HPE ArubaOS Advanced Cryptography Module: технические характеристики и документация
В архивеOverview
|
ArubaOS Advanced Cryptography Module |
|
Provides Maximum Deployment Flexibility |
|
|
|
|
|
Product overview |
|
|
|
The ArubaOS™ Advanced Cryptography (ACR) module brings military-grade Suite B cryptography to Aruba Mobility Controllers, enabling user mobility and secure access to networks that handle controlled unclassified, confidential and classified information. Approved by the U.S. National Security Agency (NSA), Suite B is a set of publicly available algorithms that serve as the cryptographic base for unclassified information and most classified information. Unlike the previous generation of cryptosystems, known as Suite A or Type I, Suite B improves performance, eliminates unwieldy workflows and strict handling requirements, allows interoperability, and supports commercially available mobile devices - all at a fraction of the cost of Suite A. The NSA has authorized the use of Suite B to facilitate the sharing of sensitive and classified information among multiple departments as well as to bring secure mobility to commercial laptops, tablets and smartphones. The ArubaOS ACR module is a licensed option on any Aruba Mobility Controller, allowing governments and organizations that handle sensitive or confidential information to securely and cost effectively utilize commercial mobile technology for classified- grade networks. |
|
|
|
|
|
Features and Benefits |
|
|
|
Suite B Algorithms
Suite B Protocols
Designed for Compatibility
Future-Proof Network Architecture
Simplified Network Design
Fully Accredited
Unified Security Framework Aruba enables universal authentication and encryption for wired and wireless users, regardless of access method. With the Aruba Virtual Intranet Access (VIA) client and ACR, every client that connects to the network - wireless or wired - can authenticate to an Aruba Mobility Controller. Authentication is achieved using standard the 802.1X EAP or IKE, with credential validation through RADIUS or Online Certificate Status Protocol (OSCP). VIA supports authentication using passwords, certificates, smart cards, token cards and other credentials that are supported by the chosen EAP type.
|
|
|
|
Centralized Security Architecture for Classified Networks |
|
|
|
NSA Certified Suite B has been certified by the NSA as part of its Cryptographic Modernization Program, and includes a common set of cryptographic algorithms for use in protecting unclassified information and most classified information up to the Top Secret level. The use of Suite B to protect national security systems in the United States is authorized by CNSSP-15. More details on Suite B and Commercial Solutions for Classified may be found at https://www.nsa.gov/resources/everyone/csfc/ ACR Deployment Scenarios ACR is deployed by activating the ACR module license on an Aruba Mobility Controller and by installing VIA on a wired or wireless device, smartphone or tablet. ACR can be used to secure traffic between an Aruba Mobility Controller and local or remote wired and wireless clients, as well as between two Mobility Controllers on the same VLAN. The Aruba Remote Access Point (RAP) also supports Suite B. Designed for Compatibility The Aruba ACR module is built on public security standards such as 802.1X, TLS, and IPsec. Secure EAP methods supported include EAP-TLS, TTLS, and PEAP, making ACR compatible with existing security mechanisms such as Smart Cards and PKI certificates. ACR is designed to work seamlessly on top of existing Layer 2 and Layer 3 network infrastructures. VIA with Suite B VIA is a VPN client that works with any Aruba Mobility Controller to enable secure connectivity to an enterprise data center from popular device operating systems. Combining the best of IPsec and SSL VPN technology, VIA automatically establishes a secure connection whenever it is needed, and automatically negotiates transport protocols to use SSL when other protocols fail. To enable Suite B connectivity, VIA has been enhanced to support RFC 6379 (Suite B Cryptographic Suites for IPsec). VIA is FIPS 140-2 validated, evaluated under Common Criteria as a VPN client, and listed on the CSfC Components List. VIA with Suite B is enabled with the ArubaOS ACR module and supported on Windows, Mac OS, Linux, Apple iOS, and Android
|
|
|
|
VIA Client Connection Status |
|
|
|
|
|
Enabling Suite B Cryptography on VIA |
|
|
Configuration
|
Ordering Information | |
|
|
|
|
The ACR module is available as a license for Aruba Mobility Controllers and is ordered based on the number of concurrent Suite B sessions supported by the controller. | |
|
|
|
|
Description |
Part Number |
|
Aruba LIC-ACR-8 Controller Advanced Cryptography 8 Session License E-LTU |
JW538AAE |
|
Aruba LIC-ACR-32 Controller Advanced Cryptography 32 Session E-LTU |
JW539AAE |
|
Aruba LIC-ACR-64 Controller Advanced Cryptography 64 Session License E-LTU |
JW540AAE |
|
Aruba LIC-ACR-128 Controller Advanced Cryptography 128 Session License E-LTU |
JW541AAE |
|
Aruba LIC-ACR-256 Controller Advanced Cryptography 256 Session License E-LTU |
JW542AAE |
|
Aruba LIC-ACR-512 Controller Advanced Cryptography 512 Session License E-LTU |
JW543AAE |
|
Aruba LIC-ACR-1024 Controller Advanced Cryptography 1024 Session License E-LTU |
JW544AAE |
|
|
|
|
|
|
|
|
|
Summary of Changes
|
Date |
Version History |
Action |
Description of Change | ||||||||||||||||||
|
23-Oct-2017 |
From Version 1 to 2 |
Changed |
Aruba information updated | ||||||||||||||||||
|
01-Nov-2016 |
Version 1 |
Created |
Document creation. | ||||||||||||||||||
| |||||||||||||||||||||
