Executive Summary

Vandis’ MSP team will provide the ability to securely authenticate wired and wireless devices for your employees and guests. Vandis’ managed Aruba Networks ClearPass offering will deliver a Network Access Control solution within your Azure environment. If you already have an existing NAC configuration, Vandis’ Networking and Security specialists will review, optimize, and migrate your policies to your Azure environment.

This offering can be combined with Vandis’ other offerings based around connectivity and cloud security to create a holistic solution that addresses cloud and premise security as well as SaaS Authentication and Authorization.

Offering Description

Leveraging our vast expertise in ClearPass and Microsoft Azure best practices, the Vandis Engineering team will deploy an architecture that best suits the needs of your organization.

Under this offering, Vandis’ team will implement Aruba Networks ClearPass to secure your network through 802.1x authentication for wired and wireless networks, guest authentication, and network devices via TACACS+ and RADIUS.

Vandis’ Managed Services will provide ongoing support with 24/7 monitoring of the Active Directory and ClearPass devices deployed in Azure. Included in this managed service are custom alert notifications, ad hoc break/fix support and change request support provided by Vandis Certified Engineers including escalation, as needed, to Microsoft Support Services.

Scope of Work

• If not already established, deploy Active Directory within Azure
• Create and configure a ClearPass instance(s) within Azure
• Join an existing on-prem publisher (if applicable)
• Optional InTune integration

For New Deployments

• Deploy wireless 802.1x with RBAC policies via Active Directory authentication
• Develop guest self-registration workflow
• Implement network authentication via TACACS+ or RADIUS
• Create custom alerting and monitoring profiles

Deliverables

• Fully managed and monitored ClearPass instance(s) (for appliances in Azure)
• Onboarding into Vandis Managed Services with operational runbook