Wireless Access

 View Only
  • 1.  WEB-CC in different Aruba devices

    Posted Feb 04, 2025 07:07 AM

    Hi, 

    I tried to search for this but I couldn't find any documentation on how these methods compare to each other:

    WEBCC on Instant vs WebCC on AOS8 vs WEBCC on AOS10 AP with Central vs WEBCC on AOS10 gateway?

    My questions are:
    Is there any noticeable difference (from user perspective) in the 4 methods?
    Apart from the webCC on AOS8, does the other methods need any special license?
    Where do they cache the webcc URLs (if they cache it)?
    Are there any limitations(client number, URL cache max object size?) on any of these methods? (Example: VMC-s and Virtual Gateways were not scaled by engineering correctly, so regardless of size when issuing the #show gsm debug channel web_cc_info status the "Max number of Objects = 33768". So Virtual appliances have a built in limitation of maximum 33768 URL cache which is not enough for large scale deployment. On the other hand 7220 has a 527288 object size)

    Thank you in advance!

    Cs



  • 2.  RE: WEB-CC in different Aruba devices

    Posted Feb 04, 2025 08:49 AM
    • In Aruba Instant there is no additional subcription needed.
    • In Aruba AOS8 you need a per AP Web-CC subcription for 1,3,5,7 or 10 year
    • In Aruba AOS10 there is no additional subcription required and Web-CC is part of the AP Foundation subcription.

    In Aruba Instant AOS8 you create a virtual cluster where on AP is the Master, which is limited.

    In Aruba AOS10 all APs are dedicated and work on its own (there is no virtual controller anymore), management is done by Aruba Central. 



    ------------------------------
    Marcel Koedijk | MVP Expert 2024 | ACEP | ACMP | ACCP | ACDP | Ekahau ECSE | Not an HPE Employee | Opinions are my own
    ------------------------------



  • 3.  RE: WEB-CC in different Aruba devices

    Posted Feb 04, 2025 09:06 AM

    Hi,

    Thank you for your prompt reply.

    Yes the main architectural differences are clear for us. We are curious about the deep details. For example is there any main difference about the operation or is there any configuration what we can do if we use controller but we cant if we use aos10 with central. Last but not at least the most important technical question about the object size because we face with this limitation with VMC and we have to know we wont face with this limitation on other Aruba architecture eg. AOS10+Central.

    Cs




  • 4.  RE: WEB-CC in different Aruba devices

    Posted 30 days ago

    Not sure what you exactly want to do, but WebCC for website classification (category/trust) uses a web service in the back (Webroot BrightCloud to be more specific) and caches results so it doesn't need to request the same URL every time. For AOS10, this happens on the AP for bridged clients, on the gateway for tunneled clients. Also gateways will have more processing power and memory as there are more clients. I haven't really heard of scaling issues with WebCC, and VMC may be an exception, but doesn't exist in AOS10 so would not be an issue.

    It may be good to work with your partner or local HPE Aruba Networking SE to more exactly discuss what you want to deploy, at what scale and then check if there are limitations in that specific scenario instead of looking for limitations that are not there in most cases.



    ------------------------------
    Herman Robers
    ------------------------
    If you have urgent issues, always contact your HPE Aruba Networking partner, distributor, or Aruba TAC Support. Check https://www.arubanetworks.com/support-services/contact-support/ for how to contact HPE Aruba Networking TAC. Any opinions expressed here are solely my own and not necessarily that of Hewlett Packard Enterprise or HPE Aruba Networking.

    In case your problem is solved, please invest the time to post a follow-up with the information on how you solved it. Others can benefit from that.
    ------------------------------



  • 5.  RE: WEB-CC in different Aruba devices

    Posted Feb 05, 2025 05:40 AM

    Hello,
    I hope i understood youre question the right way.
    Also its my very first reply on here.

    So I know in InstantOn the Accesspoints have the possibilitys for a WebCC filter. 
    Although you can only choose some categorys which will be blocked.

    On the Aruba Gateways there is also a WebCC Filter which is working with BrightCloud from the company Opentext.
    It gets its information from a Database.
    You can filter by Categorys like in InstantOn or also by things like Web Reputation or Web category.
    You can check how Domains are rated on the BrightCloud website.

    WebCC on AOS8 and 10 -> Central are similar to InstantOn I assume.

    So the most configuration you will get is with the Aruba Gateways.
    Also if you have the Gateway in Aruba Central you can see which clients went on which Domain and if its blocked or not.
    In combination with Aruba Accesspoints if you enable APPRF -> Deep Packet Inspection, for the Clients who are connect via WLAN.

    I hope this helps you a bit.

    Greetings
    Vincent