Arista CloudVision CUE
A Platform for Cloud Automation and Visibility

Location Tracking
CV-CUE supports tracking location of any Wi-Fi APs and clients on a floor. It enables visualization of Wi-Fi associations and includes filtering based on client or user information, or connectivity or performance issues. It can be used for mapping of Wi-Fi client connectivity and performance issues in the context of their physical location.

Unified Monitoring
CV-CUE gives a single pane of glass to monitor WiFi access points and switches to which these APs are directly connected. CV-CUE shows switch details and also provides information about connectivity, performance and security related issues.This results in the fastest mean time to resolution, for troubleshooting and restoring networking services that impact users and endpoint devices. CV-CUE shows detailed data about access switches managed from Arista CVaaS. This enables full visibility of the edge network from a single pane. Wired hosts connected to Arista APs are also visible on the UI.

Client Journey
CV-CUE provides direct and real-time insight into the experience of Wi-Fi clients as they journey on the network. Client Journey tracks when and why clients fail to connect to the network, reporting latencies of network services such as AAA, DHCP, and DNS. Administrators can drill down and access live and historical client connection logs to aid troubleshooting.

Network Baselining
Using ML algorithms on the data it collects, CV-CUE baselines network behavior and automatically detects and highlights anomalies. Baselining is done for connection failures, RF performance KPIs and application QoE. AI algorithms detect poor performance, identifies root causes and provides recommendations to resolve network problems.

Applications Health
CV-CUE monitors the Quality of Experience (QoE) of businesscritical applications and identifies users facing poor QoE issues. A total of 25 applications can be selected for monitoring. This includes video collaboration applications such as Hangouts, Zoom, Teams as well as a wide variety of Web applications from enterprise app providers such as Adobe, Google, Microsoft, Oracle etc. Users can also add custom applications for QoE monitoring. For each application, CV-CUE tracks the percentage of time for which QoE was poor and displays the information on the Application dashboard. QoE baseline is also tracked per application as well as over all applications, for upto 30 days.

RF Explorer
Leveraging the round-the-clock scanning capabilities of Arista APs, CV-CUE provides in-depth, live and historical, information about the RF environment seen by each AP. The RF Explorer is a powerful tool for monitoring, managing and proactively troubleshooting radio spectrum related issues.

Access Point Explorer
Access Point Explorer provides a summary view of all the APs in the network and provides an easy way for the network administrators to view the AP distribution for various attributes such as software version, AP model, Ethernet link speed etc.

Client Explorer
Client Explorer provides a summary view of all the clients and provides an easy way for the network administrators to understand client distribution for different attributes such as protocol capability, vendor, OS etc.

Root Cause Analysis Engine
CV-CUE employs built-in domain expertise and protocollevel intelligence to help administrators maintain the network. In real time, it automatically detects and classifies Wi-Fi clients’ connection failures and pinpoints the root cause—if it is related to Wi-Fi or to a network service such as DHCP or DNS, a client device, or an application. Similarly, it automates root cause analysis of poor performance, such as poor coverage, high retry rate and sticky clients.

Single Client Inferencing
Wi-Fi clients may face poor experience due to various reasons. CV-CUE identifies such clients based on RF and application KPIs and then uses the Single Client Inferencing engine for automated root cause analysis of problems faced by clients.

Automatic Packet Capture
CV-CUE proactively captures packet traces to help diagnose problems. The traces are stored alongside related failures or symptoms to simplify troubleshooting later. Packet traces can be downloaded or directly visualized in Arista Packets, the cloud based, visual Wi-Fi packet analyzer.

Spectrum Analyzer
Arista APs can be configured to run on-demand spectral scans to get an in-depth view of the RF activity on Wi-Fi spectrum bands, i.e 2.4GHz, 5GHz, 6GHz. Spectrum Analyzer illustrates the output of a spectral scan using a set of charts. Spectrogram shows the RF energy level across the band, as a function of time. The Spectrum Density chart indicates the relative distribution of different signal levels across the spectrum band. The Signal Strength chart shows the instantaneous and average RF energy level in different parts of the band. The Duty Cycle chart shows the percentage of time each channel is busy, based on the presence of RF activity above a certain signal level.

Active Network Assurance
CV-CUE takes advantage of the multi-function radio, present in most Arista Wi-Fi APs, turning it into a client to run a wide variety of tests and proactively identify problems before users do. This helps validate the network’s readiness for supporting business-critical applications.

Intelligent RF Optimizations
Unparalleled visibility in 2.4 GHz, 5 GHz and 6 GHz enables automatic RF optimizations such as band steering, smart steering, auto channel selection and auto transmit power control to maximize Wi-Fi capacity. CV-CUE shows detailed information about the metrics used during channel selection to provide deep insights into the reasons why a particular channel was chosen. Real-time application performance is further enhanced with multicast-to-unicast conversion and smart blocking, pruning and optimization of broadcast and multicast traffic.

Remote Workspace AP
Remote Workspace AP (RWAP) solution empowers enterprise customers with the ability to extend Corporate SSID to a remote workplace such as a teleworkers’ home office or a small remote branch office. It uses industry-standard protocols to securely connect the AP deployed at a workplace with the Enterprise datacenter (DC) over the public Internet. With an IPSec VPN tunnel from the AP to the DC:

• Wi-Fi traffic mapped to the SSID flows via the tunnel to/from DC
• VPN setup not required individually on the Wi-Fi end clients
• Split tunnel functionality limits only corporate traffic through the tunnel

RWAP feature is available for on-premises customers also.

Presence Analytics
Presence analytics provide anonymous, statistical information about the footfall (number of Wi-Fi devices detected), dwell time (duration for which Wi-Fi devices are present) and repeat versus new customers. These trends can be viewed for a site or aggregated across multiple sites, and across different time periods: intra-day, daily, weekly, monthly and year-over-year.

Zone Analytics
Zone analytics provide insight into the density and flow of Wi-Fi users by visualizing it on a floor map. This allows administrators to monitor how various parts of a facility are populated over a period of time. Zones can be demarcated as a region around Wi-Fi APs on a floor maps.

Engagement Analytics
Integration with social networks and third-party loyalty systems can be leveraged to collect demographics and other information from Wi-Fi users who opt in to share their personal details. This in turn can be used to engage with the opt-in Wi-Fi users, e.g., retail business can provide special deals to their loyal customers and convert them into brand ambassadors.

Content analytics and application visibility
Web analytics and application visibility based on deep packet inspection can provide insight into Wi-Fi usage patterns and allow you to enforce policies in terms of the type of content or applications that can or cannot be accessed based on the type of Wi-Fi network (e.g., Corp vs. Guest) and user privileges (e.g., students vs. teachers) and assign the desired quality of service.

Integration with AGNI
CloudVision AGNI (Arista Guardian for Network Identity) is the Arista cloud-based NAC solution. CV-CUE integrates with AGNI to provide information that simplifies NAD provisioning. Examples of such information include:

• MAC addresses of the various NADs
• Defined Roles
• SSID information
• Location information

Integration with Google G Suite
Google G Suite for business or education, can be used to enforce an additional layer of security for Wi-Fi users with Arista’s Wi-Fi integration. No additional hardware, software or license is required. Regardless of whether PSK or 802.1X is being used for authentication, network access control for WiFi users and devices can be enforced based on a users’ Google account privileges and organization unit (OU) membership.

Role Based Control
Role based controls can be enforced on a per SSID basis. Role profiles can be created to match roles configured in the RADIUS server, Google G Suite or both. Rules of precedence can be used to combine settings defined in a role profile and SSID, and enforce policies in terms of role attributes such as VLAN access, firewall rules, application firewall rules, per user bandwidth control and redirection to a captive portal.

SAML Integration
CV-CUE supports SAML Single Sign-on (SSO) integration with a captive portal for Wi-Fi user authentication. SAML allows the customers to use a third party authentication service for SSO. SAML SSO gives the ability to authenticate users using an Identity provider (IDP).

Wi-Fi Reports
CV-CUE supports on-demand and pre-scheduled generation of reports for inventory management, compliance and operational status updates. This includes inventory of managed Wi-Fi devices, in-depth compliance reports for WIPS, list of Wi-Fi and WIPS alerts etc.

APIs and Third-party Integration

With Single Sign-On, powerful Web APIs, and secure tunneling, integrating the Arista Cloud with third-party systems, in-cloud, or on-premises, is easy. Both push and pull mechanisms are available. Using custom applications, Wi-Fi analytics can be pulled from the Arista Cloud or configuration and policy changes can be pushed to it. Wi-Fi analytics from the Arista Cloud or directly from the Arista APs can also be pushed to third-party Web services. RSSI data for BLE clients can also be pushed to 3rd-party servers, e.g. location-based systems.

Cloud Integration Point

Whether you are using Arista WIPS or transitioning to cloud based Wi-Fi, integrating the Arista cloud Wi-Fi server with your on-premise systems allows you to leverage key advantages of the cloud server while continuing to use your existing infrastructure. It also saves you the time, effort, and cost of installing and maintaining an on-premise Arista Wi-Fi server. A Cloud Integration Point (CIP) is an Arista AP that enables the integration of the Arista Wi-Fi cloud server with existing third-party services on-premises.

The data exchanged between Arista Cloud and an onpremise Cloud Integration Point (CIP) is secured with AES-256 encryption. The CIP contains a firewall that only forwards traffic to the specified local destinations on the defined ports. It also isolates the network with NAT so client connections cannot be established through the CIP.

Enterprise Security Management (ESM)
Integration with Enterprise Security Management servers enables Arista Cloud to send events and audit logs to Syslog and ArcSight servers, allowing customers to use their existing logging infrastructure to manage Arista events and logs.