we've had huge problems with doing remediation to locations that require an HTTP download.

What we'd like is having the ability to put the applications on Aruba ClearPass directly, to make the remediation steps for clients when they're missing software, to get those directly from the platform, because currently, you can't put a big file onto Aruba ClearPass as there are size limitations.

Because some users use OS 10, it would be good if the solution could group its functions better. Also, the processing time taken while onboarding needs to be reduced.

One area for improvement would be the possibility of using social media providers for user authentication. In Brazil, we have a government-sponsored service that indicates users who would like to see this feature supported. I have made a formal request for this feature, but I am unsure if it will be considered for the next release. However, it would be a valuable addition for us.

The solution should be more precise for VMs and allow for management of the entire system or stack. For example, the solution shows device-only information for Cisco AIs.

It would be good if ClearPass made it a SaaS solution. The only difficulty is that it's a security solution, and if you put a security solution on a SaaS, there could be certain challenges. That may be why ClearPass hasn't done it.

The setup of ClearPass can be a bit convoluted at times. It needs to be simplified a bit more. 

It is a very expensive product.

After HP, their support is the worst.

When you come into the production part, you want to know how easily you can do the updates or how you can easily you can do the patching. Once it comes to the support, if it is in the middle of the day when you are having some issues, and you don't get it, that's where you start thinking this is not the right product. For me, I mean, overall, it's not the pre-sales experience that needs improvement. It's post-sales. I know Aruba is one of the two products that I always like; however, it's the whole life cycle of the product that makes something good. For example, Cisco is not a good product. No one can beat their support. Aruba is a good product, yet if you need technical assistance, it's not good at all. 

A specific component is part of the solution called ClearPass Onboard, which can sometimes be complex and challenging to set up. If they could simplify the process and make it easier, that would be a benefit.

In an upcoming release, they need to include support for Android devices. Android devices are not fully supported at this time.

ClearPass is not something that I have to get into every day, as I do with Aruba Wireless Solution or Central. The only time I really need to get into ClearPass is to troubleshoot, handle authentication problems, or add a device for SNMP access. I can't think of an area where the solution is lacking a feature or a capability. It's fine right now. 

The support offered for the solution has certain concerns, making it an area where improvements are required. Regarding the solution, the integration issues are hardly a problem. It is important to have a good support partner who knows about the solution so that the product's users don't face any integration-related issues. My company's main problem was related to the tool's support.

The pricing policy could be more flexible. Additionally, ClearPass can be integrated with the Aruba cloud solution because many companies are moving to the cloud.

The scalability could improve.

An issue with Aruba ClearPass is the lack of information and poor community support. You can't find the material easily on the internet for any issues. For example, if you're looking for any configuration or exploring any issue, it's not easy to find information, and this is the problem with Aruba ClearPass. Access to helpful information and poor community support could be improved.

Another area for improvement in Aruba ClearPass is that some of its advanced features aren't easy to find. For example, my team needed to apply Google single sign-on, but it wasn't easy to find. Aruba ClearPass is a big solution with a lot of capabilities, and it's a very advanced solution, so you need to either have some experience with it or undergo some training. Aruba ClearPass is a very good solution from the network perspective, but the issue is the poor support you get from the community. When you try using the solution, some areas aren't easy. When you search on YouTube, you'll find very few materials about Aruba ClearPass. It isn't like Cisco where you can find information from hundreds of websites, on YouTube, etc. This is bad for Aruba, so this area should be improved.

Aruba has a training center, but the usual training offered is only for Aruba Wireless and Aruba Switches. If you have another solution, it's not easy to integrate it with Aruba ClearPass, so this is an area for improvement. You need to do some research to successfully integrate your solution with Aruba ClearPass. We integrated Aruba ClearPass with Ubiquiti WiFi, and it's working fine with no issues. My next project is to start integrating Aruba ClearPass with Cisco Switches.

The solution is good, but on the website, there's no book and no video, and you can't find the material on Aruba ClearPass easily. This is one of the issues with Aruba.

ClearPass' GUI could be more user-friendly.

The initial setup phase of the solution was really very difficult, owing to which the setup phase can be considered as an area that can be improved.

They should include features like Radius CoA for IoT and similar devices for the solution. Also, it would be great if they had SMP functionalities as well.

I would like the area of managing wired technology to be improved. Wireless is very good but I'm still struggling a bit to do my end to end configurations in the wired technology area.

The Virtual Machine for the Clearpass sometimes has issues with loosing the management IP

It should be clearer in the pre-sales stage that clear, documented, executive-supported InfoSec policy is the key to success.

Regarding the improvement needed in the solution, I remember our technical team stating that the installation front of the solution was a bit difficult when compared to other solutions. So, some of the other solutions, when compared to Aruba ClearPass, are more user-friendly to install.

The user interface could be more polished and modern. It would be useful to have more options for automation.

I would like to have more collaboration between different security platforms. For instance, the Fortinet portfolio, which we also use extensively.

One thing that could be improved in Aruba ClearPass is that we would like to have an option to recognize all the assets on the customer's site in one click. That is an easy way of recognizing all the assets on a customer site. We would like an easier way of recognizing the assets of the network so we could know in which VLAN we want to configure the port or the suite and which policies apply to that port. We'd like ClearPass do that automatically.

There is room for improvement in terms of scalability. 

The cost of Aruba is very, very high. It's the biggest challenge we have with this product. It would be helpful if Aruba would integrate the SDN controller into the solution. Cisco is moving towards that in order to create one platform. 

What needs improvement in Aruba ClearPass is just the endpoint context server, in particular, the indication with the context server because sometimes the daily process isn't as smooth-sailing. Sometimes, the information isn't up-to-date. I'm not sure if that's a vendor limitation, but currently, it's the only tricky part of the current configuration.

What I'd like to see in the next release of Aruba ClearPass is a dashboard or a monitoring feature that would allow users to see the integration process with an external server because there's no visibility into that right now.

This solution could be improved by making it possible to use it across different territories. Currently, if a user moves from the US to the UK, their usage and access will be restricted. 

Aruba ClearPass could improve when it comes to troubleshooting, it can be difficult. Some advanced problems are difficult. 

The documentation could improve.

Aruba ClearPass has fewer deployment scenarios and flexibility than Forescout.

Ability to drill down on items like “System CPU Utilization” or “Device Family” stats from the dashboard. As of right now you need to pick up to 5 items listed on the Dashboard but they seem to be static.

The interface is a little confusing as is setting up some of the options but this is partially due to the flexibility of the product. There are wizards available to create policy which is helpful. We’re primarily using it for RADIUS based AAA for 802.1x Wireless.

Aruba ClearPass could improve the complexity of the initial usage. It takes some time to be good at it. It's not simple to build and connect the rules to the network you want to deploy them on.

In a feature release of Aruba ClearPass, they should add a more graphical way to deploy the rules.

The user interface of Aruba ClearPass should be user-friendly like Fortinet FortiNAC.

In the next version, I would like to see some enhancement or extension on the tracking side. For example, when any user enters the network, it should be more visible in the graphical form.

The solution needs to upgrade its user interface. Right now, it's not so user friendly, and it's an aspect that my clients' wish was improved upon.

The solution is quite large and complex in scope. If a person isn't familiar with the solution, they can quickly get overwhelmed with everything.

• I'd like to see greater ability to customize backups – locations, transfer protocols (SCP/SFTP, etc).
• Small tweaks like scroll bar distances within large Enforcement Policies. More customization for SNMP traps (types), a well as published MIB files so that we can utilize our network monitoring environment more heavily with polling specific aspects of CPPM.
• Hardware requirements for VM templates we use (CP-VA-5K) are, quite frankly, absurd (very high disk storage requirements).

Possibly some of the functions could be improved, but it's hard to say. Generally, Clearpass is considered the leader in its field and it's a very good product. 

In the future, I would like to see plugins for AI and machine learning. If it did pattern analysis then it could help to determine our requirements automatically.

Helping streamline the setup and more in-depth tutorials would be helpful. The product is very complex and therefore the more info and tools that are available the better.

It was a complex solution to set up because of its newness. We needed a third-party implementor to help us.

Every deployment of ClearPass I have run into a bug or a feature that is not as user friendly as it could be. This can be easily improved upon by providing documentation and guides of proper syntax inputs. I have gotten around these issues by purely trial and error.

The platform's API integration could be better. Additionally, its pricing could be affordable.

The monitoring of Aruba ClearPass needs improvement. For example, they have monitoring for TECHx and you can find out what the administrator did. However,   if Aruba ClearPass is managing GUI devices, you do not know what the administrator is doing.

Aruba needs to improve and the processes must be clear. I also believe the marketing is very important, as well as to split the database to be more specific, like having a user name, access point name or site name. 

Configuration should be more easy to understand between the link of two topics.

Aruba is always finding better, innovative ways to make their products easier and more friendly. It is always being improved, but what I would like to see is “AAS”. Not only Aruba APs with central, but NAC/ClearPass, AirWave, and everything licensed as a Service. This way, like AWS, they can spin up what they need when they need it and vice versa.

It would be useful if a free trial was available for customers to see if ClearPass is suitable for them before purchasing.

Aruba ClearPass could improve the user interface, it is a bit chunky.

ClearPass' interface could be more user-friendly. 

The product's graphical user interface (GUI) could use an update and better integration between the guest management and policy management interfaces.

I'd also like to make sure there is support for Juniper switches.

There is room for improvement in the support. 

There is an issue on the technical side with ClearPass. Many devices work with SSL certificates but Aruba ClearPass only has the ability to handle one certificate for both the management process and also for the Captive Portal. I would like Aruba to permit the use of different certificates for the Captive Portal and for the management interfaces.

The user interface should be improved. The logs and how the logging mechanism works can also use an upgrade. It should also have better reporting, we were trying to do the reports and didn't manage to do them because technically we couldn't. 

Better documentation on the API would be useful as well.

ClearPass Insight needs to be worked on. The functionality is not quite there yet.

Also, add-on licenses are expensive.

The GUI of Aruba ClearPass could improve, it is not user-friendly.

In a feature release, asset tracking could be easier.

The main issue I have seen with Aruba ClearPass is specific integration with Juniper firewalls, and this is definitely something I would like to see in the future.

If the UI is simplified and improved, bugs are minimized, and the support becomes more responsive, it would be perfect.

Access Tracker section and ClearPass Insight have rooms of improvements.

For Access Tracker: it would be great if Aruba added more information in the Access Tracker section, such as an endpoint’s IP address, device category, name/description of network device, and SHL name, if any.

For ClearPass Insight: it currently has low limits and a lot of use cases couldn’t be applied by the customer which required customization by the Aruba TAC. This is the thing that consumes the most time and could lead to performance issues for ClearPass Insight.

Aruba ClearPass has a complex pricing scheme, so that's an area for improvement.

The process for setting up Aruba ClearPass also needs improvement. It could be easier.

The improvement can be in the cloud area. They can improve it for the cloud so that we can deploy it on the cloud.

In terms of new features, I don't have anything in mind, but Aruba is always working on new features. They are doing releases every quarter or six months.

• The AirWave Dashboard heat maps could be better designed. 
• Instructions on adding layouts are not as clear as they could be.

They need to improve the wizard to make things easier to manage. When we had the access point, I was not sure how to get it to work with Aruba. I tried to follow the guide from Aruba support and the internet, but found it very limited even though I went through one of the two-day technical presentations. The wizard needs to show what you need to configure and what needs to be in there in terms of users. In the end, I got support from one of the Aruba systems engineers to get it to work.

I'd like to see improvement with RADIUS and guest on-boarding. It also needs to be more intuitive to use with simplified administration.

The OnGuard agent requires some enhancements.

I would like to see better integration with the firewall for zeroing out blacklisted users.

Installation can be time-consuming, so Hire an Aruba consultant to do the install and save yourself a lot of time. There will be plenty of time for you to learn the product later. Plus, the consultant can pass on some valuable information during the process.

The interface could be made easier and more intuitive.

ClearPass Policy Manager has to be easier to configure. Now, it is very powerful but very complex when you want to set some “profile enforcement” only for some type of guests or a disconnection policy with Radius COA.

It could be more vendor independent.

The licensing model could be improved.

The update process is very intense and I believe Aruba should find a way to make this process smoother and easier to administer.

I would like for Aruba to make it easier to configure. They could integrate the different engines (Policy Manager, Guest, Onboard) into one single product.

How the licenses-in-use counting works in educational environments could be improved.

Also, appliance sizing could be improved, as the gaps from 500 to 5,000 and from 5,000 to 250,000 is too large. There should be 2,500 and 10,000 appliances as well.

Reporting module has room for improvement. It also need integration with SIEM solutions and Next Generation Firewalls.