Wireless Access

 View Only
last person joined: 14 hours ago 

Access network design for branch, remote, outdoor and campus locations with Aruba access points, and mobility controllers.
Expand all | Collapse all

deny app

This thread has been viewed 11 times
  • 1.  deny app

    Posted 21 days ago
    i try to deny apps through role but it seems Aruba mobility controller not showing any application running and the deny role not working , and idea


  • 2.  RE: deny app

    EMPLOYEE
    Posted 21 days ago
    Do you have PEF licensing enabled? Do you have AppRF/Firewall visibility enabled on the controller?

    What firmware version are you running? On what type of controller?

    ------------------------------
    Herman Robers
    ------------------------
    If you have urgent issues, always contact your Aruba partner, distributor, or Aruba TAC Support. Check https://www.arubanetworks.com/support-services/contact-support/ for how to contact Aruba TAC. Any opinions expressed here are solely my own and not necessarily that of Hewlett Packard Enterprise or Aruba Networks.

    In case your problem is solved, please invest the time to post a follow-up with the information on how you solved it. Others can benefit from that.
    ------------------------------



  • 3.  RE: deny app

    Posted 21 days ago

    dear MR.Herman 

    please find below my answers to your question


    Do you have PEF licensing enabled? 

    yes its enabled


    Do you have AppRF/Firewall visibility enabled on the controller?


    enable firewall visibility is checked/ enabled

    What firmware version are you running? On what type of controller?

    ArubaMC-VA-IL, 8.10.0.1 LSR , aruba mobility controller




    thanks for helping 








     

    -------------------------------------------------------
    Samer Sulaiman
    Head of Information Security Section

    Phone: 00970 (02)   2969700    Ext. 742
    Fax: 00970 (02)   2969712
    Mobile: 0097 (059) 8993110
    [Pls. try 972 if code 970 is not accessible]
    ssulaiman@elections.ps
    www.elections.ps
    www.facebook.com/CECPalestine
    www.youtube.com/cecpalestine

    --------------------------------------------------------






  • 4.  RE: deny app

    EMPLOYEE
    Posted 21 days ago
    Do you have your SSID configured as 'tunneled'? In bridged mode AppRF won't work...

    If that is the case, please open a TAC case as the basic things seem configured correct.

    ------------------------------
    Herman Robers
    ------------------------
    If you have urgent issues, always contact your Aruba partner, distributor, or Aruba TAC Support. Check https://www.arubanetworks.com/support-services/contact-support/ for how to contact Aruba TAC. Any opinions expressed here are solely my own and not necessarily that of Hewlett Packard Enterprise or Aruba Networks.

    In case your problem is solved, please invest the time to post a follow-up with the information on how you solved it. Others can benefit from that.
    ------------------------------



  • 5.  RE: deny app

    Posted 21 days ago

    I just conver 22 access point from free virtual controller to aruba mobility controller and i configure ssid thats it , when i try to apply role it dosnt take effect



    Sent from my Galaxy








     

    -------------------------------------------------------
    Samer Sulaiman
    Head of Information Security Section

    Phone: 00970 (02)   2969700    Ext. 742
    Fax: 00970 (02)   2969712
    Mobile: 0097 (059) 8993110
    [Pls. try 972 if code 970 is not accessible]
    ssulaiman@elections.ps
    www.elections.ps
    www.facebook.com/CECPalestine
    www.youtube.com/cecpalestine

    --------------------------------------------------------






  • 6.  RE: deny app

    EMPLOYEE
    Posted 20 days ago
    Do you have your SSID configured as 'tunneled'? In bridged mode AppRF won't work...

    ------------------------------
    Herman Robers
    ------------------------
    If you have urgent issues, always contact your Aruba partner, distributor, or Aruba TAC Support. Check https://www.arubanetworks.com/support-services/contact-support/ for how to contact Aruba TAC. Any opinions expressed here are solely my own and not necessarily that of Hewlett Packard Enterprise or Aruba Networks.

    In case your problem is solved, please invest the time to post a follow-up with the information on how you solved it. Others can benefit from that.
    ------------------------------



  • 7.  RE: deny app

    Posted 20 days ago

    yes in forwarding mode : tunnel is selected








     

    -------------------------------------------------------
    Samer Sulaiman
    Head of Information Security Section

    Phone: 00970 (02)   2969700    Ext. 742
    Fax: 00970 (02)   2969712
    Mobile: 0097 (059) 8993110
    [Pls. try 972 if code 970 is not accessible]
    ssulaiman@elections.ps
    www.elections.ps
    www.facebook.com/CECPalestine
    www.youtube.com/cecpalestine

    --------------------------------------------------------






  • 8.  RE: deny app

    Posted 20 days ago

    i see more than tunnel option there 


    tunnel 

    decrypt-tunnel

    split-tunnel

    and bridge








     

    -------------------------------------------------------
    Samer Sulaiman
    Head of Information Security Section

    Phone: 00970 (02)   2969700    Ext. 742
    Fax: 00970 (02)   2969712
    Mobile: 0097 (059) 8993110
    [Pls. try 972 if code 970 is not accessible]
    ssulaiman@elections.ps
    www.elections.ps
    www.facebook.com/CECPalestine
    www.youtube.com/cecpalestine

    --------------------------------------------------------






  • 9.  RE: deny app

    EMPLOYEE
    Posted 20 days ago
    Tunnel is ok, that should get the traffic through the controller and allow AppRF to do application classification.

    It looks basics are good, best would be to open a TAC Support case to do some interactive troubleshooting on your deployment.

    ------------------------------
    Herman Robers
    ------------------------
    If you have urgent issues, always contact your Aruba partner, distributor, or Aruba TAC Support. Check https://www.arubanetworks.com/support-services/contact-support/ for how to contact Aruba TAC. Any opinions expressed here are solely my own and not necessarily that of Hewlett Packard Enterprise or Aruba Networks.

    In case your problem is solved, please invest the time to post a follow-up with the information on how you solved it. Others can benefit from that.
    ------------------------------