Wireless Access

Would like to know if Aruba has vulnerability patch/remediation SLAs for Critical Vulnerabilities?   And if so where is it published.   I am already signed up for notifications but management wants to see the published SLA Aruba follows in general.  Controllers/Gateways, AOS/CX switches, Airwave, CPPM included.

Thanks for any assistance.

I think the question is more to do with how Aruba managed Critical Vulnrabilities.  For example, as a lot of their technologies are based on a Linux back-end, one CVSS will have a ripple effect across all their products.  However, in keeping with a lot of manufacturers, they won't publish the fact that they have a Crit.Vuln until they have a patch for it.  The bad guys are out there constantly looking for holes in systems; if Aruba published the fact they had a problem before providing a patch/fix for it, then there is a probability that their systems would be constantly suffering from being p*rn'd.

I'm assuming that you are asking about how long it takes for Aruba/HPE to impliment a fix after its been identified.  That is going to be a question for your Aruba/HPE account manager and depends on Aruba/HPE's engineering internal resources.  I don't remember ever seeing a document saying that "if we are aware of a problem we'll fix it in xx days".

Would like to know if Aruba has vulnerability patch/remediation SLAs for Critical Vulnerabilities?   And if so where is it published.   I am already signed up for notifications but management wants to see the published SLA Aruba follows in general.  Controllers/Gateways, AOS/CX switches, Airwave, CPPM included.

Thanks for any assistance.

Would like to know if Aruba has vulnerability patch/remediation SLAs for Critical Vulnerabilities?   And if so where is it published.   I am already signed up for notifications but management wants to see the published SLA Aruba follows in general.  Controllers/Gateways, AOS/CX switches, Airwave, CPPM included.

Thanks for any assistance.

Would like to know if Aruba has vulnerability patch/remediation SLAs for Critical Vulnerabilities?   And if so where is it published.   I am already signed up for notifications but management wants to see the published SLA Aruba follows in general.  Controllers/Gateways, AOS/CX switches, Airwave, CPPM included.

Thanks for any assistance.

Would like to know if Aruba has vulnerability patch/remediation SLAs for Critical Vulnerabilities?   And if so where is it published.   I am already signed up for notifications but management wants to see the published SLA Aruba follows in general.  Controllers/Gateways, AOS/CX switches, Airwave, CPPM included.

Thanks for any assistance.

https://support.hpe.com/hpesc/public/docDisplay?docId=a00100637en_us&docLocale=en_US

Would like to know if Aruba has vulnerability patch/remediation SLAs for Critical Vulnerabilities?   And if so where is it published.   I am already signed up for notifications but management wants to see the published SLA Aruba follows in general.  Controllers/Gateways, AOS/CX switches, Airwave, CPPM included.

Thanks for any assistance.

Thanks Chulcher, I have this already but it does not provide the details I am looking for.  I appreciate the response none the less.

https://support.hpe.com/hpesc/public/docDisplay?docId=a00100637en_us&docLocale=en_US

Would like to know if Aruba has vulnerability patch/remediation SLAs for Critical Vulnerabilities?   And if so where is it published.   I am already signed up for notifications but management wants to see the published SLA Aruba follows in general.  Controllers/Gateways, AOS/CX switches, Airwave, CPPM included.

Thanks for any assistance.