For a traditional design requiring secure segmentation + identity, what’s the recommended pairing?

Aruba ClearPass Policy Manager is a Network Access Control (NAC) platform that provides secure, identity-driven network access. For traditional designs requiring segmentation, ClearPass identifies and profiles users and devices, then assigns a specific role. This role is used to enforce granular, role-based policies (e.g., firewall rules, VLAN assignment, QoS) at the network edge (switch or access point). This pairing directly links a user's or device's identity to their network access privileges, creating dynamic and secure segmentation. This method is central to the Aruba Dynamic Segmentation architecture, ensuring consistent policy enforcement across wired and wireless networks.

B. Only ACLs on ToR switches: This method provides segmentation based on static IP addresses, not identity. It is difficult to manage at scale and less secure than identity-based controls.
C. Tape vaulting policies: This is a data backup and disaster recovery process for long-term storage and has no relevance to network segmentation or identity-based access control.
D. Unmanaged guest SSID everywhere: This approach is the antithesis of secure segmentation. It provides broad, uncontrolled network access, creating a significant security risk rather than mitigating it.

1. Aruba Dynamic Segmentation Solution Guide: In the "How it works" section, it states, "Aruba ClearPass Policy Manager profiles users and devices on the network to centrally define and enforce policies for what they can communicate with... A user or device role is assigned that defines access privileges." (Page 4, "How it works"). This document details the synergy between ClearPass (identity) and role-based policies (segmentation).

2. Aruba ClearPass Policy Manager Data Sheet: The datasheet describes its core function: "ClearPass enables you to define business- and security-oriented policies for network access... based on user roles, device types, and security posture." (Page 1, "Product Overview"). This confirms ClearPass's role in creating and enforcing role-based policies for security.

3. ArubaOS-Switch and Aruba ClearPass Integration Guide: This guide provides technical details on implementation, stating, "ClearPass provides a centralized policy decision point, and the switch acts as the enforcement point... Based on the user authentication results, ClearPass assigns a user role to the client." (Chapter 1, "Introduction"). This highlights the recommended pairing for policy enforcement.