Aruba ClearPass Device Insight

ClearPass Device Insight addresses the most stringent visibility requirements for the most diverse network environments. This includes the ability to broadly and accurately identify all wireless and wired devices connected to the network – from traditional IT managed devices to previously undetected IoT devices such as cameras, medical equipment and other hard to detect endpoints.

By utilizing data collection and deep packet inspection techniques, ClearPass Device Insight is able to analyze the characteristics and behavioral patterns of any device and extract specific attributes for each. Some of these attributes include domain name lookup, destination IP addresses, applications accessed, and frequency of communication. These attributes can then be used to identify a device using a set of known fingerprints. If there is not a match, machine learning models are used to group unknown devices that exhibit similar characteristics.

Understanding the inherent risk of each connected device is a critical component of implementing effective security controls and reducing risk. ClearPass Device Insight provides device risk scoring that is calculated based on a number of device security attributes. These attributes include potential vulnerabilities and related CVE scoring, as well as detailed information related to what security controls are enabled on each device such as a host firewall.

ClearPass Device Insight analyzes device attributes including communication and behavior patterns to dynamically build clusters of similar devices. Machine learning models are used to constantly learn and update these attributes to dynamically update fingerprints and provide classification reccomendations. ClearPass Device Insight uses crowd-sourcing technology to validate fingerprints at multiple customer sites before adding them to the Aruba classification database. This increases the precision and comprehensiveness of the classification engine.