The stateful Policy Enforcement Firewall provides context-based controls to enforce application-layer security and prioritization. You can enforce network access policies based on user roles, device types, app flows, location, and more.

• Network security designed specifically for mobility.
  The Policy Enforcement Firewall provides user-level awareness of all traffic across the network. This eliminates the cost and complexity associated with manually configuring static VLANs, access control lists, and the wired switch infrastructure.
• Intelligent application visibility and control.
  With unprecedented visibility, AppRF technology in the Policy Enforcement Firewall leverages deep packet inspection to classify over 1,500 enterprise apps and features a policy wizard to block, prioritize and limit bandwidth for any app or groups of apps.
• The flexibility to separate any type of traffic flow.
  With contextual policies based on identities, devices and location, you can satisfy the needs of different groups of users with a single wireless network configuration. Traffic flows simply adapt to the mobility state of the mobile user and device.

RFProtect software prevents denial-of-service and man-in-the-middle attacks and mitigates over-the-air security threats. You’ll never need to purchase and install separate RF sensors or security appliances if you have an Aruba wireless LAN.

• Integrated threat protection with every Aruba WLAN.
  It’s easy to reduce deployment and management costs by leveraging Aruba access points to simultaneously serve Wi-Fi clients and contain wireless threats with RFProtect. This eliminates the need for expensive overlay IDS systems with dedicated sensors.
• 24/7 protection against attacks and potential threats.
  You can protect your entire network against unauthorized Wi-Fi clients and ad hoc networks by continuously scanning the RF environment, centrally evaluating forensic data, actively containing rogue devices, and locking-down device configurations.
• Automate regulatory and compliance reporting.
  Compliance reporting and distribution can be easily tailored to fit your unique audit requirements. This reduces the time needed to satisfy PCI, HIPAA, DoD 8100.2, GLBA, and other industry compliances as well as internal corporate regulatory mandates.

The VPN services in ArubaOS include the Virtual Intranet Access (VIA) client, a hybrid IPsec/SSL VPN. By supporting VPNs to third-party systems, your Aruba infrastructure becomes a vital part of any secure, private network deployment.

• The easiest way for devices to get a VPN connection.
  Completely Wi-Fi-aware, VIATM automatically scans the air, finds the best connection, and launches a VPN-on-demand to the corporate network. It offers a zero-touch user experience and enables automatic configuration of Wi-Fi settings on mobile devices.
• Keep thousands of remote users connected to work.
  Employees who work remotely can easily install an Aruba AP to securely access the corporate network. Once they’re connected, the experience is just as if they’re at the office, thanks to a zero-touch VPN link to an Aruba controller in the data centre.