Aruba 360 Secure Fabric delivers new
analytics-driven, advanced cyber protection with continued
innovation in UEBA to simplify enterprise security
Aruba, a Hewlett Packard Enterprise company (NYSE:HPE), today
announced the Aruba 360 Secure Fabric, a security framework that
provides 360 degrees of analytics-driven attack detection and
response to help organizations reduce risk in today’s changing
threat landscape. Aruba is also innovating in User and Entity
Behavioral Analytics (UEBA) by expanding the Aruba IntroSpect
product family, enabling businesses to easily and rapidly scale
machine-learned behavior detection from small projects to full
enterprise deployments.
This Smart News Release features multimedia.
View the full release here:
http://www.businesswire.com/news/home/20170918005254/en/
Aruba IntroSpect uses machine learning
analytics to reduce the time and effort required to identify and
resolve cyberattacks. IntroSpect automatically creates a Risk
Profile for every user, system and IoT device connected to the
network. When a Risk Score reaches a certain pre-defined level
(shown is 79, on a scale of 1 – 100), a policy from Aruba ClearPass
can be triggered to take a variety of enforcement actions to stop
the attack and provide additional time to investigate. As a result,
identifying and resolving security incidents is reduced to mere
minutes, compared to hours and days via traditional manual methods.
(Graphic: Business Wire)
Gartner’s research into insider threats indicates that
organizations are not adequately considering the risk from their
trusted users even though there are myriad examples where
organizations have been impacted. On a positive note, Gartner
fielded almost a 100% increase from clients looking to address the
insider threat issue, of which UEBA is one of the primary
technologies.1
To help organizations address new and unknown threats, the Aruba
360 Secure Fabric offers security and IT teams an integrated way to
quickly detect and respond to advanced cyberattacks from
pre-authorization to post-authorization across multi-vendor
infrastructures, supporting enterprises of all sizes.
Components of the Aruba 360 Secure Fabric include the
following:
- Aruba IntroSpect UEBA
solution: A new network-agnostic family of continuous
monitoring and advanced attack detection software. Includes a new
entry-level edition and uses machine learning to detect changes in
user and device behavior that can indicate attacks that have evaded
traditional security defenses. Machine-learning algorithms generate
a Risk Score based on the severity of an attack to speed up
incident investigations for security teams.
- Aruba ClearPass: A proven
network access control (NAC) and policy management security
solution that can profile BYOD and IoT users and devices, enabling
automated attack response, is now integrated with Aruba IntroSpect.
ClearPass can also be deployed on any vendor’s network.
- Aruba Secure Core: Essential
security capabilities embedded in the foundation across all of
Aruba’s Wi-Fi access points, wireless controllers, and switches,
including the recently introduced Aruba 8400 campus core and
aggregation switch.
New Edition for Aruba IntroSpect UEBA Family
Aruba IntroSpect Standard joins the IntroSpect UEBA family,
along with new features added to the company’s flagship offering,
Aruba IntroSpect Advanced. The expansion of the IntroSpect UEBA
family offers security teams more choice and a quick way to
implement UEBA.
Aruba IntroSpect Standard is an easy way for organizations to
start employing UEBA machine learning security with as few as three
data sources, accelerating an organization’s time-to-protect
corporate and customer data. It is designed for basic monitoring
and detection of anomalous and often, subtle, behaviors on the
network and across mobile, cloud, and IoT devices and applications,
to identify early signs of attack expansion and beaconing, as well
as data exfiltration.
It ingests common data sources including Microsoft Active
Directory or other LDAP authentication records and identity
information, and firewall logs from sources such as Checkpoint,
Palo Alto Networks™, or Aruba monitoring (AMON) logs from Aruba
infrastructure. Action can be taken quickly using ClearPass to
quarantine, restrict, or remove identified threats.
Security teams deploying IntroSpect Standard can easily upgrade
to IntroSpect Advanced as their requirements expand.
Raising the Bar on Early Detection with Aruba IntroSpect
Advanced Edition
Aruba IntroSpect Advanced delivers a wider set of security
capabilities than IntroSpect Standard to provide attack detection
by correlating across a broader array of data sources, aiding in
faster incident investigation and improved threat-hunting, search,
and deep forensics. Included are more than 100 supervised and
unsupervised machine learning models that provide unmatched
analytics and forensics from data such as packets, flows, logs,
alerts, and endpoints, as well as mobile, cloud, and IoT traffic,
increasing an organization’s effectiveness at identifying risk.
New features for Aruba IntroSpect Advanced include:
- Smarter Security with Dynamic
Machine Learning, which allows security teams to easily
customize IntroSpect’s analytical models based on the current
threat environment and protection priorities. Included is
“chaining,” in which the 100+ out-of-the box machine learning
models can be linked together to construct new detection scenarios
and associated risk scores.
- Classifying Mobile, Cloud, and IoT
with Device Peer Grouping, which utilizes the ClearPass
profiling functionality to group like devices even when known only
by their IP address. For example, ClearPass will classify a
surveillance camera or a factory sensor, and IntroSpect will
benchmark its behavior amongst its peer group. Introspect will flag
unusual device behavior based on peer group comparisons, which is
important in extending UEBA functionality to the growing classes of
IoT devices.
- Faster Remediation with Integrated
Attack Response, enabling security analysts to respond to an
attack by triggering an action for ClearPass directly from the
IntroSpect console.
Trusted and Secure Network Foundation with Aruba Secure
Core
Embedded into Aruba’s networking infrastructure is the Aruba
Secure Core, which provides the necessary protection required for
any network including secure boot, embedded firewalls, centralized
encryption, deep packet inspection, and intrusion prevention.
Aruba’s unique infrastructure design helps eliminate the danger of
physical tampering while securing and monitoring network
traffic.
Integrating Aruba IntroSpect UEBA and Aruba ClearPass into the
Aruba Secure Core provides a seamless path of protection from
device discovery and access to attack detection and response. This
gives Aruba customers the unique ability to detect an attack and
then take automated or analyst-initiated action to protect
organizations’ valuable assets, ranging from network
reauthentication to quarantining to blacklisting users and
devices.
Aruba 360 Security Exchange Program: Multi-vendor
Closed Loop Protection
The Aruba 360 Security Exchange Program combines the partners
and technical resources from the IntroSpect Technology Program and
the Aruba ClearPass Exchange Program. The result is more than 100
leading security and infrastructure solutions that customers and
channel partners can leverage for simple, validated
interoperability, enabling quick and trusted deployments. Aruba
customers can leverage their existing security investments by
seamlessly integrating them with Aruba solutions, providing the
benefits of a unified solution with the flexibility of an open
architecture.
Availability
The Aruba IntroSpect Standard and Advanced editions are
generally available now in North America, with limited availability
in select countries. Global general availability is planned for
2018.
Customer Quote
A leading provider of software, hardware, and semiconductor IP,
Cadence Design Systems, Inc. is using Aruba’s security software and
network management solutions to protect its network, data, and
other digital assets from increasingly sophisticated
cyberattacks.
“In addition to providing visibility to every device on our
network, Aruba ClearPass gives us the power to authenticate devices
and enforce policies across our wired and wireless infrastructure,”
said Faramarz Mahdavi, Senior Group Director of IT Operations,
Cadence Design Systems. “By adding Aruba IntroSpect UEBA
analytics and threat detection capabilities, we will be able to
better protect our source code by automating anomaly detection and
prioritizing security incidents for faster resolution. The
combination of ClearPass and IntroSpect gives us a powerful,
congruent solution to proactively manage and defend our
organization from cyberattacks.”
Channel Partner Quotes
“Security and IT teams need an easier and faster way to detect
and respond to cyberattacks across multi-vendor infrastructures,”
said Bill Buckalew, Vice President of Partner Development,
Optiv. “We are pleased to see key Optiv partners like Aruba
enhance integration of their products to make them more efficient
and effective so that organizations can achieve better outcomes
from their security programs. We look forward to leveraging these
integrated technologies as part of our comprehensive set of cyber
security solutions and services that address the evolving threat
landscape.”
Red Sky Technologies architects, builds, and deploys solutions
that help customers achieve their desired IT goals. “Integration
between products is a major component of our strategy as customers
(and the industry alike) recognize a single vendor will not solve
all problems,” said Justin Tibbs, CSO, Red Sky Technologies.
“For example, the ability to integrate Palo Alto Networks into the
Aruba 360 Secure Fabric for increased visibility and detection
capabilities alongside Aruba’s integrated security solution, not
only helps improve the overall security posture of our customers,
it also alleviates a multitude of point products refusing to
integrate or work together.“
Aruba 360 Secure Exchange Partner Quotes
“Carbon Black is excited to be an Aruba 360 Secure Exchange
Partner – one of the few partners to feature integration with both
ClearPass and IntroSpect UEBA,” said Tom Barsi, SVP Corporate and
Business Development, Carbon Black. “Our integration
improves overall security for enterprises by combining event data
and network data to provide a more detailed view on user and device
behavior – a long-term, machine-learning view leading to quicker,
better decisions. Further, integration with ClearPass ensures
corrupted assets are quarantined or booted in an automated fashion
– improving security and limiting risk.”
“As traditional security perimeters dissolve rapidly with the
adoption of Mobile, Cloud, and IoT, delivering secure endpoint
protection regardless of a user’s location and device is paramount
in the fight against cybercrime,” said D.J. Long, head of the
McAfee Security Innovation Alliance. “We are very happy to
see the integrated platform of Aruba 360 Secure Fabric working
jointly with the McAfee portfolio of security products, sharing
threat intelligence and workflow policies, increasing the
efficiency and efficacy of security protection for mutual
customers.”
"Palo Alto Networks and Aruba have joined forces to prevent
cyberattacks by expanding on our existing integration with
ClearPass and Cloud Services Controller to deliver closed-loop
detection and remediation of advanced threats and insider attacks
via the Aruba 360 Secure Fabric,” said Chad Kinzelberg, senior vice
president of business and corporate development, Palo Alto
Networks. “With the forthcoming Palo Alto Networks Application
Framework, which will revolutionize how organizations consume
security technologies, joint customers will be able to evaluate and
adopt solutions like Aruba IntroSpect without deploying on-premises
infrastructure.”
“SecureLink is proud to be a pan-EMEA integration partner of
Aruba, especially with regards to the 360 Secure Fabric solution,”
said Marco Barkmeijer, CEO, SecureLink Group. “Ten years ago
we chose Aruba as our mobility partner because security was a
priority on their hardware and software requirements. Ten years
later we have deployed secure, integrated, mobility solutions at
more than 350 unique SecureLink customers. As a Cyber Security
Integrator, security is in our DNA and Aruba’s 360 Secure Fabric
solution enables us to build even better end-to-end secure mobile
infrastructures with third-party integration. Customers need
integrated visibility, detection, analytics, and response from
access to the core. With the 360 Secure Fabric, Aruba enables us to
serve even more customers and develop more services.”
Additional Materials
Blog by Partha Narasimhan: The Digital Workplace Amidst a
Vanishing Security Perimeter http://hpe.to/60038FMAF
About Aruba, a Hewlett Packard Enterprise company
Aruba, a Hewlett Packard Enterprise company, is a leading
provider of next-generation networking solutions for enterprises of
all sizes worldwide. The company delivers IT solutions that empower
organizations to serve the latest generation of mobile-savvy users
who rely on cloud-based business apps for every aspect of their
work and personal lives.
To learn more, visit Aruba at http://www.arubanetworks.com. For
real-time news updates follow Aruba on Twitter and Facebook, and
for the latest technical discussions on mobility and Aruba products
visit Airheads Social at http://community.arubanetworks.com.
1 Gartner, “Market Guide for User and Entity Behavior
Analytics,” Toby Bussa, Avivah Litan, Trisha Philips, Dec. 8, 2016,
Pg. 9
View source
version on businesswire.com: http://www.businesswire.com/news/home/20170918005254/en/
Aruba, a Hewlett Packard Enterprise companyEmory
Epperson, +1-408-761-7335emory.epperson@hpe.comorAruba, a
Hewlett Packard Enterprise companyLori Hultin,
+1-818-879-4651lori.hultin@hpe.com
Hewlett Packard Enterprise (NYSE:HPE)
Historical Stock Chart
From Apr 2024 to May 2024
Hewlett Packard Enterprise (NYSE:HPE)
Historical Stock Chart
From May 2023 to May 2024