ArubaOS
Enabling a Unified Access Architecture for any user regardless of physical location, whether wired or wireless, to securely access the enterprise network with an always-on, consistent experience.
Aruba's solution portfolio includes campus, branch/teleworker, and remote/mobile solutions that simplify operations and secure access to all corporate applications and services - regardless of the user's device, location or network to deliver unprecedented workforce agility.
Powering the Aruba solution is ArubaOS®, which serves as the operating system and application engine for all Aruba Mobility Controllers and access devices. The software architecture of ArubaOS is designed for scalable performance, and is built using three core components. First, a hardened, multi-core, multi-threaded supervisory kernel manages administration, authentication, logging, and other system operation functions. Second, an embedded real-time operating system powers dedicated packet processing hardware, implementing all routing, switching, and firewall functions. Third, a programmable encryption/decryption engine built on dedicated hardware delivers security without sacrificing speed.
ArubaOS is offered as a base set of capabilities, with an additional series of optional software modules enabled through license keys. Optional modules include Policy Enforcement Firewall, Spectrum Analyzer, Wireless Intrusion Prevention, and xSec Advanced Layer 2 Encryption.
To extend the base capabilities of ArubaOS, a number of licensed software modules unlock additional functionality, including:
Virtual Branch Networking
Aruba's Virtual Branch Networking (VBN) solutions provide a simple, secure, and cost-effective way to extend the corporate network to branch offices, clinics, SOHOs, stores and telecommuters. Whether supporting branch offices of one or one hundred users, Aruba's VBN solution delivers full-service networking without compromises. As the head-end component of the VBN solution, datacenter-based Aruba Mobility Controllers handle all complex configuration, management, software updates, authentication, intrusion detection, and remote site termination tasks. Branch office network services are virtualized in the data center controllers and then extended over any public or private IP network to affordable Remote Access Points (RAPs) that provide secure connectivity and services to end users.
Learn More »
Adaptive Radio Management
Aruba's Adaptive Radio Management (ARM) software uses patent-pending infrastructure-based controls to deliver more reliable, higher performance wireless networking. Acting on their own, Wi-Fi clients do not always work together cooperatively, or select the optimal band, channel, and access point. ARM solves these problems by using infrastructure-based controls that leverage information from Aruba's centrally-managed WLAN infrastructure to optimize client behavior.
Learn More »
Spectrum Analyzer
Enabled in ArubaOS, the Aruba Spectrum Analyzer module provides a critical layer of visibility into non-802.11 sources of RF interference and their effects on 802.11 WLAN channel quality. Using Aruba 802.11n APs to scan the 2.4-GHz and 5-GHz radio bands, the Aruba spectrum analyzer remotely identifies RF interference, classifies its source and offers real-time analysis at the point of the problem.
Data collected by the Aruba spectrum analyzer is used to quickly isolate packet transmission problems, over-the-air quality of service (QoS) and traffic congestion caused by RF contention with other devices operating in the same band or channel. Appropriate remediation measures can then be put in place to optimize network performance.
Learn More »
Wireless Intrusion Protection
Aruba's Wireless Intrusion Protection (WIP) module protects the network against wireless threats to network security by incorporating wireless intrusion protection into the network infrastructure and eliminating the need for a separate system of RF sensors and security appliances. The WIP module provides unmatched wireless network visibility to administrators, and thwarts malicious wireless attacks, impersonations, and unauthorized intrusions.
Download Datasheet »
Policy Enforcement Firewall
Aruba's Policy Enforcement Firewall (PEF) module for ArubaOS provides identity-based controls to enforce application-layer security, prioritization, traffic forwarding, and network performance policies for wired and wireless networks. Using PEF, organizations can enforce network access policies that specify who may access the network, which areas of the network they may access, and the performance thresholds of various applications. Administrators can build a unified, integrated system for network policy enforcement by leveraging PEF's open interfaces to external services such as content security appliances, NAC policy engines, performance monitors, and authentication/authorization servers.
Download Datasheet »
xSec
xSec is a highly secure data link layer (Layer 2) protocol that provides a unified framework for securing all wired and wireless connections using strong encryption and authentication. xSec provides a Federal Information Processing Standard (FIPS)- compliant mechanism to provide identity-based security to government agencies and commercial entities that need to transmit extremely sensitive information over wireless networks. xSec provides greater security than other Layer 2 encryption technologies through the use of longer keys, FIPS-validated encryption algorithms (AES-CBC-256 with HMAC-SHA1), and the encryption of Layer 2 header information including MAC addresses. xSec was jointly developed by Aruba Networks and Funk Software, a division of Juniper Networks.
Download Datasheet »
