Aruba Supervisor360: A Comprehensive Guide to Configuration and Use
Aruba Supervisor360 is a powerful feature within the Aruba Central platform designed to provide managers and supervisors with comprehensive insights into the network usage and performance of their direct reports’ devices. This allows for better understanding of how employees are utilizing network resources, identifying potential performance bottlenecks, and ultimately improving productivity and security. This detailed guide will walk you through the functionalities, configuration, and use cases of Aruba Supervisor360.
## What is Aruba Supervisor360?
Supervisor360, as part of the Aruba Central platform, extends network visibility beyond basic monitoring. It allows designated supervisors to view detailed analytics specifically related to devices associated with their team members. This granular insight enables proactive identification of issues impacting employee performance, such as poor Wi-Fi connectivity, excessive data consumption, or unusual application usage.
Key benefits of using Supervisor360 include:
* **Enhanced Visibility:** Gain a clear understanding of how employees are utilizing the network.
* **Improved Performance Management:** Identify and address network-related issues affecting employee productivity.
* **Proactive Problem Solving:** Detect and resolve potential problems before they impact the entire team.
* **Data-Driven Decision Making:** Make informed decisions about network optimization and resource allocation based on real-world usage data.
* **Enhanced Security Posture:** Detect unusual network activity that may indicate security threats.
## Key Features and Functionalities
Aruba Supervisor360 offers a range of features designed to provide comprehensive network insights. Some of the key functionalities include:
* **Application Usage Monitoring:** See which applications employees are using and how much bandwidth they are consuming.
* **Web Usage History:** Track websites visited by employees, providing insights into browsing habits and potential security risks.
* **Network Performance Metrics:** Monitor key network performance indicators such as Wi-Fi signal strength, latency, and packet loss.
* **Device Health Monitoring:** Track the health and performance of employee devices, including CPU usage, memory utilization, and battery life.
* **Location Services:** View the physical location of employee devices, providing context for network usage and security events (if location services are enabled and permitted).
* **Customizable Dashboards and Reports:** Create personalized dashboards and reports to track specific metrics and trends.
* **Alerting and Notifications:** Configure alerts to notify supervisors of unusual network activity or performance issues.
## Prerequisites
Before configuring Aruba Supervisor360, ensure the following prerequisites are met:
* **Aruba Central Subscription:** You must have an active Aruba Central subscription that supports the Supervisor360 feature. This generally requires a Foundation, Advanced, or higher license.
* **Aruba Network Infrastructure:** Your network must be managed by Aruba Central. This includes Aruba access points, switches, and gateways.
* **User Accounts in Aruba Central:** Employee and supervisor accounts must be created and managed within Aruba Central, synchronized via Active Directory or other identity providers is preferable.
* **Hierarchy Defined in Aruba Central:** A management hierarchy, defining the relationships between supervisors and their direct reports, needs to be established within Aruba Central. This is the most critical step.
* **Devices Associated with Users:** Employee devices must be properly associated with their respective user accounts in Aruba Central. This is typically done through the onboarding process (ClearPass or Central based).
## Step-by-Step Configuration Guide
The configuration of Aruba Supervisor360 involves several steps, from defining the hierarchy to customizing dashboards. Here’s a detailed guide to help you through the process:
**Step 1: Defining the Management Hierarchy**
This is arguably the most crucial step, as it establishes the relationships between supervisors and their direct reports. This step enables Aruba Central to correctly associate device data with the appropriate supervisor.
1. **Access the Organization Menu:** Log in to your Aruba Central account and navigate to the “Organization” menu.
2. **Navigate to the Users Section:** Within the Organization menu, find and click on the “Users” section. This section manages user accounts and roles within Aruba Central.
3. **Import Users (If Necessary):** If your user accounts are not already in Aruba Central, you’ll need to import them. Aruba Central supports several methods for importing users, including:
* **Manual Entry:** Manually create individual user accounts.
* **CSV Import:** Import user accounts from a CSV file.
* **Active Directory Integration:** Synchronize user accounts from your Active Directory server. This is the recommended method for larger organizations as it automates user management.
4. **Define Supervisor-Employee Relationships:** Once your users are in Aruba Central, you need to define the supervisor-employee relationships. This is typically done by assigning a supervisor to each employee account.
* **Edit User Accounts:** Select each employee account and click on the “Edit” button.
* **Assign Supervisor:** In the user account settings, look for a field labeled “Supervisor” or similar. Use the dropdown menu to select the appropriate supervisor for that employee.
* **Save Changes:** Save the changes to the employee account.
5. **Verify Hierarchy:** After defining the relationships, verify that the hierarchy is correctly configured. You can usually do this by viewing a hierarchical representation of your organization in the Aruba Central interface.
**Example using Active Directory Integration:**
For organizations using Active Directory, the process is streamlined. Configure Active Directory synchronization within Aruba Central. Aruba Central can then automatically import user accounts and, based on the ‘manager’ attribute in Active Directory, automatically build the supervisor hierarchy. Ensure that the ‘manager’ attribute is accurately populated in Active Directory.
**Step 2: Associating Devices with Users**
For Supervisor360 to accurately track network usage, employee devices must be associated with their respective user accounts in Aruba Central. This step connects device-specific data to the correct employee, enabling supervisors to view relevant analytics.
1. **Device Onboarding:** When a new employee joins the organization or receives a new device, ensure that the device is properly onboarded to the network managed by Aruba Central.
2. **Authentication Methods:** Several authentication methods can be used to associate devices with users:
* **802.1X Authentication:** Using 802.1X authentication with a RADIUS server (such as Aruba ClearPass) is the most secure and reliable method. ClearPass can authenticate users based on their credentials and automatically associate their devices with their user accounts in Aruba Central.
* **Captive Portal:** A captive portal can be used to prompt users to log in with their credentials when they connect to the network. This allows Aruba Central to associate their devices with their user accounts.
* **MAC Authentication Bypass (MAB):** MAB can be used for devices that do not support 802.1X authentication. However, MAB is less secure than 802.1X and should only be used for specific devices that cannot be authenticated using other methods.
3. **ClearPass Integration (Recommended):** If you are using Aruba ClearPass, configure it to send user identity information to Aruba Central during the authentication process. This will automatically associate devices with users in Aruba Central. Refer to the Aruba ClearPass documentation for detailed instructions on configuring ClearPass integration with Aruba Central.
4. **Verify Device Association:** After onboarding devices, verify that they are correctly associated with their respective user accounts in Aruba Central. You can usually do this by viewing the device details in Aruba Central and checking the “User” field.
**Step 3: Enabling Supervisor360**
Once the hierarchy is defined and devices are associated with users, you can enable the Supervisor360 feature in Aruba Central.
1. **Navigate to Global Settings:** In Aruba Central, navigate to the “Global Settings” section. This section contains settings that apply to the entire Aruba Central account.
2. **Find Supervisor360 Settings:** Within Global Settings, look for a section labeled “Supervisor360” or similar. The exact location may vary depending on the version of Aruba Central you are using.
3. **Enable Supervisor360:** Toggle the switch or checkbox to enable Supervisor360. You may also need to configure additional settings, such as:
* **Data Retention Period:** Specify how long data collected by Supervisor360 should be retained.
* **Data Anonymization:** Configure data anonymization settings to protect user privacy.
4. **Save Changes:** Save the changes to the Supervisor360 settings.
**Step 4: Granting Supervisor Permissions**
Even with Supervisor360 enabled, supervisors need explicit permissions to view the data for their direct reports.
1. **Navigate to Role-Based Access Control (RBAC):** Go back to the “Organization” menu and find the section related to Role-Based Access Control (RBAC). This section allows you to define different roles with specific permissions.
2. **Create a Custom Role (If Necessary):** If you don’t already have a role that grants supervisors the necessary permissions, create a new custom role. Give the role a descriptive name, such as “Supervisor Role.”
3. **Assign Supervisor360 Permissions:** Within the custom role settings, grant the following permissions:
* **View Supervisor360 Data:** This permission allows supervisors to view the network usage and performance data for their direct reports’ devices.
* **Generate Supervisor360 Reports:** This permission allows supervisors to generate reports based on the data collected by Supervisor360.
* **Access to User Context:** This allows the supervisor to ‘see’ the device in the context of the user.
4. **Assign Role to Supervisors:** Assign the custom role to all supervisor accounts in Aruba Central. This will grant them the necessary permissions to use Supervisor360.
**Important Note:** Be careful when assigning permissions, as granting excessive permissions can create security risks. Only grant supervisors the minimum permissions they need to perform their job duties.
**Step 5: Configuring Alerts and Notifications**
To proactively identify potential issues, configure alerts and notifications to notify supervisors of unusual network activity or performance problems.
1. **Navigate to Alerts and Events:** In Aruba Central, navigate to the “Alerts & Events” section. This section allows you to define alerts based on various network events.
2. **Create a New Alert Policy:** Click on the “Create Alert Policy” button to create a new alert policy.
3. **Define Alert Criteria:** Define the criteria that will trigger the alert. Examples include:
* **Excessive Data Usage:** Trigger an alert when an employee’s device exceeds a predefined data usage threshold.
* **Poor Wi-Fi Signal Strength:** Trigger an alert when an employee’s device experiences consistently poor Wi-Fi signal strength.
* **High Latency:** Trigger an alert when an employee’s device experiences high network latency.
* **Access to Suspicious Websites:** Trigger an alert when an employee’s device accesses websites that are known to be malicious or suspicious. (Requires web content filtering capabilities in Aruba Central or integrated security solutions).
4. **Define Alert Scope:** Specify the scope of the alert. You can choose to apply the alert to all users, specific user groups, or individual users.
5. **Define Notification Settings:** Configure how supervisors should be notified when an alert is triggered. Options include:
* **Email Notifications:** Send email notifications to supervisors when an alert is triggered.
* **In-App Notifications:** Display notifications within the Aruba Central interface.
* **SMS Notifications:** Send SMS notifications to supervisors when an alert is triggered (requires SMS integration).
6. **Save Alert Policy:** Save the alert policy.
**Step 6: Customizing Dashboards and Reports**
Aruba Supervisor360 allows you to create custom dashboards and reports to track specific metrics and trends. This allows supervisors to focus on the information that is most relevant to their needs.
1. **Navigate to the Dashboard Section:** In Aruba Central, navigate to the “Dashboard” section.
2. **Create a New Dashboard:** Click on the “Create Dashboard” button to create a new dashboard.
3. **Add Widgets:** Add widgets to the dashboard to display specific metrics and data visualizations. Available widgets include:
* **Application Usage Chart:** Displays the top applications used by employees and their bandwidth consumption.
* **Web Usage Chart:** Displays the top websites visited by employees.
* **Network Performance Chart:** Displays key network performance indicators such as Wi-Fi signal strength, latency, and packet loss.
* **Device Health Chart:** Displays the health and performance of employee devices.
* **Location Map:** Displays the physical location of employee devices (if location services are enabled).
4. **Customize Widgets:** Customize the widgets to display the specific data you want to track. You can filter data by user, user group, device, and time period.
5. **Save Dashboard:** Save the dashboard.
6. **Create Custom Reports:** Similarly, you can create custom reports to analyze data over time. Use the reporting tools within Aruba Central to generate reports based on specific metrics and filters. Schedule reports to be generated automatically and delivered to supervisors on a regular basis.
## Use Cases for Aruba Supervisor360
Aruba Supervisor360 can be used in a variety of scenarios to improve network performance, enhance security, and optimize resource allocation. Here are some common use cases:
* **Remote Workforce Management:** With the increasing prevalence of remote work, Supervisor360 provides valuable insights into how remote employees are utilizing network resources. Supervisors can identify employees who are experiencing poor network performance and take steps to resolve the issues.
* **Educational Institutions:** Schools and universities can use Supervisor360 to monitor student network usage, identify potential security risks, and ensure that students are using network resources appropriately. It can also help identify students who may be struggling with connectivity issues and provide them with support.
* **Healthcare Organizations:** Hospitals and clinics can use Supervisor360 to monitor the performance of critical medical devices and applications. This can help ensure that healthcare professionals have access to the resources they need to provide quality patient care. Additionally, it helps comply with HIPAA regulations by monitoring and auditing network access to sensitive patient data.
* **Retail Businesses:** Retail stores can use Supervisor360 to monitor the performance of point-of-sale systems, inventory management systems, and customer Wi-Fi networks. This can help ensure that these systems are running smoothly and that customers have a positive shopping experience.
* **Troubleshooting Network Issues**: When employees complain about slow network speeds, supervisors can utilize Supervisor360 to pinpoint the cause. They can quickly identify if the issue is related to poor Wi-Fi signal, high latency, or excessive application usage.
* **Detecting Security Threats**: Supervisor360 can help detect unusual network activity that may indicate security threats. For example, if an employee’s device is suddenly accessing websites that are known to be malicious, an alert can be triggered.
* **Optimizing Bandwidth Allocation**: By monitoring application usage, supervisors can identify applications that are consuming excessive bandwidth. This information can be used to optimize bandwidth allocation and prioritize critical applications.
## Best Practices for Using Aruba Supervisor360
To get the most out of Aruba Supervisor360, follow these best practices:
* **Clearly Define Roles and Responsibilities:** Clearly define the roles and responsibilities of supervisors and IT administrators. This will help ensure that everyone understands their responsibilities and that the system is used effectively.
* **Provide Training:** Provide supervisors with training on how to use Aruba Supervisor360. This will help them understand the features and functionalities of the system and how to use it to improve network performance and enhance security.
* **Establish Clear Policies:** Establish clear policies regarding employee network usage. This will help ensure that employees are using network resources appropriately and that their privacy is protected.
* **Regularly Monitor and Review Data:** Regularly monitor and review the data collected by Aruba Supervisor360. This will help you identify potential issues and take steps to resolve them before they impact the entire team.
* **Protect User Privacy:** Implement appropriate measures to protect user privacy. This includes anonymizing data, limiting access to sensitive information, and complying with all applicable privacy laws and regulations.
* **Regularly Update Aruba Central:** Keep your Aruba Central software up to date with the latest releases. This will ensure that you have access to the latest features and security patches.
* **Integrate with Other Security Tools:** Integrate Aruba Supervisor360 with other security tools, such as intrusion detection systems and security information and event management (SIEM) systems. This will provide a more comprehensive view of your security posture.
## Troubleshooting Common Issues
Here are some common issues that you may encounter when using Aruba Supervisor360 and how to troubleshoot them:
* **No Data Displayed:** If no data is displayed in the Supervisor360 dashboards or reports, ensure that the following are configured correctly:
* The management hierarchy is defined correctly.
* Devices are properly associated with user accounts.
* Supervisor360 is enabled in Aruba Central.
* Supervisors have the necessary permissions.
* **Incorrect Data Displayed:** If incorrect data is displayed, verify that the device association is accurate and that the correct user accounts are being used.
* **Alerts Not Triggering:** If alerts are not triggering, verify that the alert criteria are defined correctly and that the alert scope is appropriate.
* **Performance Issues:** If you are experiencing performance issues with Aruba Supervisor360, ensure that your Aruba Central instance has sufficient resources and that your network is properly configured.
## Conclusion
Aruba Supervisor360 is a valuable tool for organizations that want to improve network performance, enhance security, and optimize resource allocation. By following the steps outlined in this guide, you can successfully configure and use Aruba Supervisor360 to gain comprehensive insights into employee network usage and proactively address potential issues. Remember to prioritize user privacy and establish clear policies for data usage and monitoring.
By leveraging the power of Aruba Supervisor360, organizations can empower their supervisors to make data-driven decisions, improve employee productivity, and maintain a secure and reliable network environment.
