Adam Kennedy, HPE Aruba Networking (00:08):
Good morning guys. How are you? Everyone? Well, anyone stay out too late last night? Yes. Yes, yes. So my name's Adam Kennedy. I'm the consulting engineer for global service provider at Hewlett Packard Enterprise, but more specifically the Aruba networking arm. Anyone familiar with the Aruba brand or the Aruba products in the audience? Yes. No, nobody you are. I'm going to pick on you, sir. Can you tell me when Aruba was founded as a company? Aruba was actually founded in 2002, and the reason that I bring that up is experience in this space actually really matters. We were a cloud first native company founded in 2002. So we have a long longevity of providing security solutions to organizations, to communities, to global service providers. And I bring this up because we've always been focused at Aruba on three main things. The applications that users like yourself are using in the network, the devices and your credentials as a user that permits you to do your job.

(01:04):
And also all of the influx of the devices that are on the network Now, the massive devices that you're seeing around this venue, sensors, iot sensors, cameras, even the devices that you're carrying in your phone. But we've always been very, very centric on providing something called Role-based access control for all these devices. So security has always been part and paramount to what we do as an organization. We were actually acquired by Hewlett Packard in 2015, and we now lead actually the networking arm of Hewlett Packard Edge Networking. So all of the leadership from Aruba was brought on board to lead that portfolio go forward. So we've got a longstanding history of experience to provide secure applications across the board in our entire portfolio. Of course, all of this is now being ingested by our broader GreenLake portfolio and more specifically Aruba Central. Aruba Central is the cloud native networking program and platform that terminates connections and configuration for all of our networking devices, our access points, our switches, our gateways, and also provides that central point of policy and enforcement for all of these devices within the network.

(02:08):
And why is that important? People like yourself require connectivity. Your network operators and your providers and your organization want to provide that to you. People demand it no matter where they go, but of course, security is always a concern within that space. What we want to do is ensure that we're providing the least amount of privilege and ensuring that your actually privileges are mapped through your duration in connection through the network. Regardless if you come on board to the network over the wire or over the wireless, we have a means to profile your device to ensure that we're actively providing a common user experience and a good user experience on the basis of your credentials. And the concept is zero. Trust is talked about very, very frequently, but it's actually more difficult to provide than what you might think. Anyone out in the bar last night? Anyone go for drinks, stay out too late. So what I'd like to talk about when I talk about zero

(02:58):
Trust is a couple of different facets. When you get to a bar or a restaurant, they check your idea at the door, they make sure you're of age to order sangria. But if I get in, clearly I'm old enough to have sangria, I get in, they can say that I'm actually allowed to be in the bar because my credentials match what I'm saying. But after I've had four pictures of margaritas, my persona may change. I might start to act a little bit differently. So it's not just about getting your security at the door, it's about providing that pervasively as you continue to move through the network. So we continuously monitor people's personas and their devices, and of course, all of that information is ingested into the GreenLake data platform. So when you connect to Aruba and Aruba Central, we're not only profiling you and your devices against your network and your company, we're harnessing the broader power of the GreenLake Data Lake to compare you to other devices in that space, looking for anomalies, looking for things that should require remediation.

(03:52):
If we see deviations, we're actively able to change your role, to change your persona, to quarantine you, or even remove you from the network on demand in real time. It's a system that we call dynamic segmentation. We do this regardless of, again, if you come in over the wire, if you come in over the wireless, if you're a headless iot device or it's a corporate laptop, if we notice that there's an anomaly and a device is suddenly uploading large amounts of data in the middle of the night, we know that that triggers and we action that information using our AI engine in AR Central to provide remediation and also positive experiences for the network operators that are providing the network connectivity. There's a lot of things that make up zero trust. You're probably familiar with many of the acronyms on this screen, and we're very cognizant that there's a lot of islands of people out there.

(04:39):
We're very cognizant that we're not the only vendor in this space. We've recently made a couple of acquisitions. One was a company called Silver Peak. It was done in 2018. That is our full fridge enterprise SD WAN platform. More recently, we've acquired a company called Access Security natively. Aruba did things very, very intrinsically from an east west perspective securing devices. We were very focused on premise security, but with the recent acquisitions, we're now able to extend that type of security in the cloud regardless of your cloud provider per application, per user, and per stream. So again, we have the ability to provide a full stack solution, but we're also very cognizant that there are many islands and we actually have by way of a few of our acquisitions, a couple of products that will help you get off of those islands. In 2011, we acquired a company called Aveda, which has now been rebranded as Aruba ClearPass.

(05:29):
Aruba ClearPass is a third party vendor agnostic product, which is our secure NAC policy engine and AAA enterprise grade radius server. And it supports a multitude of providers. We support and have actually large deployments of our competitors on ClearPass without a single piece of Aruba hardware. So we have vendor agnostic solutions to help you get off of some of those islands. And of course, at the time that you're ready to have a conversation about full Stack, we would love to have that conversation with you. So what should it really look like? It needs to incorporate all of the things that you do. So again, I mentioned earlier the applications, the things and the users and the credentials that actually provide that network connectivity. Of course, it has to include a unified portfolio. At Aruba, we have one singular portfolio. There is not a separate S skew depending on how you want to deploy our service. Any one of our products can be deployed in a multitude of ways, whether it's small office, home office, a regional campus, or a large venue such as this. It also needs to operate anywhere. So we have on-prem solutions, of course, our cloud-based solutions probably the most predominant. And the ability to, of course, acknowledge that some people are accessing client and connectivity in the data center and their own environment or cloud providers. And we also have the ability to actually deploy on-prem.

(06:47):
The real crux of this is providing a single point of construct for your universal visibility. And again, that is Aruba Central. Aruba Central provides you that central point of policy management and enforcement for all of the devices within the network. And of course, we have now the ability to provide global policy across the board. Again, regardless of your device, whether it's a headless iot device or whether it's your corporate laptop providing a unified policy. And we're constantly monitoring your user session to provide that quality of experience throughout the lifespan of your time on that network. And again, providing that information northbound to our data lake, comparing anomalies in real time to ensure a good user experience. And also ensuring that any anomalies are remediated and removed from the network Edge cloud enforcements, it's across the entire portfolio. All of our access points actually have a staple firewall built in, as do our controllers.

(07:35):
So we're very much a security first company. All of our products inclusive of SD-WAN have unified IDS and IPS and Unified threat management. So again, we take security very cautiously and close to heart at Aruba. Of course, it's not complete without AI automation. Part of this is also providing that rich telemetry to vendor operators and global service providers to help them understand how to remediate things when things actually go wrong. Sometimes it is the wifi, but most times it's actually not the wifi. It's something in between that is impacting that user experience. But with Aruba GreenLake and Aruba Essential, we're able to provide that in a single stack. But again, also want to help you get off the island that you may be on. And with that, I thank you for your time.