OnConnect.pdf

Wired networks have been overlooked in terms of access control, with focus primarily on wireless networks, leading to security gaps. The growth of IoT devices on wired networks is causing security concerns. Two options are available to bring wired networks closer to the same level of control as wireless networks: non-AAA enforcement and identity-based 802.1X authentication. Non-AAA enforcement is convenient, with minimal configuration, and allows for device profiling and policy enforcement. 802.1X authentication is more secure, providing real-time certificate or login and password-based authentication, and better options for authorization of device privileges. Both options can be used to enforce policies on wired and wireless networks, with recommendations to deploy an option that supports both, such as Aruba ClearPass, to provide a consistent user experience and enhanced security.