Network security

What is network security?

Different hardware and software solutions are deployed on user devices, servers, data centers, and in the cloud to secure the network. These solutions enable security teams to provide proper network authorization and block potential threats by implementing and enforcing security policies. Ideally, these products are configured in-line with broader business security policies and work with each other to achieve strong network security. 

Network security includes physical, virtual, agent-based, and agentless solutions such as:

• Device profiling and visibility: Agent-based and agentless solutions providing visibility into type and behavior of edge devices connecting to the network. These visibility insights act as the first step in securing the network and help security teams in device discovery, device profiling, and custom fingerprinting.
• Authentication: Agent-based and agentless solutions providing role-based authentication for edge devices trying to connect to the network. A NAC (network access control) solution authenticates user or device identity against a wide variety of identity sources, to support robust network security.
• Role-based access security or authorization: Enforcing least privilege access to the edge devices and providing authorization to access only relevant part of the network by segmenting traffic based on identity or role and associated access permissions.
• Conditional monitoring: Continuous monitoring requires solutions that provide real-time threat telemetry by constantly monitoring edge devices. Different products work individually and together to track edge-device behaviour and flag any potentially malicious activity to network access control (NAC) systems for further action. Continuous monitoring solutions include:
  • Unified threat management/IDS/IPS: Intrusion detection provides threat intelligence on malicious activities including command and control, ransomware, phishing, malware, spyware, trojans, and exploit kits. Intrusion prevention detects malicious activities and performs actions like blocking the traffic to protect against malicious activity.
  • Web content classification, IP reputation and geolocation filtering: Content filtering blocks specific websites that are potentially harmful. Web content filtering helps identify websites that propagate malware, spam, spyware and phishing attacks, as well as websites with sensitive content such as adult or gambling content. IP Reputation services provide a real-time feed of known malicious IP addresses in 10 categories so IT security administrators can easily identify threats by type. Geolocation filtering services associate source/destination IP addresses with location. It allows organizations to apply policies to permit or drop inbound or outbound communications with countries of concern.
  • SIEM or interoperable products: SIEMs help security teams detect, analyze, and respond to security threats.
  • Secure SD-WAN: SD-WAN solutions are used to efficiently connect users and applications. A secure SD-WAN solution has built-in security capabilities and works with other elements within the security ecosystem to enforce strong network and application security from edge-to-cloud. 
• Enforcement and Response: When malicious activity is suspected of or observed participating in an attack, the NAC (network access control) solution can take either guided or automated attack response to preserve network security. Security teams also deploy different types of firewalls for robust network security enforcement.
  • Firewall: A network firewall is hardware or software that restricts and permits the flow of traffic between networks. Network firewalls help prevent cyberattacks by enforcing policies that block unauthorized traffic from accessing a secure network.
  • Next gen firewall: Next generation firewalls add advanced capabilities like application-level packet inspection and intrusion prevention to traditional packet-filtering network firewall capabilities. 

In today’s world workers access corporate networks from home, cafés, airports, etc. They also consume a lot of SaaS apps that are not hosted in corporate data centers or private clouds. Besides securing the network, security teams need a robust Security Service Edge (SSE) solution to reduce potential attack surface and improve application security for SaaS and web services.

HPE Aruba Networking security-first, AI-powered networking offers improved security, performance, and control. Now organizations have a common foundation for networking and security operations to achieve shared universal visibility, global policy management, end-to-end enforcement, and AI-powered automation—connecting and protecting all users, devices, apps, and data across the entire infrastructure.

HPE Aruba Networking Central NetConductor provides an end-to-end, cloud-native network automation and orchestration solution that automatically configures LAN, WLAN, and WAN infrastructure across branch, campus, and data center to deliver optimal network performance while defining and enforcing granular security policies that are the foundation of Zero Trust and SASE architectures. Central NetConductor comprises: Client Insights to deliver AI-powered device visibility and profiling; Cloud Auth to deliver cloud-based authentication; Policy Manager and CX Switches and Gateways for cloud-based NAC and in-line policies distribution, monitoring and enforcement.

HPE Aruba Networking also offers enterprise grade network access control with ClearPass. ClearPass Policy Manager (CPPM) offers profiling for device visibility, support a wide range of authentication and authorization protocols, integrates with Policy Enforcement Firewall for dynamic segmentation, is compatible with a large ecosystem of 3^rd-party vendors for conditional monitoring, and provides real-time security enforcement and response based on enterprise security protocols.

The HPE Aruba Networking EdgeConnect SD-Branch solution is equipped with IPS, IDS, Web content classification, IP reputation and geolocation filtering functionalities.

HPE complements its strong network security solutions with HPE ProLiant DL360 Gen10 servers and HPE Pensando SmartNIC, that allows organizations to experience hardware-based networking and security acceleration. Incorporating hardware telemetry, firewalling, encryption, and micro-segmentation, this offering simplifies data encryption through API.