{"id":15018,"date":"2021-08-17T08:56:38","date_gmt":"2021-08-17T08:56:38","guid":{"rendered":"https:\/\/web3unplugged.io\/blog\/?p=15018"},"modified":"2021-08-17T08:56:42","modified_gmt":"2021-08-17T08:56:42","slug":"new-advancements-to-aruba-esp-deliver-edge-to-cloud-security-to-enterprises","status":"publish","type":"post","link":"https:\/\/web3unplugged.io\/blog\/new-advancements-to-aruba-esp-deliver-edge-to-cloud-security-to-enterprises\/","title":{"rendered":"New Advancements To Aruba ESP Deliver Edge-To-Cloud Security To Enterprises"},"content":{"rendered":"\n

Aruba, a Hewlett Packard Enterprise company (NYSE: HPE), today announced an expansive set of cross-portfolio edge-to-cloud security integrations for Aruba ESP (Edge Services Platform)<\/a>. The new advancements include the integration of the ClearPass Policy Manager secure network access control platform with the Aruba EdgeConnect SD-WAN edge platform<\/a>, formerly Silver Peak, the integration of Aruba Threat Defense with the EdgeConnect platform, and the expansion of the Aruba ESP multivendor security partner ecosystem, providing enterprise customers with the freedom to deploy best-of-breed,cloud-delivered secure access service edge (SASE) security components of their choice. Today\u2019s Aruba ESP advancements will enable enterprises to fast-track their digital transformation journey from edge-to-cloud.<\/p>\n\n\n\n

As organizations contend with challenges resulting from the ongoing COVID-19 pandemic and a new \u201cwork from anywhere\u201d normal, the adoption of cloud-hosted services will continue to accelerate. This shift is intensifying the urgency to transform conventional data center and MPLS-centric and VPN-based networks to a cloud-nativeSASE architecture that features more dynamic provisioning of secure network services while protecting data from end-to-end.<\/p>\n\n\n\n

In parallel, digital transformation is causing a significant increase of IoT devices connecting to the network, presenting new challenges that are not addressed with cloud-delivered security alone. Since IoT devices are agentless, IT departments cannot install security clients or redirect device traffic to cloud security services; therefore, Zero Trust security must be applied at the WAN edge.<\/p>\n\n\n\n

To realize the full potential of the cloud and digital transformation, organizations require a new WAN edge that combines on premises and cloud-delivered security, delivering on the promise of SASE to protect users connecting to SaaS and public cloud platforms, and to safeguard IoT devices that require Zero Trust identity-based security. Through the new Aruba ESP integrations being announced today, enterprise customers now have the ability to apply granular-level, identity-based security policy from edge-to-cloud to safely connect and protect both users and devices.<\/p>\n\n\n\n

A recent report from communications research firm 650 Group highlights the growing emphasis on SASE while explaining the need for enterprises to re-examine their security approach in light of the current technology evolution. Chris DePuy, founding technology analyst at 650 Group states, \u201cAs enterprises shift toward Zero Trust and SASE architectures, they are increasingly evaluating and deploying multi-vendor cloud-delivered security services, and it\u2019s not necessary for all the SASE components to come from a single vendor. Aruba\u2019s approach strikes a balance between delivering on-premises security functionality at the WAN edge and providing customers with the freedom of choice to integrate leading cloud-delivered security services from partners like Zscaler, Netskope, and Check Point. This multi-vendor partnering strategy provides enterprises with the flexibility to continue working with existing vendors or shift toward \u2018best-of-breed\u2019 systems.\u201d<\/p>\n\n\n\n

ClearPass Policy Manager Integration with Aruba EdgeConnect<\/strong><\/p>\n\n\n\n

The integration of ClearPass Policy Manager<\/a> with the Aruba EdgeConnect SD-WAN edge platform<\/a> augments application intelligence by adding identity knowledge of users, IoT devices, roles, and security posture to form the basis of a SASE WAN edge. Combining role and security posture intelligence with advanced dynamic segmentation capabilities eliminates the complexity associated with implementing hundreds of VLANs for each class of user and device, dramatically simplifying network administration and management. Integrating ClearPass Policy Manager with EdgeConnect provides a consistent and automated definition of roles that can be enforced network-wide from the user\u2019s device, through the LAN, and across the WAN.<\/p>\n\n\n\n

Aruba Threat Defense Integration with Aruba EdgeConnect<\/strong><\/p>\n\n\n\n

The integration of Aruba Threat Defense with the Aruba EdgeConnect SD-WAN edge platform extends advanced intrusion detection and prevention (IDS\/IPS) capabilities to EdgeConnect physical and virtual appliances. This allows the EdgeConnect platform to leverage the Aruba threat infrastructure, sharing critical threat information between Aruba Central <\/a>and EdgeConnect to deliver full visibility across the network. These advanced unified threat management (UTM) capabilities enable enterprises to deliver east-west lateral security as well as secure local internet breakout from branch locations and can be deployed centrally on premises or in the cloud. By leveraging a common threat infrastructure and threat feeds across Aruba ESP, network and security managers can centrally apply and enforce threat management policies enterprise-wide.<\/p>\n\n\n\n

Freedom of Choice through a Multivendor Partner Ecosystem<\/strong><\/p>\n\n\n\n

As enterprises shift toward a Zero Trust and SASE architecture, they are increasingly evaluating and deploying multivendor cloud-delivered security services. A new Ponemon Institute security best practices survey <\/a>affirms this, revealing that over 70 percent of respondents would opt for a best-of-breed, cloud-delivered security solution over an all-in-one approach, in order to architect a comprehensive Zero Trust and SASE infrastructure.<\/p>\n\n\n\n

With a new Service Orchestration provisioning workflow, the Aruba Orchestrator management console, formerly Silver Peak Unity Orchestrator, now includes pre-configured default information regarding the cloud security partner\u2019s proximity-based cloud security services. Network administrators can quickly and easily associate Aruba branch locations with the partner\u2019s points of presence (POPs)and cloud-data centers. Leading security vendors<\/a> such as Check Point, Forcepoint, McAfee, Netskope, Palo Alto Networks, Symantec and Zscaler are currently a part of Aruba\u2019s extensive technology alliance partner ecosystem.<\/p>\n\n\n\n

\u201cThe integration of ClearPass Policy Manager and Aruba Threat Defense with the EdgeConnect SD-WAN edge platform allows us to deliver a consistent identity-based policy framework across the Aruba secure edge portfolio,\u201d said David Hughes, founder of Silver Peak and senior vice president of the WAN business at Aruba, a Hewlett Packard Enterprise company. \u201cThis powerful combination will enable customers to move at their own pace, from legacy data center-centric network architectures, with perimeter-based security, to a cloud-centric WAN with security based on the principles of Zero Trust and SASE. Enterprise customers can deploy our on-premises EdgeConnect WAN edge platform to enforce policy from the edge, and easily integrate with leading cloud-delivered security services from the vendor of their choice, all centrally controlled within Aruba Orchestrator.\u201d<\/p>\n\n\n\n

Comprehensive Secure WAN Edge Portfolio Spans Hybrid Work Locations <\/strong><\/p>\n\n\n\n

The Aruba ESP platform offers customers the industry\u2019s most comprehensive portfolio of secure wired, wireless and WAN edge solutions that enable customers to adapt to today\u2019s new normal and tomorrow\u2019s unknowns. The WAN Edge portfolio includes:<\/p>\n\n\n\n