IAPs an create IPSEC tunnels with any 3rd party server that supports a minimum of PSK based authentication on IKEv1.
this will be manual configuration process and there are lots of advantages to use Aruba's vGW instead, not only from configuration but also from monitoring and reporting