Aerohive First Feb 2019 - Infinigate

1 | © 2018 Aerohive Networks. All Rights Reserved.

FIRSTFLEXIBILITY

INSIGHTS

RADICAL SIMPLIFICATION

SECURITY

TECHNOLOGY LEADERSHIP


Aerohive uses Cloud Management, Machine Learning, and Artificial

Intelligence to radically simplify and secure the Access Network.

Our Cloud Managed Wireless, Switching, Routing, and Security technologies

provide unrivalled flexibility in deployment, management, and licensing.

Credited with pioneering Controller-less Wi-Fi and Cloud Management,

Aerohive delivers continuous innovation at Cloud-speed that constantly

challenges the industry norm, allowing customers to rethink what’s possible.

Our innovations and global cloud footprint radically simplify Access Network

operation for 30,000+ customers and 10+ million daily users.

Vision



FLEXIBILITY


▪ Flexibility

⎻ Public Cloud, Private Cloud, and/or Local Cloud Management

⎻ Subscription-free and/or Advanced subscription

⎻ Portable APs, Switches, and Routers

⎻ Portable Advanced Subscription

⎻ Vendor-agnostic Cloud-Managed NAC

(F)IRST


Public Cloud, Private Cloud, and Local Cloud Management Deployment Options

Aerohive offers the unique ability to seamlessly operate across and move between its Public Cloud, Private Cloud,

and/or Local Cloud Management deployment options, providing unrivaled flexibility to meet current and future

business needs.

Only Aerohive offers this level of “flexibility” because:

⎻ We use the same Cloud Architecture everywhere

⎻ We use the same Operating System everywhere

⎻ We are true micro-services based everywhere

FLEXIBILITY

▪ Publicly hosted

▪ Real-time updates

▪ Infinitely scalable

▪ Multi-Tenant

▪ Machine Learning

▪ Artificial Intelligence

▪ Microservices-based

▪ Virtually Hosted On-Prem

▪ Semi-annual updates

▪ Scalable to 5K devices

▪ Multi-tenant



▪ Privately hosted

▪ Monthly updates

▪ Infinitely scalable

▪ Multi-Tenant


▪ Artificial Intelligence


Public LocalPrivate

INFLEXIBLE

NETWORKS


Subscription-free and/or Advanced-subscription Cloud Management Options

Aerohive offers the unique ability to seamlessly, securely, and operationally mix or move between its Subscription-Free

(Connect) or Advanced-Subscription (Select) Public or Private Cloud Management options, providing unrivaled flexibility

to meet current and future business needs.





CONNECT

Subscription

FREE

SELECT

Advanced

Subscription

FLEXIBILITY

$$$INFLEXIBLE

SUBSCRIPTIONS

CONNECT

Subscription

FREE

SELECT

Advanced

Subscription

Public Private


KG

Portable APs, Switches, and Routers Across all Cloud Management Options

Aerohive offers the unique ability to seamlessly and securely move its Access Points, Switches, and Routers within or

between any of its Cloud Management deployment options - without a new license - without flashing hardware -

without learning new syntax - providing unrivaled flexibility to meet current and future business needs.





FLEXIBILITY

INFLEXIBLE

HARDWARE

LocalPublic Private


Portable Advanced Subscription Across all Cloud Management Options

Aerohive offers the unique ability to seamlessly move your Advanced Subscription (Select) Cloud Management license

between its Public Cloud, Private Cloud, and/or Local deployment options, providing unrivaled flexibility to meet

current and future business needs.





FLEXIBILITY

DASHBOARDHEATMAPSCONFIG / POLICY REPORTSTROUBLESHOOT ANALYTICS & APIs

CONNECT DISCOVER PROVISION MANAGE GO GROW

LocalPublic Private

INFLEXIBLE

LICENSE


Vendor-agnostic Cloud-Managed NAC solution

Aerohive offers a unique Cloud Managed and “vendor agnostic” capability to secure and control wireless and wired

client devices across and between all major security vendors and access networking vendors, radically simplifying NAC

while providing unrivaled flexibility to meet current and future business needs.





FLEXIBILITY

LocalPublic Private

se

cu

rity

ne

two

rkin

g

INFLEXIBLE

VENDORS


INSIGHTS


▪ Insights

⎻ Client 360

⎻ Network 360

⎻ Comparative Analytics

⎻ Proximity, Presence, & Location

⎻ Cloud Networking Telemetry

F(I)RST


INSIGHTS

Client 360

Client 360 is derived using Aerohive’s true microservices Cloud architecture, API-driven Cloud-Management, and

native machine learning capability to securely collect, process, and rapidly analyze vast amounts of client data from a

customers network to accurately depict the “total client experience” in both real-time and historical views.

Client 360 value is:

⎻ Real-time “total client experience” in a single view

⎻ Historical “total client experience” in a single view

⎻ Machine Learning calibrated client health metrics

⎻ Single source of “truth” for client troubleshooting

⎻ 30 Days of auditable client experience data

Client 360 is the single source of truth and ultimate

tool for IT administrators to quickly track down and

prove false, or validate and troubleshoot a past or

real-time client experience issue.


INSIGHTS

Network 360

Network 360 is derived using Aerohive’s true microservices Cloud architecture, API-driven Cloud-Management, and

native machine learning capability to securely collect, process, and rapidly analyze vast amounts of data from a

customers network to accurately depict the “network health” in both real-time and historical views.

Network 360 value is:

⎻ Real-time “access network health” in a single view

⎻ Historical “access network health” in a single view

⎻ Machine Learning calibrated network health metrics

⎻ Single source of “truth” for access network health

⎻ 30 Days of auditable access network health data

Network 360 is the single source of truth and

ultimate tool for IT administrators to quickly track

down and prove false, or validate and troubleshoot a

past or real-time network issue.


INSIGHTS

Comparative Analytics

Comparative Analytics are derived using Aerohive’s true microservices Cloud architecture, API-driven Cloud-

Management, and native machine learning capability applied across its global Cloud footprint of 30,000+ networks, to

securely and anonymously collect, process, and rapidly analyze vast amounts of data to generate client and network

operational comparisons between similar sized networks in the same vertical.

Comparative Analytics value is:

⎻ Machine Learning comparison to networks in similar verticals

⎻ Machine Learning comparison to similar sized networks

⎻ Real-time comparison data to identify where to improve

⎻ Historical comparison data to verify improvement

⎻ 30 Days of auditable comparison data

“To measure is to know where to improve...”

-Lord Kelvin.

Comparative Analytics is the ultimate tool for an IT

administrator to measure the effectiveness of their

network using well-known KPIs to similar sized

networks in the same vertical.


INSIGHTS

Proximity, Presence, & Location

Proximity, Presence, & Location are all derived using Aerohive’s true microservices Cloud architecture, API-driven

Cloud-Management, and native machine-learning capability. Presence and Proximity Tabs are integrated in to

Aerohive’s HiveManager. Location is available via API telemetry/webhook.

Proximity, Presence, & Location value is:

⎻ Proximity = Situation awareness of Bluetooth/BLE devices

⎻ Presence = Situational awareness of Wi-Fi users/devices

⎻ Location = Quadrangulation of Wi-Fi users/devices

⎻ 30 days of auditable Proximity & Presence data

Proximity & Presence are maturing in to necessary

datasets for IT administrators tasked with helping

the business understand facilities utilization,

disaster planning, or simply finding a lost device.

Location is an intensive dataset that has made IT

administrators delivering it invaluable in verticals

that need pinpoint accuracy to closely track

operational assets and/or user behavior


INSIGHTS

Cloud Networking Telemetry

Cloud Networking Telemetry leverages Aerohive’s true microservices Cloud architecture, API-driven Cloud-

Management, and native machine learning capability to enable a customer to customize and receive the API-driven

client and network telemetry that is most important to them.

Cloud Networking Telemetry value is:

⎻ Invaluable to customers building API-driven applications

⎻ Reduces the number of applications they have to use

⎻ Allows them to define and accurately track KPIs

⎻ Enables them to collect and store data longer

⎻ Analyze and calibrate their own thresholds

Cloud Networking Telemetry is the ultimate in

flexibility for those customers building their own API-

driven applications to operate their network. They

get only what they need, when they need it, and are

in complete control of determining KPIs, setting

thresholds, and data storage.




▪ Radical Simplification

⎻ Licensing

⎻ Deploying

⎻ Scaling

⎻ Updating

⎻ Interfacing

FI(R)ST



Licensing

Aerohive’s licensing model radically simplifies an IT administrator’s license management workload. Aerohive is the

only Cloud Networking vendor to offer an “all-inclusive single device license” that covers everything in Aerohive’s

Cloud Networking portfolio. Our common and true microservices based Cloud Networking architecture allows us to

offer a single license that works across everything in our full-stack Access Networking portfolio, unlike competitors

who put the squeeze on IT administrators with tiered licenses or make them struggle to manage multiple

architectures using different licensing schemas,

▪ Aerohive’s “all-inclusive single device license” covers:

⎻ All Aerohive APIs

⎻ All Aerohive devices (APs, Routers, Switches)

⎻ All Aerohive advanced features

⎻ All Aerohive deployment options



Deploying

With over a decade of investment in development, Aerohive’s deployment functionality is proven to radically simplify

IT operations at both a micro and macro scale. Micro or Macro zero-touch deployment of APs, Switches, and Routers

is simple and scalable because of well-thought out configuration defaults, global network policy technology, plug &

play automation and our recently developed cloud configuration groups. Our deployment simplicity and scalability is

consistently rated the #1 reason a customer buys and expands their implementation with Aerohive.

▪ What is the value of Aerohive’s deployment model:

⎻ Speed. Well-thought out defaults that ‘just work’ speed up building configurations

⎻ Simplicity. Unique network policy technology makes deploying at any scale a non-issue

⎻ Exception Handling. Easily group devices on the fly to accommodate operational exceptions

⎻ Plug & Play. Automated discovery protocols and instant mesh make installations effortless



Scaling

Aerohive’s scaling model radically simplifies an IT administrator’s work life across 2 key operational dimensions:

1. Aerohive’s true microservices Cloud Networking architecture, API-driven Cloud-Management linearly scales in cost

from 1 to 10’s of thousands of managed devices. There are no stair-step surprises in licensing or compute cost

when growing for an IT administrator to worry about.

2. Aerohive’s Cooperative Control (distributed Control & Data Plane/centralized Management Plane) used by its

Access Points eliminates Control Plane aggregation/bottleneck points common across all our competitors, thereby

delivering a linear bandwidth increase with every additional Access Point installed.

▪ What is the value of Aerohive’s scaling model:

⎻ Linear cost for growth

⎻ Linear bandwidth increase



Updating

Aerohive’s updating model radically simplifies an IT administrator’s work life across 2 critical operational dimensions:

1. Updates to Aerohive’s Cloud do not automatically update devices under management, avoiding the ripple effect

inherent in competitive Cloud architectures that do automatically update.

2. Aerohive infrastructure devices running different versions of Aerohive’s operating system (HiveOS) are designed

and tested to interoperate with each other and with Aerohive’s Cloud, putting the IT administrator in full control of

when, what, and where to do an update.

▪ What is the value of Aerohive’s updating model:

⎻ Cloud updates do not automatically propagate – no risk

⎻ IT administrator is in control of when, what, and where to update

⎻ IT administrator can easily stage, isolate and test software before deployment



Interfacing

Aerohive offers the unique ability for IT administrators and their departments to interface with our HiveManager

application and the devices and clients under management using multiple user interfaces. We design, build, and

constantly improve the following interfaces:

▪ HTML = Everyday use and lengthy interaction

▪ CLI = Real-time, deep dive situations

▪ Alexa = Quick checks and shortcuts

▪ API = Telemetry to your own apps

▪ What is the value of Aerohive’s interfacing model:

⎻ User choice in what they use

⎻ Flexibility in how they use it


SECURITY


▪ Security

⎻ Firewall on the Access Point

⎻ Private Pre-Shared Key (PPSK)

⎻ PPSK Context-Based Access

⎻ Private Client Groups (PCG)

⎻ Cloud-Managed Network Access Control (NAC)

FIR(S)T


Firewall on the Access Point

Aerohive originated putting a native stateful Firewall capability on its Access Points 10+ years ago. Aerohive’s unique

distributed control and data plane architecture (Controller-less, Cloud-Managed) affords the ability for a L2 – L7 deep

packet inspection capability on its Access Points to filter and prioritize user and application traffic closer to where a

user enters the network than competitive offerings.

Aerohive’s Firewall on the AP value is:

⎻ Actioned before the user gets to the network. Eliminating need to traverse network to reach Core Firewall

⎻ Delivers better performance per client. More Firewall compute per client at the AP than at Core Firewall

⎻ Reduces size and cost of Core Firewall. Significant traffic dropped at edge before it reaches Core Firewall

SECURITY

Because Aerohive puts a Firewall on the Access Point we help

IT secure the network closer to where the user enters their

network and the client experience is improved because there is

more Firewall compute proportionally per connected client on

the AP than a Core Firewall.


Private Pre-Shared Key (PPSK)

Aerohive invented and patented Private Pre-Shared Key (PPSK) technology and has been improving upon it for 10+

years. Aerohive’s PPSK technology is compatible with any Wi-Fi client that supports PSK and enables IT to replicate

802.1X level security with less complexity and ongoing overhead. Aerohive’s PPSK technology is proven in 30,000+

network implementations supporting many millions of clients everyday.

Aerohive’s PPSK value is:

⎻ Unique pre-shared keys created for individuals or groups of users on the same SSID

⎻ Unique keys offer users or groups of users equivalent level of security as 802.1X

⎻ Compatible with any PSK capable device without modifying the client device

⎻ Replicates 802.1X level security, without the cost and complexity of 802.1X

⎻ Can be distributed individually or in bulk through automation

SECURITY

Aerohive’s unique PPSK technology is the perfect tool for IT

organizations to quickly, easily, and securely onboard and

manage corporate owned, BYOD, guest, and unstaffed IoT

devices using a common authentication technology that does

not require any client side software.

Key 3

Philips

Lightbulb

IoT

Device

Key 2

Sarah

Guest

Personal

Device

Key 1

Dave

Marketing

Corp

Device

PRIVATE PRE-SHARED KEY

Ideal For: BYOD, Guest, IoT


PPSK Context-Based User Access

Aerohive’s PPSK context-based user access can secure everyone, everything, everywhere. Using PPSK context-based

user access an IT administrator can simply and easily define a policy or policies that determine which users, devices,

and things can enter the network based on their assigned PPSK and then granularly and contextually control what they

can do once connected to the network.

Aerohive’s PPSK context-based access value is:

⎻ Provides appropriate network access based on their device, location, and time of day


⎻ Provides the same level of security as 802.1X with less cost and complexity

SECURITY

Aerohive’s unique PPSK context-based user access

technology is an extension of its unique PPSK

technology and is the perfect tool for IT organizations

to simply and easily provide context-based user access

to their network.


Private Client Groups (PCG)

Private Client Groups (PCG) used in conjunction with Aerohive’s Private Pre-Shared Key (PPSK) technology delivers a

unique, secure, and simple to manage micro-segmentation networking capability. It is a unique capability that no

competitor can offer as simply or securely as Aerohive does. PCG enables an IT administrator to setup “private groups”

of wireless and/or wired client devices that an authorized PPSK user can seamlessly connect to as they roam across a

common SSID/domain.

Aerohive’s PCG value is:

⎻ PCG’s for an individual user’s personal devices

⎻ PCG’s for voice-over-Wi-Fi phones

⎻ PCG’s for unstaffed IoT devices

SECURITY

SSID: Organization

PPSK: ABCDE001

SSID: Organization

PPSK: ABCDE002

SSID: Organization

PPSK: ABCDE003


Cloud-Managed Network Access Control (NAC)

Aerohive A3 is the industry’s first Cloud-Managed Network Access Control (NAC) solution. A3 includes Cloud-Managed

onboarding, authentication, and A3 secures, manages, and controls wireless and wired Corporate, BYOD, Guest, and

IoT client devices. A3 is vendor-agnostic and is compatible with all major access networking and security vendors.

Aerohive’s A3’s value is:

⎻ Cloud-Managed NAC that reduces operational complexity and cost

⎻ Vendor-agnostic - compatible with all major access networking vendors

⎻ Vendor-agnostic - compatible with all major security vendors

SECURITY

Aerohive’s Cloud-Managed A3 is the perfect, vendor-

agnostic, tool for an IT administrator to secure, manage,

and control all the wireless and wired client devices on

their network, for less cost and with less complexity than

traditional on-premises offerings.

Billing

IntegrationNetwork Access

Control

Device

Management

Compliance

& Remediation

Device

Profiling

Authentication

& Registration




▪ Technology Leadership

⎻ First with a family of 802.11ax Access Points

⎻ First with Enterprise-grade Pluggable Wi-Fi

⎻ First with ISO 27001 certifications

⎻ First with Controller-less architecture

⎻ First with Private Pre-Shared Key (PPSK)

FIRS(T)



First with Family of Enterprise 802.11ax Access Points

Aerohive was/is the first manufacturer to fully embrace 802.11ax. Aerohive currently has the most choice in Access

Points for customer moving to 802.11ax. Aerohive was first to commit, first to ship, first to certify and first in

achieving successful customer deployments with 802.11ax. Aerohive is committed to being on the leading edge of

802.11ax development and offering customers an ever-expanding family of 802.11ax capable Access Points.

Aerohive has also extended its lead in previously developing Dual 5.0 GHz in an Access Point to the 802.11ax family.

Why our 802.11ax stands out:

⎻ First to commit

⎻ First to build a family

⎻ First to broadly certify

⎻ First to ship in volume

⎻ First to successfully install

⎻ Dual 5.0 GHz capable

⎻ WPA3/SAE compliance



First with Enterprise Pluggable Access Points

Aerohive was/is the first manufacturer to bring pluggable Enterprise-grade Access Points – Atom AP30 – to market on

a global basis. Wi-Fi is the primary connectivity for the Enterprise moving forward and having a rapidly deployable,

simple to install, pluggable Enterprise-grade Access Point allows IT to connect hard to reach and previously

unconnectable personnel and places quickly, securely, and cost effectively.

Where is Aerohive’s Atom AP30 value:

⎻ Quickly eliminate Wi-Fi dead zones

⎻ Easily solve density issues in meeting spaces

⎻ Instantly extend secure corporate connectivity

⎻ Simply connect the previously unconnected

⎻ Cost effectively solve for MDU connectivity


First with ISO 27001 certification

Aerohive is the first major competitor in Cloud Networking to achieve ISO 27001 certification. ISO 27001 is a 3rd party

inspected and audited certification that verifies a company has established, operates, monitors, and maintains a

comprehensive information security management system in accordance with industry best practices.

Aerohive’s ISO 27001 certification value is:

⎻ 3rd party verification of Aerohive’s Cloud effectiveness

⎻ Increased reliability of Aerohive's Cloud operation

⎻ Increased security of Aerohive’s Cloud operation


The only people who do not respect an ISO 27001

certification are the competitors who do not have it.


First with Controller-less Architecture

Aerohive’s was/is the first manufacturer to fully distribute both the control and data planes, and then centralize the

management plane to eliminate “controller” chokepoints that negatively impact scalability and increase the cost of data

forward and especially “control” of the network. 10 years after it was first introduced almost every competitive

manufacturer has developed a variation of Aerohive’s controller-less architecture, but none of them have been able to

fully replicate our patented architecture’s efficiency.

What is the value of Aerohive’s fully Distributed Control & Data Planes with Centralized Management:

⎻ Fully and more evenly distribute data and control plane traffic -- No chokepoints or single points of failure

⎻ Maximize value per dollar spent for every operating device -- No chokepoints to reduce efficiency

⎻ Fully eliminate potential of a widespread outage -- No chokepoints or single points of failure



First with Private Pre-Shared Key (PPSK)

Aerohive was/is the first manufacturer to invent and patent Private Pre-Shared Key (PPSK) technology and has been

improving upon it for 10+ years. Aerohive’s PPSK technology is compatible with any Wi-Fi client that supports PSK

and enables IT to replicate 802.1X level security with less complexity and ongoing overhead. Aerohive’s PPSK

technology is proven in 20,000+ network implementations supporting many millions of clients everyday.

Aerohive’s PPSK value is:

⎻ Unique pre-shared keys created for individuals or groups of users on the same SSID

⎻ Unique keys offer users or groups of users equivalent level of security as 802.1X


⎻ Replicates 802.1X level security, without the cost and complexity of 802.1X

⎻ Can be distributed individually or in bulk through automation


Key 3

Philips

Lightbulb

IoT

Device

Key 2

Sarah

Guest

Personal

Device

Key 1

Dave

Marketing

Corp

Device

PRIVATE PRE-SHARED KEY

Ideal For: BYOD, Guest, IoT


Aerohive uses Cloud Management, Machine Learning, and Artificial

Intelligence to radically simplify and secure the Access Network.

Our Cloud Managed Wireless, Switching, Routing, and Security technologies

provide unrivalled flexibility in deployment, management, and licensing.

Credited with pioneering Controller-less Wi-Fi and Cloud Management,

Aerohive delivers continuous innovation at Cloud-speed that constantly

challenges the industry norm, allowing customers to rethink what’s possible.

Our innovations and global cloud footprint radically simplify Access Network

operation for 30,000+ customers and 10+ million daily users.

Vision


Documents

Aerohive First Feb 2019 - Infinigate