A customer asks about whether Aruba ESP provides Intrusion Prevention System (IPS) capabilities. What should you reply?

Question

Options

• AAruba Threat Detection, within Aruba Central, provides IPS capabilities.
• BThe customer must add Aruba ClearPass OnGuard to Policy Manager to receive these
• CThe customer must Integrate the solution with third party tools to receive any IPS capabilities.
• DAruba ClearPass Device Insight provides IPS capabilities.

• A
  18% (11)
• B
  71% (44)
• C
  3% (2)
• D
  8% (5)

Explanation

Option B is correct because Aruba ClearPass OnGuard is an endpoint security agent that provides host-based IPS capabilities, but it must be deployed as an add-on to ClearPass Policy Manager - it is not included by default in the base Aruba ESP platform. Without explicitly adding OnGuard to Policy Manager, IPS enforcement at the endpoint level is not available.

Why the distractors are wrong:

• A is wrong because Aruba Threat Detection (in Aruba Central) provides AI-powered threat analytics and visibility, but this is detection/alerting - not active intrusion prevention.
• C is wrong because Aruba does offer native IPS capabilities through its own portfolio (ClearPass OnGuard), so third-party integration is not required.
• D is wrong because ClearPass Device Insight is focused on AI-based device discovery and IoT profiling - it classifies and inventories devices, but does not perform IPS functions.

Memory tip: Focus on the word "OnGuard" - it literally guards endpoints, making it the IPS component. Pair it with "Policy Manager" because OnGuard needs the policy enforcement engine to act on what it guards against. If you remember "OnGuard adds IPS to Policy Manager," you won't confuse it with Device Insight (which profiles) or Threat Detection (which alerts).

No community discussion yet for this question.