
Aruba Networks, Inc. 5
Enabling High-Performance for Apple iPads in the Enterprise Aruba White Paper
IT can use the Aruba spectrum analyzer to gain visibility into the RF environment and identify non-802.11 sources of
RF interference and their subsequent effects on WLAN performance. The Aruba spectrum analyzer uses Aruba
access points to scan the spectral composition of 2.4-GHz and 5-GHz radio bands to identify RF interference,
classify its source and provide real-time analysis at the point of the problem.
The resulting data is used to isolate packet transmission problems, over-the-air QoS and trafc congestion caused
by RF contention with other devices operating in the same band or channel. When used in conjunction with ARM’s
infrastructure-based controls, iPad and other Wi-Fi client behavior is optimized automatically and access points stay
clear of interference.
With Aruba, iPads Integrate Easily into the Enterprise WLAN
Apple iPad and the applications running on it should not adversely affect the existing set of enterprise devices and
applications. IT administrators need to have the necessary tools to make sure that only the required set of
applications are enabled on Apple iPad, based on end user demand.
For instance, Aruba WLAN implements application-aware trafc ltering to further improve overall network
performance by removing unnecessary multicast and broadcast trafc from the Wi-Fi network. Such trafc utilizes
low 802.11 data rates, which requires more transmission time over the air. Removal of this trafc signicantly
improves channel availability. Aruba’s application-aware quality of service (QoS) allows you to ensure the
performance of key business applications and limit recreational applications on the network.
After determining that there aren’t any critical business applications that must use broadcast or multicast, you can
use the Aruba Drop Multicast and Broadcast Trafc feature to limit or drop trafc. This limit can be applied to the
SSID, which affects the entire network, or to a specic user role or a specic application, which provides ne-grained
control over which clients can’t send what type of broadcast and multicast trafc. For instance, IT administrators can
limit access to Bonjour and iTunes on Apple iPad by blocking port 5353 and port 3689.
Another example is performance protection enabled by Aruba’s ARM technology. This prevents performance of
higher-speed clients (e.g., 802.11n-capable such as Apple iPad) from being adversely affected by the presence of
slower 802.11a/b/g clients. In turn, it also guarantees 802.11 channel availability for legacy 802.11a/b/g clients in the
presence of high density of 802.11n clients associated to same access point radio.
Aruba Delivers Strong Security
Aruba’s solutions are tailored to meet today’s exacting regulatory compliance requirements. Aruba’s security
measures include identity-based access control, stateful rewall, wireless intrusion detection and logging. These
security measures help organizations mitigate risk in a simpler, most cost-effective way.
Both Aruba WLAN and Apple iPad support IEEE 802.1X for end-user and device authentication and Wi-Fi Protected
Access WPA2 with Advanced Encryption Standard (AES) for data encryption. Use of WPA2-AES allows the use of
802.11n data rates during wireless client to Aruba AP communication.
Aruba’s identity-based security enhances your organization’s security posture by eliminating excess privilege on the
network while providing identity-based auditing of activity. You can use Aruba’s role-based access control to assign
roles to users and devices based on their authentication. The role, which is enforced by the rewall policy, can be
dened on the basis of user identity, device identity via authentication credentials, device type and other factors.
You can give iPads and other Wi-Fi clients a unique role with access to network resources that are appropriate to
your organization’s security policy. Roaming employees can have a simple, uniform way to access the network from
wherever they are. Guests can be restricted in accordance with IT policies. IT does not need any special VLANs, IP
subnets, external rewall ACL conguration, or external network access control appliance conguration to enable
role-based policy enforcement for Apple iPads within the Aruba WLAN.
Comentarios a estos manuales