Aruba Networks Introduces PCI Compliance Reporting in New AirWave Wireless Management Suite 6.2

SUNNYVALE, CA--(MARKET WIRE)--Jan 12, 2009 -- Aruba Networks, Inc. (NasdaqGM:ARUN - News), a global leader in wireless LANs and secure mobility solutions, today announced the release of AirWave Wireless Management Suite 6.2. The new management suite includes Payment Card Industry (PCI) Data Security Standard (DSS) compliance reporting. The PCI standard defines security guidelines for merchants and service providers that store, process and transmit cardholder data. The newly introduced in-depth compliance reporting feature evaluates individual managed devices against several PCI requirements to validate that safeguards are working as intended. The report also summarizes any intrusions detected by the wireless intrusion protection system, as well as any detected rogue wireless access points.

"Enforcing strong access controls and audit trails around sensitive data and systems can provide a compliance-compensating control," said Avivah Litan, VP Distinguished Analyst at Gartner. "The 'deny all except what is absolutely required' dogma should be adhered to. Security audits should be conducted continuously or as frequently as possible, and not be limited just to what's required by PCI."*

Besides PCI compliance reporting, the AirWave Suite 6.2 includes several additional new security and monitoring features including among others:

 
--  Enhanced rogue access point detection and workflow, including
    additional levels of rogue classification;
--  RADIUS authentication for administrators to address the PCI
    requirement that all systems adhere to centralized AAA, use strong
    passwords, rotate passwords regularly, and maintain an external audit
    trail;
--  SSID-based statistics collection and report filtering for tracking the
    migration of devices away from WEP to PCI-compliant security methods;
--  Monitoring support for Cisco 871 Routers.

In addition to the AirWave management products, Aruba offers integrated security and wireless/wired access solutions that meet or exceed the wireless LAN-specific security requirements in the latest PCI DSS v1.2. Merchants using an Aruba networking solution can cost-effectively implement the security controls required for PCI compliance without compromising the performance of business applications or upgrading legacy networks.

"Firewalls, encryption, authentication, and wireless intrusion detection are mandated for use with all wireless LANs in the latest PCI standard, and the new report makes quick work of assessing important elements of compliance with the standard," said Bryan Wargo, general manager of Aruba's AirWave division. "The newest PCI standard defines testing methodologies intended to ensure that the twelve major steps for securing payment account information have been satisfied. Undertaking these tests manually is time consuming, inefficient, and prone to human error. AirWave Suite 6.2 automates much of this work, encouraging users to run reports on a frequent basis so that issues can be identified and corrected faster. Given the monetary penalties of out-of-compliance violations, AirWave Suite 6.2 will offer welcome relief to merchants."

A new white paper, "Security Is In The Air," that describes how merchants can comply with the newest PCI DSS Version 1.2 standard, can be downloaded from Aruba's Web site at http://www.arubanetworks.com/pdf/technology/whitepapers/wp_PCI.pdf.

* "PCI Compliance Remains Challenging and Expensive," Avivah Litan, Gartner, Inc., 16 May 2008 and "Limiting the Scope of Payment Card Industry Audits and Liability," John Pescatore and Avivah Litan, Gartner, Inc., 29 February 2008

About Aruba Networks

People move. Networks must follow. Aruba securely delivers networks to users, wherever they work or roam. Our mobility solutions enable the Follow-Me Enterprise that moves in lock-step with users:

 
--  Adaptive 802.11a/b/g/n Wi-Fi networks optimize themselves to ensure
    that users are always within reach of mission-critical information;
--  Identity-based security assigns access policies to users, enforcing
    those policies whenever and wherever a network is accessed;
--  Remote networking solutions and fixed mobile convergence ensure
    uninterrupted access to applications as users move;
--  Multi-vendor network management provides a single point of control
    while managing both legacy and new wireless networks from Aruba and its
    competitors.

The cost, convenience, and security benefits of our secure mobility solutions are fundamentally changing how and where we work. Listed on the NASDAQ and Russell 2000® Index, Aruba is based in Sunnyvale, California, and has operations throughout the Americas, Europe, Middle East, and Asia Pacific regions. To learn more, visit Aruba at http://www.arubanetworks.com.

© 2009 Aruba Networks, Inc. AirWave®, Aruba Networks®, Aruba Mobility Management System®, Bluescanner, For Wireless That Works®, Mobile Edge Architecture, People Move. Networks Must Follow., RFProtect, The All Wireless Workplace Is Now Open For Business, Green Island, and The Mobile Edge Company® are trademarks of Aruba Networks, Inc. All rights reserved.

     Media Contacts
      
     Michael Tennefoss
     Aruba Networks, Inc.
     +1-408-754-8034
     mtennefoss@arubanetworks.com
      
     Patty Oien
     Breakaway Communications
     +1-415-358-2482
     poien@breakawaycom.com