Security

Hi,

We are designing a guest wireless solution for a customer who got offices across country

Requirements are

1. Bespoke service to each office. Captive portal should be customized to each office. I am planning to do using AP-names/location and implement a filter rule based on AP-name/location. There are about 25 locations. I may need to design 25 portals based on location.

2. Solution should support about 1500 guest Users.

3. Self & Paid advertisements should be supported.

What type of licenses I need?. Do I need CPPM license along with guest license for 1500 people? Do I need any advertisement license?

I have looked at the license prices. they are really expensive. I am not sure whether i am making any mistake or not.

Thanks,

You would need at least a ClearPass 5K appliance (virtual or hardware) and
then 1500 guest licenses. There is no license for the advertisement module.



Just keep in mind that a single 5K appliance does not provide any
redundancy. Have you reach out to your Aruba partner?

Hi Mate,

 

Say, If I need to have 25 captive portals based on AP location, i need to have atleast 25 policies.

 

Does that need policy(CPP) license? .. If not, I am happy.

 

Aruba is new to this client. We dont have partner. Need to find one.

 

 

Thanks,

ClearPass isn't licensed by policies. You buy the base appliance (virtual or
hardware) which includes the base licenses, and then add on guest licenses.

I just came across Cisco ISE express , a light version of ISE, only for guest users. It comes for 1/2th cost of Aruba Clearpass guest platform.

 

Is there any light version of Aruba clearpass is available?. Am i missing any funtionality here?..Quick googling shows that both clearpass & ISE express got the same funtionalities.

ISE Express is a very light weight Guest Solution with limited functionality and is not really comparable to ClearPass.

 

• ISE Express is only available as a VM
• ISE Express cannot be upgraded to distributed deployment for scalability
• ISE Express cannot be upgraded for High Availability
• Does not include additional Plus license for Profiling
• Does not include additional Apex license for MDM integration

If you add in the cost of the Apex and Plus subscription only licenses the price comparison is much closer without the upgrade restrictions

Thanks Dennis,

---

If someone wants to use radius server only for guest access, they won't expect all the functionalities that you mentioned. Moreover, this client prefers cheap solution.

 

 

---

You can use High Capacity Guest Mode which will lock some features but double the guest license for free.

HCG doubles platform capacity, it does not double your guest licenses.

My bad, indeed I think I was due for a refresh on this topic ^^.