IoT Security
Integrate IoT Security with Aruba AirWave
Table of Contents
Expand All
|
Collapse All
IoT Security Docs
-
-
- Firewall Deployment Options for IoT Security
- Use a Tap Interface for DHCP Visibility
- Use a Virtual Wire Interface for DHCP Visibility
- Use SNMP Network Discovery to Learn about Devices from Switches
- Use Network Discovery Polling to Discover Devices
- Use ERSPAN to Send Mirrored Traffic through GRE Tunnels
- Use DHCP Server Logs to Increase Device Visibility
- Control Allowed Traffic for Onboarding Devices
- Support Isolated Network Segments
-
Integrate IoT Security with Aruba AirWave
Integrate IoT Security through Cortex XSOAR with Aruba AirWave.
| Where Can I Use This? | What Do I Need? |
|---|---|
|
One of the following Cortex XSOAR setups:
|
Aruba AirWave manages campus networks and uses VisualRF to
create and manage floor plans and provision access points (APs). When you integrate
IoT Security with Aruba AirWave, IoT Security can learn more
information about devices from VisualRF, such as their physical location.
This helps when troubleshooting requires locating a device for physical access.
IoT Security retrieves floor plan maps and imports client information from
Aruba AirWave.
Through the integration, Aruba AirWave sends the following information
through Cortex XSOAR to IoT Security:
- Access points, as well as their locations and SSIDs
- A device's most recent access point
- The physical location for devices, such as site, building, and floor
- The VLAN that a device is assigned to
When IoT Security receives information for devices already in its inventory, it
incorporates any additional information from Aruba AirWave into the data
it previously gathered from network traffic and behavior analysis. Data that
IoT Security already has supersedes duplicate or conflicting data from
Aruba AirWave. For all other types of data, whatever is the most recent
takes precedence, regardless of its source. For devices that aren't already in the
IoT Security inventory, IoT Security creates new entries with the data that
Aruba AirWave provides.
Integrating with Aruba Central requires either a
full-featured Cortex XSOAR server or the purchase
and
activation of an IoT Security
third-party integration add-on license, which comes with a free
cohosted Cortex XSOAR instance. The basic plan
includes a license for three integration add-ons, one of which can be used for
Aruba AirWave. The advanced plan includes a license for all supported
third-party integrations.