HPE Aruba Virtual Mobility Controller Policy Enforcement Firewall

Identity-based policy controls

PEF with AppRF technology provides user-level awareness of all traffic across the network. Aruba Mobility Controllers support multiple user categories on a single network, spanning wired, wireless and VPNs.

Application visibility

The AppRF dashboard gives IT a simple, powerful view of mobile App usage and performance on the WLAN. Aruba mobility or virtual controllers display and categorize applications in use, which can be sorted by user role, application, network and other criteria.

Policy-based traffic management and control

PEF features controls that optimize WLAN bandwidth utilization. Role-based policies can limit the maximum amount of bandwidth consumption for a particular user or class of users, and prevents power users from monopolizing network resources.

Application-aware quality of service controls

PEF can apply a number of firewall security actions to traffic, including permit, drop, log or reject. Packets can also be tagged with 802.1p or DSCP markings, prioritized into multiple queues and redirected to different destinations based on protocols. Advanced awareness of voice and video protocols permits appropriate QoS to be applied to both the control protocol and the call sessions automatically. PEF ensures that the appropriate priority level is mapped to the associated protocol. For instance, if traffic to or from a user is inconsistent with the associated QoS setting for voice, then that traffic is reclassified to the appropriate priority.

Comprehensive voice management and control

PEF offers extensive voice management capabilities using the session initiation protocol (SIP), including detailed reporting and troubleshooting as well as at-a-glance data via tables and graphs.

High-performance traffic processing

With PEF, policy enforcement does not come at the expense of performance or require additional external hardware. Aruba Mobility Controllers are purpose-built for high-speed processing of network traffic with dedicated hardware for control processing, network traffic processing and encryption.

Stateful firewalls for every user

PEF implements a full stateful firewall instance around every user, tightly controlling what the user is permitted to do and providing separation between user classes.

External authentication and authorization interfaces

PEF extends fine-grained control over of users from authorization and authentication servers. Controls such as automatic disconnection from the network, role reassignment, and dynamic updates of firewall policies can be enabled.

Ease network security deployments

The external services interface (ESI) allows a wide range of network service appliances to be co-located with Mobility Controllers to provide their services to clients on the network.

• Identity-based policy controls
• Application visibility
• Policy-based traffic management and control
• Application-aware quality of service controls
• Comprehensive voice management and control
• High-performance traffic processing
• Stateful firewalls for every user
• External authentication and authorization interfaces
• Ease network security deployments

MPN: JW334AAE