HPE Aruba Networking Central SaaS Subscriptions
AI-powered, cloud-managed networking for branch, campus, remote, and data center networks

Overview:

HPE Aruba Networking Central is a powerful cloud‑managed networking solution that dramatically simplifies today’s IT operations across branch, campus, data center, and remote worker locations. As the management and orchestration engine for HPE Aruba Networking Edge Service Platform (ESP), HPE Aruba Networking Central provides a single point of control to deploy, manage, and optimize every aspect of wireless, wired, and WAN infrastructure by delivering AI‑powered analytics, end‑to‑end workflow automation and orchestration, and advanced security features. The solution is now integrated with HPE GreenLake, providing a consistent operating model and single platform for IT executives to view and manage their compute, storage, and networking infrastructure for unmatched efficiency and improved cost controls.

HPE Aruba Networking Central SaaS subscription overview: simple, flexible ordering

HPE Aruba Networking Central is licensed on a per‑device basis for the HPE Aruba Networking access points, switches, and gateways that you wish to manage within your environment. Subscription licenses are available in two tiers—Foundational and Advanced—and come with 1‑, 3‑, 5‑, 7‑, or 10‑year terms.

This framework provides a simple, yet flexible purchasing experience for every area of networking while making it easy to align requirements for AIOps, security, and other desired features to both current and future budgets.

In addition, flexible consumption options and payment models are available with the as‑a‑Service (aaS) SKUs for access points, switches, and gateways. The flexible consumption options include delayed activation for up to 90 days, license co‑termination, mid‑cycle tier upgrade, and seamless license renewal.

HPE Aruba Networking Central on‑premises

For customers who want the agility and efficiency of the cloud but need to adhere to stringent regulatory and compliance requirements, an on‑premises version of HPE Aruba Networking Central is also available. HPE Aruba Networking Central On‑Premises is a powerful network management system designed to simplify the deployment and maintenance of wireless and wired networks at scale. It delivers a cloud‑like management experience for organizations that need to improve IT agility and efficiency, while also satisfying regulatory or compliance requirements.

1. Physical server‑based appliances that run in a customer’s data center environment.
2. Software subscriptions that enable management features for supported HPE Aruba Networking devices.

Currently flexible consumption options such as delayed activation, license co‑termination, mid‑cycle tier upgrades, and renewals are not available for on‑premises deployments.

HPE Aruba Networking Central SaaS Subscriptions for access points:

Table 1 provides a mapping of available features that are supported in the Foundational and Advanced subscription tiers for supported HPE Aruba Networking access points when running HPE Aruba Networking Wireless Operating System AOS‑10.

Note: Services that require a gateway are not supported in Instant AOS running on HPE Aruba Networking Central. These include Live Upgrade, Multi‑zone, L2/L3 roaming, and Unified SD‑Branch monitoring and configuration. AOS‑10 and HPE Aruba Networking Central support the new HPE Aruba Networking EdgeConnect Microbranch solution; Instant 8.x and HPE Aruba Networking Central support IAP VPN.

Use cases for HPE Aruba Networking Central Advanced AP subscriptions

AP Foundational subscriptions address a wide range of use cases at the base price for HPE Aruba Networking Central. However, several premium features may be desirable, which are only available with an AP Advanced subscription. Please refer to the sample list of use cases below.

1. Higher availability: selecting Advanced AP subscriptions enables Live Upgrades, eliminating the risk of downtime during maintenance windows.
2. Self‑remediating workflows: selecting Advanced AP subscriptions enables closed‑loop automation with AI Insights such as “Outdoor clients impacting Wi‑Fi performance” where HPE Aruba Networking Central can programmatically push configuration changes once the network deviates from desired behavior.
3. Better visibility into Unified Communications and Collaboration apps: selecting Advanced subscriptions enables the UCC service within HPE Aruba Networking Central, so you can ensure the productivity of your distributed workforce by more easily monitoring and troubleshooting the health, usage, and user experience of key applications such as Zoom, Microsoft Teams, and more.
4. Programmability via streaming APIs: selecting Advanced subscriptions enables API Streaming, which provides a continuous stream of data that includes device statistics and state changes for developing dynamic and interactive applications. Telemetry from HPE Aruba Networking Central can also be shared with third party solutions enabling IT teams to automatically trigger actions based on certain events or conditions.
5. WAN health and cloud security orchestration for Microbranch: selecting Advanced subscriptions provides greater visibility into WAN health and orchestration with cloud security vendors (Zscaler with others planned).

	Foundational	Advanced
Deployment and configuration
UI‑ and template‑based group configuration Simplify deployment with template‑based configuration and streamlined provisioning of devices or groups of devices.
Auto‑commit Apply configuration changes instantly with the auto‑commit state enabled.
Configuration audit Review device configuration changes including errors and device‑level overrides on an audit dashboard.
Monitoring and reporting
Network health and Wi‑Fi connectivity dashboards Review network health, summary, and Wi‑Fi connectivity dashboards for an overall view of network performance and connectivity status for each client endpoint.
Network topology Graphical representation of the site network layout with details of all devices being managed, including APs, AOS‑S switch, AOS‑CX switches, and third‑party devices.
Visual RF floorplans Ability to plan wireless coverage of sites and create AP floorplans with a real‑time view of the radio environment of your wireless network.
Client list and details Review unified list of all clients that are connected to access points, switches, or gateways in the network with performance status, connection status, and more.
Application visibility Allows for the creation of application‑specific firewall policies and includes features such as deep packet inspection (DPI) and application‑level monitoring to assess user‑impacting issues.
Web Content Classification (WebCC) Web Content Classification, policy, and reputation service that helps enforce acceptable network usage policies, including blocking or rate‑limiting certain connections.
Data access Access to all the above monitoring data for up to 30 days Access to reporting data for up to 90 days Access to historical Client Summary Report data for up to 1 year
Audit trail Review total number of logs generated for all device management, configuration, and user management events triggered in the network.
Alerts and events Unified dashboard view of generated alerts and events that pertain to device provisioning, configuration, and user management.
Access, spectrum, monitor mode of radio operations Supports the access, spectrum, and monitor modes that determine radio operation for an AP.
UXI sensor integration UXI sensors deliver continuous monitoring and testing of wireless, wired, and WAN performance, reporting any anomalies directly to the HPE Aruba Networking Central network health dashboard.
AIOps
AI Search GenAI‑powered search engine trained on multiple large language models (LLM) that enables operators to quickly and easily find relevant information related to network devices or status (e.g. poor Wi‑Fi connectivity), configuration and troubleshooting tips, and more. Search results are based on user intent and trained on the vast HPE Aruba Networking data lake. Search‑driven navigation and LLM‑generated summarizations streamline the process, reducing time spent clicking through menus or documents.
AI Insights Automatically detect a broad range of anomalies observed at the access point, connectivity, and client level with specific details on the occurrences for faster troubleshooting, root cause analysis, and incident resolution. Includes: Wi‑Fi Connectivity Wireless Quality Access Point Availability Class and Company Baselines Examples for HPE Aruba Networking APs and connected clients include: AP with High CPU Utilization, AP with High Number of Reboots, Clients with High Roaming Latency, Delayed DNS Request or Response, and Clients with High Number of Wi‑Fi Association Failures.
AI Insights (advanced) Advanced insights for Wireless Quality include: Outdoor clients impacting Wi‑Fi performance Coverage Hole Detection Transmit power optimization
AI Assist Dynamically runs CLI show commands and generates logs that can be used to troubleshoot AP‑related issues.
AI Assist (advanced) Option that automatically notifies HPE Aruba Networking TAC and sends the generated logs for accelerated support case management.
Dynamic power save mode APs enter dynamic power save mode, autonomously waking up on a schedule to meet connectivity demand. AI‑driven power saving schedules are regularly assessed, accessible in the AI Insights tab of Central.
Troubleshooting
Troubleshooting tools Network Check—Run diagnostic checks on networks and troubleshoot client connectivity issues. CLI Commands—Perform network health check at an advanced level using command categories.
Live events Information required to troubleshoot issues related to a client, an access point, or a site in real time.
Live Packet Capture (PCAP) Allows users to interact and launch a targeted packet capture on a client connected to a specific AP or a switch to measure application response time to determine quality of experience for end users.
Wireless services
HPE Aruba Networking AirGroup Leverages zero configuration networking to enable services such as Apple® AirPrint, AirPlay, DIAL, DLNA Media, DLNA Print, Amazon Fire TV, and Google Cast from third‑party devices in an efficient manner.
Advanced AirGroup services Custom services
HPE Aruba Networking AirMatch Automates RF channel assignment, channel width, and radio power assignments using machine learning algorithms. Provides even distribution of radios across available channels to mitigate interference and maximize system capacity.
HPE Aruba Networking ClientMatch Patented RF optimization technology that scans APs in the neighborhood to ensure that client devices associate with the best performing AP.
Presence analytics Enables businesses to collect and analyze user presence data and real‑time data on user footprints in public venues, enterprise environments, and retail hubs.
IoT operations Unifies visibility of wireless and IoT infrastructure by providing at‑a‑glance views of IoT applications and BLE and Zigbee devices on the network. Install IoT application plugins and provision IoT Connectors (deployed as virtual appliances) in just a few mouse clicks. APs can also be deployed as IoT connectors. This reduces the cost of managing and maintaining separate IoT connectors and provides IT operators the flexibility to choose between APs or VMs. Note: Certain AOS‑10‑specific partner integrations require an Advanced License.
HPE Aruba Networking AirPass Provides seamless Wi‑Fi connectivity for SIM enabled cellular devices for major mobile operators to enable Wi‑Fi calling and to offload 5G/LTE traffic to enterprise wireless networks. Notes: Currently available in US only AP Foundational license supports a single mobile operator AP Advanced license supports all participating providers
Unified Communications and Collaboration (UCC) Enables a seamless user experience for voice calls, video calls, and application‑sharing when using communication and collaboration tools. Provides network administrators a consolidated view of how media collaboration applications are performing.
Multi‑zone Ideal for multi‑tenancy Wi‑Fi support where multiple organizations are housed in a single office space or for a single organization that requires separate secure networks and traffic segmentation capabilities.
Security
RAPIDS Enables HPE Aruba Networking Central to quickly identify and act on interfering APs in the network that can be later considered for investigation, restrictive action, or both. Custom rules can be used to classify APs into 7 different categories with RAPIDS.
HPE Aruba Networking Cloud Guest Cloud Guest access enables the guest users to connect to the network. A monitoring dashboard that displays the number of guests, guest SSID, client count, type of clients, and guest connection.
Cloud authentication Provides a seamless, secure way to onboard and authenticate end‑users and non‑user specific devices (cameras, thermostats, IP phones, etc.) to wireless networks by integrating with common cloud identity stores such as Google Workspace and Microsoft Azure Directory using passwords/passphrases.
Client insights Enables network and security administrators to discover, monitor, and automatically classify new and existing client devices that connect to a network. Features include: Basic client MAC Classification based on telemetry data Client Family, Client Category, Client OS ML‑based client classification Cloud Auth integration
API
Northbound (NB) API 5000 API calls/day base limit which dynamically increases based on the subscribed device count.
Streaming API Enables you to subscribe to a select set of topics, instead of polling the NB API to get continuous state and stats messages. Also enables you to write value‑added applications based on the aggregated context (e.g., get notified of events such as the UP and DOWN status of devices).
HPE Aruba Networking EdgeConnect MicroBranch
EdgeConnect MicroBranch Foundational Enables availability, orchestration, security, and monitoring features such as: Layer 2, layer 3 and mixed tunnels Data Center and WAN redundancy Cloud Auth survivability Route or tunnel orchestration Policy‑based routing Dynamic subnet allocation Microbranch monitoring
EdgeConnect Microbranch Advanced Includes the above capabilities and also enables WAN health visibility and Cloud Connect security for cloud inspection (e.g., Zscaler)

HPE Aruba Networking Central SaaS subscriptions for wireless gateways:

In AOS‑10, all HPE Aruba Networking Edge appliances are referred to as gateways rather than controllers since they act as a cloud gateway for wireless services that are deployed within HPE Aruba Networking Central.

For wireless use cases, gateways are typically deployed in networks with thousands or tens of thousands of access points for improved scalability, seamless roaming between buildings, or for environments that require enhanced security services. Please refer to the list of supported gateways.

Feature category	Feature
SD‑LAN	Gateway clustering Combines multiple gateways that operate as a single entity to provide high availability and service continuity across a wireless network. Tunneling Tunneling traffic from wireless and wired clients. Routing Traffic can be routed using both static routing and OSPF.
Configuration	Mobility gateway management Enables onboarding, configuration, deployment, monitoring, and general management of HPE Aruba Networking wireless gateways. UI‑ and template‑based group configuration Simplify deployment with template‑based configuration and streamline provisioning of devices or groups of devices. Configuration audit Review device configuration changes including errors and device‑level overrides on an audit dashboard.
Monitoring and reporting	Network health and summary dashboards Review wired network performance to gain an overall view of the health status of all switches and connected clients. Network topology Graphical representation of the site network layout with details of all devices being managed, including AOS‑S switches, AOS‑CX switches, HPE Aruba Networking APs, HPE Aruba Networking gateways, and third‑party devices. Client list and details Review unified list of all clients that are connected to access points, switches, or gateways in the network with performance status, connection status and more. Application visibility Allows for the creation of application‑specific firewall policies and includes features such as deep packet inspection (DPI) and application‑level monitoring to assess user‑impacting issues. Web Content Classification Enhances security by providing real‑time web content and reputation filtering. Enables you to classify website content based on reputation and take measures to block malicious sites. Data access Access to all monitoring and reporting data for up to 90 days. Access to historical Client Summary Report data for up to one year. Audit trail Review total number of logs generated for all device management, configuration, and user management events triggered in the network. Alerts and events Unified dashboard view of generated alerts and events pertaining to device provisioning, configuration, and user management.
AIOps	AI Search GenAI‑powered search engine trained on multiple large language models (LLM) that enables operators to quickly and easily find relevant information related to network devices or status (e.g., gateway down), configuration and troubleshooting tips, and more. Search results based on user intent and informed by the vast HPE Aruba Networking data lake. Search‑driven navigation and LLM‑generated summarizations streamline the process, reducing time spent clicking through menus or documents. AI Insights Automatically detect a broad range of anomalies observed at the wireless gateway level with specific details on the occurrences for faster troubleshooting. Includes availability insights such as Gateway Has High Memory Usage or High CPU Usage. Class and company baselines are also supported. AI Assist Dynamically runs CLI show commands and generates logs that can be used to troubleshoot gateway‑related issues.
Troubleshooting	Troubleshooting tools Network Check—Run diagnostic checks on networks and troubleshoot client connectivity issues. CLI Commands—Perform network health check at an advanced level using command categories. Live events Information required to troubleshoot issues related to a client issue in real time.
API	Northbound (NB) API 5000 API calls/day base limit which dynamically increases based on the subscribed device count. Streaming API Enables you to subscribe to a select set of topics, instead of polling the NB API to get continuous state and stats messages. Also enables you to write value‑added applications based on the aggregated context (e.g., get notified of events such as the UP and DOWN status of devices).
Security	HPE Aruba Networking Central NetConductor Fabric Wizard Enables the creation of EVPN/VXLAN overlays with an intuitive, graphical user interface to aid the adoption of role‑based policies and Dynamic Segmentation at global scale with distributed enforcement for campus, SD‑Branch and data center environments. Centralized policy enforcement can also be used for smaller locations with the help of firewall and gateways.

HPE Aruba Networking Central subscriptions for HPE Aruba Networking switches:

Table provides a mapping of available features that are supported in the Foundational and Advanced subscription tiers for all supported HPE Aruba Networking switches. Please refer to the HPE Aruba Networking Central Help Center for a list of supported switches.

Switch subscriptions are divided into sub‑categories based on the family of switches and their respective number of ports, advanced routing features, and required software support, among other factors.

These subscriptions apply to both HPE Aruba Networking CX switches and AOS‑S switches, though there are some management feature differences, as outlined in the table below.

Use‑cases for HPE Aruba Networking Central switch Advanced licenses

Enhanced protection and automated configuration with HPE Aruba Networking Central NetConductor (available with AOS‑CX): automates network configuration by identifying network topologies, orchestrates intent‑based policy globally, provides improved discovery, profiling, network access and authentication control of all connected clients across campus and data‑center environments. Selecting Advanced subscriptions (AOS‑S and AOS‑CX) enables API Streaming, which provides a continuous stream of data that includes device statistics and state changes for developing dynamic and interactive applications. Telemetry from HPE Aruba Networking Central can also be shared with third party solutions enabling IT teams to automatically trigger actions based on certain events or conditions.

	Switch support	Foundational	Advanced
Deployment and configuration
UI‑ and template‑based group configuration Simplify deployment with template‑based configuration and streamlined provisioning of devices or groups of devices. Easily configure a wide range of parameters including system properties, SNMP, ports and link aggregation, loop prevention, VLANs, interfaces, access control, bridging, and more.	AOS‑CX and AOS‑S
Auto‑commit Apply configuration changes instantly with the auto‑commit state enabled.	AOS‑CX and AOS‑S
UI‑ and template‑based group configuration Simplify deployment with template‑based configuration and streamlined provisioning of devices or groups of devices.	AOS‑CX and AOS‑S
Auto‑commit Apply configuration changes instantly with the auto‑commit state enabled.	AOS‑CX and AOS‑S
Configuration audit Review device configuration changes including errors and device‑level overrides on an audit dashboard.	AOS‑CX and AOS‑S
Multi‑editor configuration Update multiple switches at the same time, validate changes are conformant, and instantly push them across all target devices. Also includes express configs for common changes that require only a few simple mouse clicks to validate and deploy	AOS‑CX
Port profiles Extensive port configuration applied on multiple switches at once with port profiles.	AOS‑CX
Stack management Simplify management of an AOS‑CX Virtual Switching Framework (VSF) stack, with support for onboarding both pre‑configured and new stacks, adding/removing members, UI‑ and template‑based configuration, as well as monitoring and troubleshooting.	AOS‑CX
HPE Aruba Networking Central NetConductor Network Wizard A guided set‑up that simplifies and streamlines creation of campus and data center underlay networks comprising of CX switches with minimum user inputs, helping IT teams build networks with minimum effort.	AOS‑CX
Monitoring and reporting
Network health and summary dashboards Review wired network performance to gain an overall view of the health status of all switches and connected clients.	AOS‑CX and AOS‑S
Network topology Graphical representation of the site network layout with details of all devices being managed, including AOS‑S switches, AOS‑CX switches, HPE Aruba Networking APs, HPE Aruba Networking gateways, and third‑party devices.	AOS‑CX and AOS‑S
Switch monitoring Granular insights into the performance, status, and utilization of all components of the switch, including ports, PoE, VLANs, LAGs, and more.	AOS‑CX and AOS‑S
NAE agent/monitoring support Create and deploy monitoring agents using the HPE Aruba Networking Network Analytics Engine (NAE) that is built into every select HPE Aruba Networking CX switches. View the aggregated status of the NAE agents running on each switch from HPE Aruba Networking Central for additional monitoring and troubleshooting support.	AOS‑CX
Client list and details Review unified list of all clients that are connected to access points, switches, or gateways in the network with performance status, connection status, and more.	AOS‑CX and AOS‑S
Data access Access to all the above monitoring data for up to 30 days Access to reporting data for up to 90 days Access to historical Client Summary Report data for up to 1 year	AOS‑CX and AOS‑S
Audit trail Review total number of logs generated for all device management, configuration, and user management events triggered in the network.	AOS‑CX and AOS‑S
Alerts and events Unified dashboard view of generated alerts and events that pertain to device provisioning, configuration, and user management.	AOS‑CX and AOS‑S
AIOps
AI Search GenAI‑powered search engine trained on multiple large language models (LLM) that enables operators to quickly and easily find relevant information related to network devices or status (e.g. poor Wi‑Fi connectivity), configuration and troubleshooting tips, and more. Search results are based on user intent and trained on the vast HPE Aruba Networking data lake. Search‑driven navigation and LLM‑generated summarizations streamline the process, reducing time spent clicking through menus or documents.	AOS‑CX and AOS‑S
AI Insights Automatically detect a broad range of anomalies observed at the switch, connectivity, and client level with specific details on the occurrences for faster troubleshooting. Examples for HPE Aruba Networking switches include: High CPU Utilization, High Memory Usage, High Port Flaps, High Port Errors, and PoE Errors.	AOS‑CX and AOS‑S
Troubleshooting
Troubleshooting tools Network Check—Run diagnostic checks on networks and troubleshoot client connectivity issues. CLI Commands—Perform network health check at an advanced level using command categories. Device Check—Run diagnostic checks on individual switches to test components such as cabling, interfaces, PoE, and the physical location of the switch.	AOS‑CX and AOS‑S
Live events Information required to troubleshoot issues related to a client, an access point, or a site in real time.	AOS‑S
Live Packet Capture (PCAP) Allows users to interact and launch a targeted packet capture on a client connected to a specific AP or a switch to measure application response time to determine quality of experience for end users.	AOS‑S
Security
User‑Based Tunneling (UBT) for dynamic segmentation Allows tunneling of wired users traffic from the switches to the gateway based on an assigned user role, to enforce deep packet inspection and firewall functionality, application visibility, and bandwidth control.	AOS‑CX and AOS‑S
Client insights Enables network and security administrators to discover, monitor, and automatically classify new and existing devices that connect to a network.	AOS‑CX
Cloud authentication Provides a seamless, secure way to onboard and authenticate clients and users to wired networks by integrating with common cloud identity stores such as Google Workspace and Microsoft Azure Directory.	AOS‑CX
HPE Aruba Networking Central NetConductor Fabric Wizard Enables the creation of EVPN/VXLAN overlays with an intuitive, graphical user interface to aid the adoption of role‑based policies at global scale with distributed enforcement for campus, branch and data center environments, with the choice of multiple overlay designs.	AOS‑CX
API
Northbound (NB) API 5000 API calls/day base limit which dynamically increases based on the subscribed device count.	AOS‑CX and AOS‑S
Streaming API Enables you to subscribe to a select set of topics, instead of polling the NB API to get continuous state and stats messages. Also enables you to write value‑added applications based on the aggregated context (e.g., get notified of events such as the UP and DOWN status of devices).	AOS‑CX and AOS‑S

Note: Some feature differences may exist across the different switch series that are supported in HPE Aruba Networking Central, and the latest software releases for the AOS‑S and AOS‑CX operating systems may be required. Contact your HPE Aruba Networking account team for additional details.

HPE Aruba Networking Central subscriptions for HPE Aruba Networking EdgeConnect SD‑Branch gateways:

The EdgeConnect SD‑Branch solution is comprised of an HPE Aruba Networking Central SD‑WAN software subscription license for each 70xx, 90xx, or 72xx branch gateway, as well as the headend gateway/concentrator. The HPE Aruba Networking Central SD WAN Foundational, Foundational Base, and Advanced subscription licenses are described below. The Foundational Base license is applicable for branch gateways and not for VPN concentrators (VPNC).

For all 70xx and 72xx gateways, the Foundational license does not have a capacity limit (i.e., client device limit). However, for the 7005, 7008, 9004 and 9012 gateways, a Foundational Base Capacity license is available. The 7005, 7008, 9004 and 9012 Foundational Base license is limited to 75 client devices in the branch.

HPE Aruba Networking Central subscriptions and platform mapping for HPE Aruba Networking EdgeConnect SD‑branch gateways

Foundational	Foundational Base	Foundational + security	Foundational Base + security	Advanced	Advanced + security
70xx 72xx 90xx 91xx 92xx	7005 7008 9004 9004‑LTE 9012 (Limited to 75 client concurrent endpoints in the branch)	90xx 91xx 92xx	9004 9004‑LTE 9012 (Limited to 75 client concurrent endpoints in the branch)	70xx 72xx 90xx 91xx 92xx	90xx 91xx 92xx

 

HPE Aruba Networking Central management features for HPE Aruba Networking EdgeConnect SD‑branch gateways (by license tier)

	Foundational	Foundational Base	Foundational + security	Foundational Base + security	Advanced	Advanced + security
Configuration
Branch gateway and VPNC management		Note: Applicable for branch gateways only, not for VPNCs
Group‑based configurations
Configuration audit
SD‑WAN
IPsec VPN
Client VPN (VIA)
Routing
Orchestration: tunnel, route, cloud connectivity
Dynamic path steering (DPS)
Link redundancy
High availability (active‑standby or active‑active)
Application‑based policies
Full SD‑LAN control
Monitoring and reporting
Network health and summary dashboards
Network topology
Client list and device details
Application visibility
Web Content Classification (WebCC)
Data access
Audit trail
Alerts and events
AIOps
AI Search
AI Insights
AI Insights (advanced)
AI Assist
AI Assist (advanced)
Troubleshooting
Troubleshooting tools
Security
Stateful firewall
Web content filtering
Intrusion detection and prevention
Anti‑Malware
Role‑based access policy
Security dashboard
SIEM integration
Client insights
HPE Aruba Networking Central NetConductor Fabric Wizard
Services
SaaS express
API
Northbound (NB) API
Streaming API

Documentation:

Aruba Central SaaS Subscription Ordering Guide (.PDF)