Wireless Access

 View Only
last person joined: yesterday 

Access network design for branch, remote, outdoor, and campus locations with HPE Aruba Networking access points and mobility controllers.
Expand all | Collapse all

deny app

This thread has been viewed 11 times
  • 1.  deny app

    Posted Jul 26, 2022 05:47 AM
    i try to deny apps through role but it seems Aruba mobility controller not showing any application running and the deny role not working , and idea


  • 2.  RE: deny app

    EMPLOYEE
    Posted Jul 26, 2022 07:24 AM
    Do you have PEF licensing enabled? Do you have AppRF/Firewall visibility enabled on the controller?

    What firmware version are you running? On what type of controller?

    ------------------------------
    Herman Robers
    ------------------------
    If you have urgent issues, always contact your Aruba partner, distributor, or Aruba TAC Support. Check https://www.arubanetworks.com/support-services/contact-support/ for how to contact Aruba TAC. Any opinions expressed here are solely my own and not necessarily that of Hewlett Packard Enterprise or Aruba Networks.

    In case your problem is solved, please invest the time to post a follow-up with the information on how you solved it. Others can benefit from that.
    ------------------------------



  • 3.  RE: deny app

    Posted Jul 26, 2022 07:35 AM

    dear MR.Herman 

    please find below my answers to your question


    Do you have PEF licensing enabled? 

    yes its enabled


    Do you have AppRF/Firewall visibility enabled on the controller?


    enable firewall visibility is checked/ enabled

    What firmware version are you running? On what type of controller?

    ArubaMC-VA-IL, 8.10.0.1 LSR , aruba mobility controller




    thanks for helping 








     

    -------------------------------------------------------
    Samer Sulaiman
    Head of Information Security Section

    Phone: 00970 (02)   2969700    Ext. 742
    Fax: 00970 (02)   2969712
    Mobile: 0097 (059) 8993110
    [Pls. try 972 if code 970 is not accessible]
    ssulaiman@elections.ps
    www.elections.ps
    www.facebook.com/CECPalestine
    www.youtube.com/cecpalestine

    --------------------------------------------------------






  • 4.  RE: deny app

    EMPLOYEE
    Posted Jul 26, 2022 10:09 AM
    Do you have your SSID configured as 'tunneled'? In bridged mode AppRF won't work...

    If that is the case, please open a TAC case as the basic things seem configured correct.

    ------------------------------
    Herman Robers
    ------------------------
    If you have urgent issues, always contact your Aruba partner, distributor, or Aruba TAC Support. Check https://www.arubanetworks.com/support-services/contact-support/ for how to contact Aruba TAC. Any opinions expressed here are solely my own and not necessarily that of Hewlett Packard Enterprise or Aruba Networks.

    In case your problem is solved, please invest the time to post a follow-up with the information on how you solved it. Others can benefit from that.
    ------------------------------



  • 5.  RE: deny app

    Posted Jul 26, 2022 11:52 AM

    I just conver 22 access point from free virtual controller to aruba mobility controller and i configure ssid thats it , when i try to apply role it dosnt take effect



    Sent from my Galaxy








     

    -------------------------------------------------------
    Samer Sulaiman
    Head of Information Security Section

    Phone: 00970 (02)   2969700    Ext. 742
    Fax: 00970 (02)   2969712
    Mobile: 0097 (059) 8993110
    [Pls. try 972 if code 970 is not accessible]
    ssulaiman@elections.ps
    www.elections.ps
    www.facebook.com/CECPalestine
    www.youtube.com/cecpalestine

    --------------------------------------------------------






  • 6.  RE: deny app

    EMPLOYEE
    Posted Jul 27, 2022 03:10 AM
    Do you have your SSID configured as 'tunneled'? In bridged mode AppRF won't work...

    ------------------------------
    Herman Robers
    ------------------------
    If you have urgent issues, always contact your Aruba partner, distributor, or Aruba TAC Support. Check https://www.arubanetworks.com/support-services/contact-support/ for how to contact Aruba TAC. Any opinions expressed here are solely my own and not necessarily that of Hewlett Packard Enterprise or Aruba Networks.

    In case your problem is solved, please invest the time to post a follow-up with the information on how you solved it. Others can benefit from that.
    ------------------------------



  • 7.  RE: deny app

    Posted Jul 27, 2022 03:15 AM

    yes in forwarding mode : tunnel is selected








     

    -------------------------------------------------------
    Samer Sulaiman
    Head of Information Security Section

    Phone: 00970 (02)   2969700    Ext. 742
    Fax: 00970 (02)   2969712
    Mobile: 0097 (059) 8993110
    [Pls. try 972 if code 970 is not accessible]
    ssulaiman@elections.ps
    www.elections.ps
    www.facebook.com/CECPalestine
    www.youtube.com/cecpalestine

    --------------------------------------------------------






  • 8.  RE: deny app

    Posted Jul 27, 2022 03:38 AM

    i see more than tunnel option there 


    tunnel 

    decrypt-tunnel

    split-tunnel

    and bridge








     

    -------------------------------------------------------
    Samer Sulaiman
    Head of Information Security Section

    Phone: 00970 (02)   2969700    Ext. 742
    Fax: 00970 (02)   2969712
    Mobile: 0097 (059) 8993110
    [Pls. try 972 if code 970 is not accessible]
    ssulaiman@elections.ps
    www.elections.ps
    www.facebook.com/CECPalestine
    www.youtube.com/cecpalestine

    --------------------------------------------------------






  • 9.  RE: deny app

    EMPLOYEE
    Posted Jul 27, 2022 08:21 AM
    Tunnel is ok, that should get the traffic through the controller and allow AppRF to do application classification.

    It looks basics are good, best would be to open a TAC Support case to do some interactive troubleshooting on your deployment.

    ------------------------------
    Herman Robers
    ------------------------
    If you have urgent issues, always contact your Aruba partner, distributor, or Aruba TAC Support. Check https://www.arubanetworks.com/support-services/contact-support/ for how to contact Aruba TAC. Any opinions expressed here are solely my own and not necessarily that of Hewlett Packard Enterprise or Aruba Networks.

    In case your problem is solved, please invest the time to post a follow-up with the information on how you solved it. Others can benefit from that.
    ------------------------------