DELL 210-AARN
Contents
1. g e T Fe mm W ClearPass Access Management System Real time network access security and endpoint control for BYOD The W ClearPass Access Management System provides role and device based network access control for employees contractors and guests across any wired wireless and VPN infrastructure Built in RADIUS TACACS profiling onboarding guest access and health checks plus the ability to leverage third party mobile device management solutions ensure seamless policy enforcement across the entire network Centrally managed network access policies provide the comprehensive authentication capabilities that are required for today s highly mobile workforce regardless of device type or device ownership Automated services let users securely onboard their own devices register AirPlay and AirPrint enabled devices for sharing and create guest access credentials The result is a consistent and scalable network access control solution that exceeds bring your own device BYOD and ITmanaged device security requirements The Clearpass Difference The W ClearPass Access Management System is the only network access control solution that centrally enforces all aspects of BYOD from a single platform Granular network access privileges are granted based on a user s role device type MDM attributes device health location and time of day Offering unsurpassed interoperability ClearPass supports an extensive collection2. operations Select Dell Networking products carry an Extended Life Warranty with Basic Hardware Service Warranty covers repair or replacement of the product for as long as it remains in use by the customer In the event of discontinuance of product manufacture Dell Extended Life Warranty extends until five 5 years after end of product model sales Warranty limits any power supply antennae or accessories to one 1 year from date of purchase Warranty does not include troubleshooting configuration or other advanced service provided by Dell ProSupport The Extended Life Limited Hardware Warranty is not transferrable For more information see dell com warranty 2013 Dell Inc All Rights Reserved Dell the DELL logo and PowerConnect are trademarks of Dell Inc Reproduction of these materials in any manner whatsoever without the written permission of Dell Inc is strictly forbidden Learn more at Dell com Networking W ClearPass Access Management System Data Sheet C e EAP TLS Specifications e PAP CHAP MSCHAPv1 and 2 EAP MD5 e Wireless wired and VPN 802 1X e Microsoft NAP NAC e Windows machine authentication e MAC auth non 802 1X devices e Audit rules based on port and vulnerability scans Access Management System ClearPass Policy Manager e Comprehensive identity based policy engine e Posture agents for Windows Mac OS X Linux operating systems e Built in AAA services RADIUS TACACS Kerberos e Web 802 1X
3. ent Additionally select additional functionality such Ordering Information Part Number Description Eve IR Access Management System 500 hardware platform EEO Co EPWA 300 supporting a maximum of 500 authenticated devices AAN AZAS Access Management System 5K hardware platform supporting a CP HW SK Cr Nao maximum of 5 000 authenticated devices Ly NA Access Management System 25K hardware platform supporting a eb coer CP area maximum of 25 000 authenticated devices Expandable application software ClearPass Onboard device onboarding and management ClearPass OnGuard endpoint device health ClearPass Guest visitor access management Warranty Hardware 1 year parts labor Software 90 days eA application software is available in the following increments 100 500 1 000 2 500 5 000 10 000 25 000 50 000 an 000 Extended with support contract W ClearPass Access Management Systern_051413
4. guards before devices connect Information about endpoint integrity such as status of anti virus anti spyware firewall and peer to peer applications can be used to enhance authorization policies Automatic remediation services are also available for non compliant devices The Access Management System provides user and device authentication based on 802 1X non 802 1X and web portal access methods Multiple authentication protocols like PEAP EAP FAST EAP TLS and EAP TTLS can be used concurrently to strengthen security in any environment Attributes from multiple identity stores such as Microsoft Active Directory LDAP compliant directory ODBC compliant SQL Additional Policy database token servers and internal databases can be used within a single policy for fine grained control Management Capabilities Additionally posture assessments and remediation can be added to existing policies at any time Built in device profiling Mobile device and application management ClearPass is the only profiling service that discovers and classifies all endpoints regardless of device type A variety of contextual data The ClearPass MDM Connector makes it easy to use attributes MAC OUls DHCP fingerprinting and other identity centric device collected by third party MDM solutions to enforce network policies data can be obtained and used within policies A device can be denied Wi Fi access if it is jailbroken running blackli
5. ions W x H x D 16 8 x 1 7 x 14 1753 x 1 7 x 26 17 1753 x 1 7 x 26 17 Weight max config 14 Lbs 39 Lbs 39 Lbs Power Power consumption maximum 717 watts max AC mputvolt de 110 220 VAC 110 220 VAC 110 220 VAC p g auto selecting auto selecting auto selecting AC input frequency 50 60 Hz auto selecting 50 60 Hz auto selecting 50 60 Hz auto selecting Environmental Operating temperature 10 C to 35 C 10 C to 35 C 10 C to 352 C p oe 502 F to 952 F 50 F to 95 F 502 F to 95 F Ogeratna vibration 0 26 G at 5 Hz to 350 Hz 0 26 G at 5 Hz to 350 Hz 0 26 G at 5 Hz to 350 Hz p g for 5 minutes for 5 minutes for 5 minutes 1 shock pulse of 31 G 1 shock pulse of 31 G 1 shock pulse of 31 G Operatingshock for up to 2 6 ms for up to 2 6 ms for up to 2 6 ms 16 m to 3 048 m 16 m to 3 048 m 16 m to 3 048 m Operating altitude 50 ft to 10 000 ft 50 ft to 10 000 ft 50 ft to 10 000 ft W ClearPass Access Management System Data Sheet Ordering Guidance as guests per day total BYO devices being onboarded and total number of computers requiring health checks Ordering the ClearPass Access Management System involves the following steps 2 Choose the appropriate platform either virtual or hardware sos appliance sized to accommodate the total number of devices and 1 Determine the number of authenticated endpoints devices in guests that will require authentication for your deployment your environm
6. non 802 1X authentication and authorization Supported Identity Stores e Reporting analytics and troubleshooting tools e Microsoft Active Directory e External captive portal redirect to multivendor equipment e Kerberos e Interactive policy simulation and monitor mode utilities e Any LDAP compliant directory e Deployment templates for any network type identity store e Any ODBC compliant SQL server and endpoint Token servers e User initiated device registration Access Management e Built in identity store System AirGroup and unmanaged devices s Bu iltin stake hosts list Framework and Protocol Support REC Standards e RADIUS RADIUS CoA TACACS web authentication 2246 2248 2548 2759 2865 2866 2869 2882 3079 e EAP FAST EAP MSCHAPv2 EAP GTC EAP TLS 3579 3580 3748 4017 4137 4849 4851 5216 528 e PEAP EAP MSCHAPv2 EAP GTC EAP TLS TTLS EAP MSCHAPV2 EAP GTC EAP TLS EAP MD5 PAP CHAP Internet Drafts e Protected EAP Versions O and 1 Microsoft CHAP extensions Appliance Specifications dynamic provisioning using EAP FAST TACACS Access Management Access Management Access Management System 500 System 5000 System 25000 CPU 1 Dual Core Pentium 1 Quad Core Xeon 2 Quad Core Xeon 2 3 5 SATA Z2KRPM 4 2 5 SAS LOK RPM 1 3 AUK RPM 500GB hard drives RAID 1 600GB Hot Plug hard controller drives RAID 10 controller Hard drive storage Appliance Scalability Form Factor Dimens
7. ny Windows Mac OS X iOS and Android devices via a built in captive portal Users are re directed to a template based interface to The W ClearPass Access Management System is available as provision required SSID 802 1X settings and download unique hardware or virtual appliances that support 500 5 000 and 25 000 device credentials authenticating devices Virtual appliances are supported on VMware Additional capabilities include the ability for IT to revoke and delete ESX and ESXi platforms versions ESX 4 0 ESXi 4 0 and 5 0 credentials for lost or stolen devices and the ability to configure Virtual appliances as well as the hardware appliances can be mobile email settings for Exchange ActiveSync and VPN clients on deployed within a cluster for scalability and redundancy some device types Customizable visitor management ClearPass with Guest simplifies workflow processes allowing receptionists employees and other non IT staff to create temporary accounts for Wi Fi and wired network access Once registered users receive account login credentials via SMS text messages or email Guest network access accounts can be set to expire automatically after a specific number of hours or days Customizable captive portal capabilities let IT and marketing organizations create a branded guest login experience with targeted advertising and user code of conduct messaging Self registration and automated credential delivery also streamlines IT
8. of multivendor wireless and wired networking equipment which enables IT to easily rollout BYOD across any infrastructure With flexible deployment options IT can start by providing sponsored guest access and also allow employees to onboard their own devices and later add device profiling and application management ClearPass is capable of scaling to support tens of thousands of devices and users Key features Unprecedented Simplicity Centrally defined policies and enforcement eliminates the need for multiple policy and device management systems which strengthens an organization s overall security architecture A host of built in capabilities lets IT quickly adapt to changing BYOD challenges A simple to use template based interface provides an efficient way to create network access and authentication services regardless of the identity store currently in use authentication method or enforcement model W ClearPass Access Management System is also a valuable security operations and troubleshooting system that delivers unprecedented visibility to quickly identify network issues and policy and security vulnerabilities W ClearPass Access Management System Data Sheet Advanced Policy Management Device health checks ClearPass with OnGuard and separate OnGuard persistent or Employee access dissolvable agents perform advanced endpoint posture assessments Traditional NAC health check capabilities ensure compliance and network safe
9. sted apps or if the owner does not appear in an authorization Stored profiling data is also used to identify device profile changes and to dynamically modify authorization privileges For example if a database printer appears as a Windows laptop Access Management System Handling access for unmanaged endpoints ea AU ONaNEalY dery ages Unmanaged non 802 1X devices printers IP phones and Extensive captive portal support IP cameras can be identified as known or unknown upon connecting to the network The identity of these devices is based on the presence of their MAC address in an external or internal database The ClearPass solution provides a central captive portal for authentication that works on any multivendor wired and wireless network This eliminates the need for separate Wi Fi and wired captive portals Built in ClearPass profiling ensures that these devices are accurately fingerprinted and match the characteristics on subsequent profiling scans Policies can be tailored to provide full or limited access to secure resources Also built in web based device registration services let users self register their devices such as Apple Bonjour capable devices game consoles and other personal devices to automatically capture MAC address device type and operating system version for IT W ClearPass Access Management System appliances Secure device provisioning ClearPass with Onboard fully automates the provisioning of a
Download Pdf Manuals
Related Search