The Latest HP News
Product and Solution Information, Press Releases, Announcements
|Aruba Modernizes Network Security to Help Businesses Reduce Risk in the Era of Mobile, Cloud, and IoT|
|Posted: Mon Sep 18, 2017 11:07:35 AM|
Aruba 360 Secure Fabric delivers new analytics-driven, advanced cyber protection to simplify enterprise security
SANTA CLARA, Calif., Sept. 18, 2017 – Aruba, a Hewlett Packard Enterprise company (NYSE:HPE), today announced the Aruba 360 Secure Fabric, a security framework that provides 360 degrees of analytics-driven attack detection and response to help organizations reduce risk in today’s changing threat landscape. Aruba is also innovating in User and Entity Behavioral Analytics (UEBA) by expanding the Aruba IntroSpect product family, enabling businesses to easily and rapidly scale machine-learned behavior detection from small projects to full enterprise deployments.
Gartner’s research into insider threats indicates that organizations are not adequately considering the risk from their trusted users even though there are myriad examples where organizations have been impacted. On a positive note, Gartner fielded almost a 100% increase from clients looking to address the insider threat issue, of which UEBA is one of the primary technologies.
To help organizations address new and unknown threats, the Aruba 360 Secure Fabric offers security and IT teams an integrated way to quickly detect and respond to advanced cyberattacks from pre-authorization to post-authorization across multi-vendor infrastructures, supporting enterprises of all sizes.
“360° ACTIVE CYBER PROTECTION AND SECURE ACCESS FROM THE EDGE, TO THE CORE, TO THE CLOUD – FOR ANY NETWORK”
Components of the Aruba 360 Secure Fabric include the following:
“INTROSPECT UEBA: NEW INTROSPECT STANDARD EDITION EXPANDS UEBA (USER AND ENTITY BEHAVIOR ANALYTICS) FAMILY FOR BASIC TO ADVANCED SECURITY REQUIREMENTS”
“ADAPTIVE ATTACK RESPONSE: CLEARPASS NOW INTEGRATED WITH INTROSPECT TO ENABLE POLICY-BASED ATTACK RESPONSE”
“ARUBA NETWORK INFRASTRUCTURE WITH END-TO-END EMBEDDED SECURITY AND NEW ANALYTICS SUPPORT”
New Edition for Aruba IntroSpect UEBA Family
Aruba IntroSpect Standard joins the IntroSpect UEBA family, along with new features added to the company’s flagship offering, Aruba IntroSpect Advanced. The expansion of the IntroSpect UEBA family offers security teams more choice and a quick way to implement UEBA.
Aruba IntroSpect Standard is an easy way for organizations to start employing UEBA machine learning security with as few as three data sources, accelerating an organization’s time-to-protect corporate and customer data. It is designed for basic monitoring and detection of anomalous and often, subtle, behaviors on the network and across mobile, cloud, and IoT devices and applications, to identify early signs of attack expansion and beaconing, as well as data exfiltration.
It ingests common data sources including Microsoft Active Directory or other LDAP authentication records and identity information, and firewall logs from sources such as Checkpoint, Palo Alto Networks™, or Aruba monitoring (AMON) logs from Aruba infrastructure. Action can be taken quickly using ClearPass to quarantine, restrict, or remove identified threats.
Security teams deploying IntroSpect Standard can easily upgrade to IntroSpect Advanced as their requirements expand.
Raising the Bar on Early Detection with Aruba IntroSpect Advanced Edition
Aruba IntroSpect Advanced delivers a wider set of security capabilities than IntroSpect Standard to provide attack detection by correlating across a broader array of data sources, aiding in faster incident investigation and improved threat-hunting, search, and deep forensics. Included are more than 100 supervised and unsupervised machine learning models that provide unmatched analytics and forensics from data such as packets, flows, logs, alerts, and endpoints, as well as mobile, cloud, and IoT traffic, increasing an organization’s effectiveness at identifying risk.
Aruba IntroSpect uses machine learning analytics to reduce the time and effort required to identify and resolve cyberattacks.
New features for Aruba IntroSpect Advanced include:
Trusted and Secure Network Foundation with Aruba Secure Core
Embedded into Aruba’s networking infrastructure is the Aruba Secure Core, which provides the necessary protection required for any network including secure boot, embedded firewalls, centralized encryption, deep packet inspection, and intrusion prevention. Aruba’s unique infrastructure design helps eliminate the danger of physical tampering while securing and monitoring network traffic.
Integrating Aruba IntroSpect UEBA and Aruba ClearPass into the Aruba Secure Core provides a seamless path of protection from device discovery and access to attack detection and response. This gives Aruba customers the unique ability to detect an attack and then take automated or analyst-initiated action to protect organizations’ valuable assets, ranging from network reauthentication to quarantining to blacklisting users and devices.
Aruba 360 Security Exchange Program: Multi-vendor Closed Loop Protection
The Aruba 360 Security Exchange Program combines the partners and technical resources from the IntroSpect Technology Program and the Aruba ClearPass Exchange Program. The result is more than 100 leading security and infrastructure solutions that customers and channel partners can leverage for simple, validated interoperability, enabling quick and trusted deployments. Aruba customers can leverage their existing security investments by seamlessly integrating them with Aruba solutions, providing the benefits of a unified solution with the flexibility of an open architecture.