Integrate Device Security with Aruba AirWave
Focus
Focus
Device Security

Integrate Device Security with Aruba AirWave

Table of Contents

Integrate Device Security with Aruba AirWave

Integrate Device Security through Cortex XSOAR with Aruba AirWave.
Where Can I Use This?What Do I Need?
  • Device Security (Managed by Strata Cloud Manager)
  • (Legacy) IoT Security (Standalone portal)
One of the following subscriptions:
  • Device Security subscription for an advanced Device Security product (Enterprise Plus, Industrial OT, or Medical)
  • Device Security X subscription
One of the following Cortex XSOAR setups:
  • A free, cohosted, limited-featured Cortex XSOAR instance
    AND
    A Cortex XSOAR Engine (on-premises integration)
  • A full-featured Cortex XSOAR server
Aruba AirWave manages campus networks and uses VisualRF to create and manage floor plans and provision access points (APs). When you integrate Device Security with Aruba AirWave, Device Security can learn more information about devices from VisualRF, such as their physical location. This helps when troubleshooting requires locating a device for physical access. Device Security retrieves floor plan maps and imports client information from Aruba AirWave.
Through the integration, Aruba AirWave sends the following information through Cortex XSOAR to Device Security:
  • Access points, as well as their locations and SSIDs
  • A device's most recent access point
  • The physical location for devices, such as site, building, and floor
  • The VLAN that a device is assigned to
When Device Security receives information for devices already in its inventory, it incorporates any additional information from Aruba AirWave into the data it previously gathered from network traffic and behavior analysis. Data that Device Security already has supersedes duplicate or conflicting data from Aruba AirWave. For all other types of data, whatever is the most recent takes precedence, regardless of its source. For devices that aren't already in the Device Security inventory, Device Security creates new entries with the data that Aruba AirWave provides.
Integrating with Aruba Central requires either a full-featured Cortex XSOAR server or the purchase and activation of an Device Security third-party integration add-on license, which comes with a free cohosted Cortex XSOAR instance. The basic plan includes a license for three integration add-ons, one of which can be used for Aruba AirWave. The advanced plan includes a license for all supported third-party integrations.