SAP America, the US subsidiary of SAP AG, has adopted Aruba Wireless Networks' grid controllers as the security standard for its Internet Cafe service at SAP offices worldwide. Aruba's grid products were specifically developed to secure internal network threats that have arisen because of wireless and mobile technology. For the first time, corporations will be able to grant wired and wireless access controls on a per user basis.

SAP can now centralize critical security functions like encryption, authentication, identity management, and policy-based access controls within a single, high performance system. This enables administrators to grant selective access to users who may be collaborating over one central network.

For example, SAP can create separate security zones for particular users not requiring distinct firewalls to be created for every user. Aruba's grid security enables administrators to grant network access from particular locations, like a conference room, but not from another. The same infrastructure can now be used by all SAP users whether they are accessing the network using wired or wireless connections.

"Wireless technology and the need for mobility are changing the face of network security forever," said John Harford, director of network services, SAP America. "Corporations everywhere must deal with the fact that there is no such thing as a trusted network and understand how to implement levels of trust among a widely diverse base of users and devices. With Aruba's grid architecture and products, SAP can now easily and with more flexibility create different security zones for all types of users and users groups."

Once particular users are identified, Aruba's grid enables powerful security policies to be applied that can follow the user, for however long a session may last. With granular access controls, SAP can grant network access for only certain times of the day. By doing so, SAP eliminates the requirement, time, and cost to deploy discrete in-line security appliances everywhere to protect against such problems.

SAP is also using Aruba grid controllers to protect against unauthorized wireless access points, suppression of improvised networking and classification of interfering or neighboring APs. The new grid controller will enable SAP to uniquely inspect packets, redirect traffic, and follow suspect sessions such as POP3, SMTP, FTP or HTTP, commonly used to transmit viruses. These sessions can now be automatically diverted to antivirus systems before entering the network.

Client traffic can be redirected to best-of-breed remediation systems that ensure end points are up-to-date with the latest software security patches, registry settings, and other important security policies before stations are granted access to the network. SAP is initially deploying Aruba grid points in Newtown Square, PA, and plans to rollout Aruba grid controllers in each of its regional and branch offices locations through the United States.