ExtremeCloud^TM IQ

Machine Learning (ML) and Artificial Intelligence (AI) driven Wired and Wireless Network Management Offering Intuitive Configuration Workflows, Real-Time and Historical Monitoring, Comprehensive Troubleshooting and Integrated Network Applications

ExtremeCloud IQ is an industry-leading and visionary approach to cloud-driven networking, designed to take full advantage of Extreme’s end-to-end networking solutions. ExtremeCloud IQ delivers unified, full-stack management of wireless access points, switches, and routers. Using innovative ML/AI technologies, it analyzes and interprets millions of networks and user data points, from the network edge to the data center, to power actionable business and IT insights, and deliver new levels of network automation and intelligence.

Astonishingly Easy.
Incredibly Smart.

Designed to streamline every aspect of your network from deployment to maintenance, ExtremeCloud™ IQ has been built with the human element in mind, helping IT and business focus on what’s really important to them instead of dealing with menial and time consuming operational tasks.

Product Highlights

Full Stack Management

• Native cloud management for Wi-Fi, switching, and routing

Dashboards and Insights

• Machine Learning derived insights drive a comprehensive visual dashboard of location, devices, and users

Network Health

• Real-time and historical view of client and device health with built-in remediation tools

Application Visibility and Control

• Visibility and control of application usage for professional and recreational applications and network services

Comparative Analytics

• Anonymously assess operational and performance-based metrics to those of other organizations of a similar size and vertical

Integrated Essentials Applications

• ExtremeGuest™
• ExtremeAirDefense™
• ExtremeIoT™
• ExtremeLocation™

Auto-Provisioning

• With near zero-touch deployment, automatically apply configuration policies

Unlimited Data Option

• Lifetime data for more informed network decision-making

Mobile Onboarding

• Securely supports device management from Apple and Android phones

Deployment Choices

Extreme offers three cloud deployment options – Public, Private or On-Premises – that support one goal: to provide maximum flexibility, continuous innovation, and a consistent user experience. More so, our 100% software-centric architecture is cloud-hosting agnostic, supporting AWS, Google Cloud Platform, and Microsoft Azure.

• Public Cloud: Extreme provides access to a hosted service which removes infrastructure management and costs, provides data privacy and protection, unmatched reliability, and continuous delivery of innovations.
• Private Cloud: Private Cloud: For businesses who want or need to isolate management services in their own controlled environment, Extreme packages ExtremeCloud IQ into a private cloud offering which enables the same services as the public cloud (e.g. ML, AI, data stores etc.) all hosted within customers’ or partners’ private cloud instance.
• On-Premises: On-premises options provide Extreme’s cloud service in a format which can be hosted on-premises at your site. Flexibility to choose full local customer control with Local Cloud or Extreme DevOps control with Distributed Cloud for cloud efficiencies.

ExtremeCloud IQ offers the same capabilities and feature sets across deployment options so, as requirements change, so too can your deployment – there is no need to rip and replace.

Your Network. Your Way. Complete Solution Flexibility with ExtremeCloud IQ™

Extreme Networks makes it easier for you to scale with value based subscriptions.

• ExtremeCloud IQ Connect is our base level tier. It provides subscription-free cloud management for supported devices, enabling organizations to deploy enterprise-grade connectivity with basic network management. Adding additional license tiers is simple and seamless.
• ExtremeCloud IQ Navigator is for organizations that have deployed the WiNG Wi-Fi controller-based solution. It provides enhanced policy enforcement, visibility, reporting, and advanced configurations. Navigator delivers configuration and management of WinG infrastructure systems at scale including advanced policy, advanced segmentation, advanced SSH, etc.

• ExtremeCloud IQ Pilot is the primary deployment mode for Extreme Cloud IQ, and is for organizations that require enhanced policy enforcement, visibility, reporting, and advanced configurations. Pilot delivers configuration and management of infrastructure devices at scale including advanced policy, advanced segmentation, advance troubleshooting, advanced guest, advanced SSH, etc.
• ExtremeCloud IQ CoPilot unlocks additional explainable ML/AI. CoPilot constantly scans, compares, and computes network data to alert IT Administrators and recommend actions to mitigate issues or anomalies before they result in a disruption of service. This simplifies and facilitates troubleshooting and customer resolution so Network Administrators can spend less time fixing the network and more time on essential activities. Simplifying and facilitating troubleshooting and customer resolution. Spend less time fixing your network, and more time on business-critical productivity and essential activities.

ExtremeCloud IQ Essentials

ExtremeCloud IQ Essentials provides four key applications for guest management, WIPS, IoT, and location services. These applications are included within the ExtremeCloud IQ Pilot subscription.

ExtremeGuest™
ExtremeGuest is a robust and comprehensive guest engagement solution that enables managers and network operators to use analytical insights for a deeper dive into how their guest networks are utilized. For example, knowing how many customers use the guest network, how often they visit, and how much time they spend on the network are all metrics that can be measured through ExtremeGuest. Analytics of social networking behavior of customers can be used to increase patronage and expand brand exposure.

ExtremeAirDefense™
ExtremeAirDefense simplifies the protection, monitoring and compliance of your Wireless LAN networks. ExtremeAirDefense continuously safeguards the network from external threats 24x7x365 and notifies IT staff when attacks occur, enabling an immediate response. Using existing infrastructure with AirDefense, organizations can protect their air waves from unwanted behavior. It is deployed as a set of access points serving as sensors to monitor the airwaves together with this application. Sensors can be access points configured in radio share or dedicated sensing modes and can also be used as overlay security network in any environment. Sensors can be deployed as either dedicated sensors or in radio-share mode.

ExtremeIoT™
ExtremeIoT is a simple IoT security solution that is designed to protect high risk, wired IoT devices. Through the application of security profiles, it controls IoT device attachment and access to the network to lockdown IoT communications to what’s authorized. It reduces the effort of IT departments with separate onboarding portal designed for non-IT personnel.

ExtremeLocation™
Location services are crucial in helping enterprises personalize customer engagement and enhance operational efficiencies. ExtremeLocation is a resilient and scalable cloud-driven solution, that provides enterprises powerful multi-tier location services across all sites. Supporting Wi-Fi and/or BLE technologies, enterprises can monitor workflows and assets, in real-time or historically, to improve their overall operations and efficiency. ExtremeLocation provides granular location accuracy resolution to support diverse industry-specific use cases. For example, retailers can track new and repeat visitors, engagement times and associates or asset locations, to provide a contextual-based personalized experience to their customers. Healthcare providers may view real-time dashboards and monitor trends of users and assets, to deliver enhanced patient care.

Product Specifications

Simplified Deployment

• Customer self-service sign-up
• Guided workflow for network policy deployment
• On-screen step-by-step guided configuration
• RF planner with map import and export
• Design with simulated APs on RF Planner map, then seamlessly swap these for real APs when deployed
• Devices automatically connect to ExtremeCloud IQ for provisioning
• Devices auto-provision with network policy and firmware updates
• Mobile on-boarding via XIQ MobileOnboarding for Apple and Android devices

Centralized Configuration

• Guest Access functionality
• Device templates for switches, routers and APs
• Act as RADIUS server or RADIUS proxy, and as DHCP server
• Centralized view of all configuration objects
• Bulk edit device properties
• Schedule firmware upgrades
• Command Line Interface (CLI) access to Extreme devices
• Active directory/LDAP
• IPv6 support
• Syslog and SNMP server configuration
• Auto-provisioning
• Configuration audit, backup, restore, import and export
• Support for Extreme VPN gateway (VG-VA)
• Multi-tenant capability: supports multiple virtual organizations

Centralized Policy Management

• Device classification by location and timezone
• Customer application definition
• Client classificaion by location, OS type, MAC address
• Multiple user profiles for each SSID
• Time-based firewall and QoS policy
• Application, network and MAC layer firewall policy rules
• WIPS policy for rogue AP detection and mitigation

Security and Privacy

• ExtremeCloud IQ cloud platform conforms to ISO/ IEC 27017 and is certified by DQS to ISO/IEC 27001 and ISO/IEC 27701 by the International Standards Organization (ISO)
• CSA STAR certified Role-based access control
• No customer data traverses ExtremeCloud network
• Restricts to traffic to enterprise data
• SSO for ExtremeCloud™ IQ administrators via SAML
  • Note: Only supported in Public Cloud, not supported on IQVA
• Optional multi-factor authentication with Google Authenticator for administrators
• EU General Data Protection Regulation (GDPR) features including:
• Search for, download and delete personal data for specific users
• Creation of reports to document the above actions

Dashboard

• Time-range slider on dashboard for historical view
• 360° views of Extreme network policies, AP, client devices, users and apps
• Global search function by network policy, MAC address, serial number, user, hostname or application name
• Unlimited retention of historical data for monitoring and reporting usage
• Interactive Network Summary Report with easy sharing
• Savable contextual filters by location, SSID, policy, user, profile and client OS type
• Comparitive Analytics to anonmously assess operational and performance metrics against other cloud customers of a similar size and industry

Guest Access

• Onboarding and management of visitor and employee personal devices (BYOD)
• Multiple onboarding workflows via Captive Web Portal, Kiosk app and Guest Check-In applications
• Private PSK (PPSK), 802.1X (RADIUS) and PSK authentication
• Supports 3rd party and customized CWPs including HTML upload for added deployment flexibility

Troubleshooting

• Client 360° behavioral analysis; real-time and historical network performance monitoring and optimization
• Help-desk optimized interface with problem summary and suggested remedy
• Dedicated Helpdesk user role
• Real-time troubleshooting with probe messages and stage filters
• Historical troubleshooting with automatic issue detection
• Mark issue resolved or escalate issue with email notification
• Built-in Command Line Interface (CLI) and remote SSH
• RADIUS test
• AP technical data download
• VLAN probe tool for simplified troubleshooting of the wired network
• Optional packet capture analysis with partner solution (CloudShark)

Monitor

• WIPS history report
• Drill-down capability from client list to client 360° view
• Device list with rich utilities for advanced configuration and investigation
• Real-time client list with SNR, RSSI, data usage and connection status
• Savable and reusable filters shared across dashboard and monitor
• Alarm and event lists with historical and real-time data
• PCI DSS 3.2 compliant reporting
• Rogue AP and rogue client monitoring
• Real-time data for connection clients and users
• Google Maps integration and navigation with floorplan upload capability

Supported Languages

• English, German, Spanish, French, Italian, Japanese, Korean, Portugese, Chinese

Reliability

• Data centers with SOC Type 1 compliance (formally SAS 70 and/or SSAE 16), Type 2 and 3 compliance
• High availability with disaster recovery and redundancy
• Scheduled backups
• 24x7 monitoring warranty

Security and Operation 

• Accounts are password protected and accessed via secure SSL
• Management traffic is encrypted and restricted using industry-proven CAPWAP protocol over HTTPS
• Out-of-band operation ensures no customer data traverses Extreme's Cloud Services
• Single-Sign-On (SSO) to ExtremeCloud IQ for administrator accounts
• Multi-Factor authentication with Google Authenticator for administrator accounts
• Multi-tenant architecture with secure account separation
• Centralized monitoring and management
• Integrated RBAC to delegate select ExtremeCloud IQ roles and permissions to different administrators
• VAR and partner management capabilities including account provisioning and maintenance
• ExtremeCloud IQ connectivity does not impact network operations servicing end-users

Ordering Information