HPE J9522A Getting Started Guide

QuickSpecs

HP Mobility Security IDS/IPS System Series

Overview

c04111696 — DA – 13410 Worldwide — Version 9 — December 1, 2014

Page 1

HP Mobility Security IDS/IPS System Series

Models

HP RF Manager Controller with 50-sensor License

J9521A

HP RF Manager for VMware 50 Sensor E-LTU

9838AAE

HP MSM415 RF Security Sensor

J9522A

Key features

 Automatic intrusion threat detection and prevention
 Central management of security policies
 Complete reporting and predefined compliance reports
 Roles-based administrative rights
 Appliance and VMware-ready form factors

Product overview

The HP Mobility Security IDS/IPS System is comprised of HP RF Manager and MSM415 Sensors. HP RF Manager in combination with
the MSM415 Sensor detects and prevents wireless threats with automated policy-based security and location-tracking capabilities
with full support for all IEEE 802.11 WLAN networks.

The system eliminates false positive alerts and uses patented automatic classification and mitigation techniques to block
unauthorized wireless traffic without disrupting the performance of authorized wireless devices. The HP MSM415 RF Security
Sensor is required to continuously scan IEEE 802.11a/b/g/n networks for wireless threats and enforce their mitigation.

The HP Mobility Security IDS/IPS System prevents multiple threats while scanning for new ones, providing industry-leading
wireless protection, and it can be deployed to enforce a no-WiFi policy. It has predefined compliance reports for the Health
Insurance Portability and Accountability Act (HIPAA), PCI, the Sarbanes-Oxley Act, the Gramm-Leach-Bliley Act, and Department of
Defense (DoD) Directive 1800.2.

Features and benefits

Intrusion detection/prevention system (IDS/IPS)

 Industry-leading threat detection

protects your organization from emerging threats, including comprehensive IEEE 802.11n rogue APs, Multi-Pot threats,
denial-of-service (DoS), and WEP cracking attacks; DoS prevention disrupts malicious behavior and reclaims bandwidth
for your authorized APs and clients, keeping your mission critical applications running at optimal efficiency

 360 degree visibility into wireless traffic

o HP RF Manager enables customers to protect both wired and wireless networks from wireless vulnerabilities
o by continuously scanning the airwaves, RF Manager automatically protects businesses against data leakage

through the wireless network

o RF Manager can rapidly and proactively detect and eliminate threats through accurate and robust automated

classification of wireless devices including smartphones and tablets

 Simplified and comprehensive reporting tools

automated report generation and delivery make complex wireless audits a "hands-off" process

 Scalable from midmarket to large enterprise

o supports all HP wireless solution
o manage up to 250 sensors per HP RF Manager (J9521A) or up to 600 sensors per HP RF Manager for VMware

(J9838AAE); (note that controllers prior to J9521A support a lower maximum number of sensors)

 Advanced WIPS option

o WLAN Performance Management summarizes issues with configurable alerts on bandwidth, configuration, RF

coverage, and interference status, has customizable controls for severity, display, notification, and real-time
alerts of performance events

RETIRED: Retired products sold prior to the November 1, 2015 separation of Hewlett-Packard Company into Hewlett Packard Enterprise Company and HP Inc. may

have older product names and model numbers that differ from current models.

QuickSpecs

HP Mobility Security IDS/IPS System Series

Overview

c04111696 — DA – 13410 Worldwide — Version 9 — December 1, 2014

Page 2

o Smart Forensics enables two-click drill down for accurate threat detection/analysis, physical location tracking,

and audit trails of system/admin actions

o supported only on RF Manager v6.0 and later

Technical features

 Wireless IDS/IPS features

o accurately autoclassifies APs and client devices using patented autoclassification techniques to block genuine

threats

o automatically prevents denial-of-service attacks and more than 20 threats simultaneously from a single sensor

while continuing to scan for threats

o pinpoints the physical location of vulnerable or threat-posing devices
o blocks unauthorized traffic without network disruption
o detects and locates non-WiFi interference and RF jamming

 Protection against rogue IEEE 802.11a/b/g/n access points and wireless networks

leverages the HP MSM415 sensor to provide 24x7 security detection and prevention capabilities for the wireless network

 WEP cracking and impersonation attacks

protect against active WEP cracking and impersonation attacks

 Identification of performance problems

occurs proactively before impact to end users; categorizes the potential source, such as configuration issues (specifically
incorrect channel allocation, sub-optimal IEEE 802.11n protocol settings), bandwidth (poor utilization, low average, data
rate, excessive overhead), and RF (non-WiFi interference, channel crowding)

 Integration with HP MSM Controller

reduces administration time and effort through automatic synchronizing of authorized APs and clients with MSM
controllers

 Central management of security policies

gives administrators the flexibility to customize wireless security policies with site-specific guidelines

 Out-of-the-box and custom reports

emailed hourly, daily, or at custom-defined intervals, these reports help to ensure that administrators always have the
essential information they need to manage the network effectively

 Automated regulatory compliance reporting

o simplifies performing internal and regulatory audits with easy-to-use auditing and reporting tools
o predefined reports map wireless vulnerabilities to specific data security compliance standards, such as PCI,

Sarbanes-Oxley (SOX), HIPAA, Gramm-Leach-Bliley (GLBA), and DoD Directive 8100.2

o on-wire/off-wire classification filters neighboring devices from the reports, eliminating the guesswork and time

needed to validate vulnerability scans

 Roles-based administrative rights

provide the proper levels of security and management access over the network and the RF Manager Controller
management interface

 Location-based policy management

simplifies the security and administration of a distributed WLAN deployment through granular, customizable policies
localized on a site-by-site, region-by-region or even floor-by-floor basis.

 Offline sensor operation

o provides full security coverage (detection, classification, and prevention) even when there is no connectivity

between the sensor and the RF Manager

o raises alerts/events, stores them, and synchronizes them with the RF Manager on reconnection

 Integration with HP RF Planner

allows importing of planning and device placement information from HP RF Planner

Warranty and support

 Limited Lifetime Warranty v2.0

advance hardware replacement with next-business-day delivery (available in most countries). See

www.hp.com/networking/warrantysummary for duration details.

RETIRED: Retired products sold prior to the November 1, 2015 separation of Hewlett-Packard Company into Hewlett Packard Enterprise Company and HP Inc. may

have older product names and model numbers that differ from current models.

QuickSpecs

HP Mobility Security IDS/IPS System Series

Overview

c04111696 — DA – 13410 Worldwide — Version 9 — December 1, 2014

Page 3

 Electronic and telephone support (for Limited Lifetime Warranty 2.0)

limited 24x7 telephone support is available from HP for the first 3 years; limited electronic and business hours telephone
support is available from HP for the entire warranty period; to reach our support centers, refer to

www.hp.com/networking/contact-support; for details on the duration of support provided with your product purchase,

refer to www.hp.com/networking/warrantysummary

 Software releases

to find software for your product, refer to www.hp.com/networking/support; for details on the software releases
available with your product purchase, refer to www.hp.com/networking/warrantysummary

RETIRED: Retired products sold prior to the November 1, 2015 separation of Hewlett-Packard Company into Hewlett Packard Enterprise Company and HP Inc. may

have older product names and model numbers that differ from current models.