Policy Enforcement Firewall

Policy Enforcement Firewall (PEF) is a module available in ArubaOS and InstantOS. As the underlying technology for Dynamic Segmentation, PEF provides user firewalls and application visibility to enforce policies across the wired and wireless network.

Learn more about ArubaOS


Network security specially designed for IoT and mobility.

PEF establishes a user firewall that provides role-based access control over all IoT and client traffic across the network. This eliminates the cost and complexity in manually configuring VLANs, ACLs, and subnets at every hop in the network.
Download the Tech Brief

Intelligent application visibility and control.

With rich deep packet inspection, PEF provides application visibility to classify over 3,000 applications. It features a policy wizard to block, prioritize and limit bandwidth for any app or group of apps.


Block, prioritize and rate-limit traffic.

Segment the network at Layer 7.


Flexibility to segment any type of traffic flow.

With policy enforcement based on user role, devices, applications, and location, you can enhance end-user and network experience for different groups of users over wired or wireless networks. Traffic flows simply adapt to real-time network changes.

Ready to learn more?

Contact Sales