The difference is that Aruba provides both wired and wireless access, including wireless IDS using a box that is 7 inches by 7 inches by 1 inch. No software is loaded on the box--all policy is created at home base and pushed to the endpoint where wireless or wired 802.1x, 802.1q tagging, WPA, WPA2 or web authentication takes place. After that, all traffic back to home base is tunneled via IPSec. In addition, troubleshooting functions like packet capture can be done on the clients that connect to the device, as well. Does this make it more clear?