Ruckus Cloudpath
Security and Policy Management Platform

Overview:

Ruckus Cloudpath Enrollment System (ES) software is a security and policy management platform that enables IT to easily and definitively secure the network, secure users and secure wired and wireless devices. Cloudpath software consolidates and simplifies the deployment of multiple services that are typically disparate and complex to manage: Certificate Management, Policy Management and Device Enablement.

The only integrated security and policy management platform that delivers:

• Cloud-managed deployment option
• Multi-tenancy
• User-based licensing, not device-based
• Pre-boarding (remote automated onboarding)
• Chrome extension to automate Chromebook onboarding

In the Cloudpath architecture, new devices join the network via open SSID or wired connection, at which point the user is redirected to the Cloudpath ES portal. Cloudpath software authenticates and authorizes the user; then configures the device with a certificate or a profile and secure networks. The software then moves the device to the secure SSID or the secure wired network. The device authenticates using the certificate or installed profile and Cloudpath software processes the RADIUS authentication.

Devices may also enroll over the web; allowing users to activate devices at a physically separate location. Devices then securely join the network when in its vicinity. Cloudpath is available as both an on-premises virtual instance or as a cloudmanaged deployment, each with equivalent functionality.

Put passwords in your rear-view mirror

Cloudpath ES software includes a built-in, comprehensive Certificate Authority (CA) that enables any IT department to create and manage its own Public Key Infrastructure (PKI). With PKI, your organization is protected by the gold standard in wireless security: WPA-2 Enterprise via X.509 certificates. Passwords are just a memory.

Network access control: it's a must

Certificates are one part of the Cloudpath security equation. Policy-based access control is the other. Cloudpath ES software lets IT associate each device with a user; then establish fine-grained policies for both. The software works together with policy enforcement points to make unauthorised access and persistent bad behavior a thing of the past.

Now, about those BYOD devices

Just getting devices securely onto the network is half the battle for IT; BYOD adds more time and complexity. What if users-even bring your own device (BYOD) users-could self-onboard any and all of their devices? With the simple onboarding portal in Cloudpath ES, they can. IT can control the types of devices that are allowed access and ensure the requisite on-device enforcement, all while seeing a dramatic reduction in service and trouble tickets.

The missing link: guest access

You've secured owned and BYOD devices but what about guests and their devices? Cloudpath software includes comprehensive guest access functionality that secures guest devices just as easily and thoroughly as the rest, while providing abundant authentication options. And Cloudpath software is infrastructure-agnostic, so no matter the environment, you can treat all of your guests the same-or differently.

Certificate Management

Cloudpath ES software includes a built-in, comprehensive Certificate Authority (CA) that enables any IT department to create and manage its own Public Key Infrastructure (PKI). A built-in RADIUS server and user database greatly simplifies installation and setup and helps in tying policies with certificates. In addition to built-in capabilities, APIs and other mechanisms enable Cloudpath software to easily integrate with existing external CA, RADIUS and user database infrastructures.

Policy Management

Cloudpath ES software provides IT with a simple, workflow-based policy management portal that can be used to establish granular policy-based access control for all users and all devices. The policy engine identifies client and user privileges and applies the correct policies to each user and each device. The software works together with policy enforcement points to ensure policies are properly exercised.

Device Enablement

Cloudpath ES software makes possible portal-based, self-service onboarding for end users and their devices and further enables pre-boarding for users and devices prior to their arrival at a given location. To ensure the network is properly protected, administrators can control which devices are allowed to join the network and can ensure the requisite on-device enforcement, such as enabling a firewall, installing certain applications, or updating anti-virus software.