Security

last person joined: yesterday 

Forum to discuss Enterprise security using HPE Aruba Networking NAC solutions (ClearPass), Introspect, VIA, 360 Security Exchange, Extensions, and Policy Enforcement Firewall (PEF).
Expand all | Collapse all

Clearpass Nodes vs. License

This thread has been viewed 1 times
  • 1.  Clearpass Nodes vs. License

    Posted Sep 28, 2016 12:55 PM

    Hi guys,

    I have a question about the licensing in a Clearpass Cluster deployment using virtual Appliances. Let´s say we have 4 locations: 4000, 1500, 1000 and 500. Can we buy 2* 5K to cover all the endpoints and deploy 4 Appliances to every location?

     

    Thanks,

     

    Marc



  • 2.  RE: Clearpass Nodes vs. License

    EMPLOYEE
    Posted Sep 28, 2016 01:00 PM
    Appliances (virtual or hardware) come in 500, 5K and 25K. If you need one at
    each site, you would need to pick a size that's applicable to each site.


  • 3.  RE: Clearpass Nodes vs. License

    Posted Sep 28, 2016 01:47 PM

    So we would need for the given locations 3* 5K and 1* 500 at least. Is that correct?



  • 4.  RE: Clearpass Nodes vs. License

    Posted Sep 28, 2016 02:27 PM

    Some customers especially with virtual environments will get multiple 500 to have redundancy and get to the licensing requirements they need. 2 CP-VA-500 is about $2,000 list price less than 1 CP-VA-5K for reference.



  • 5.  RE: Clearpass Nodes vs. License

    Posted Sep 30, 2016 08:52 AM

    Every Appliance must have a License and every License must have an Appliance.

     

    But, depending on your needs, a 500 appliance may be able to handle 1000 users.  I ran 12k users on a single 5k appliance at one point on a demo license without issue.

     

    So, it really depends on your WAN architecture and the complexity of your policies (If the ClearPass at another site can act as backup for the local site.)  Your cheapest build would probably be 2 5k's and 2 500's.

     

    But I don't represent Aruba in any way and couldn't tell you what support would say if you had problems.