Firewall could protect from a device transmitting or receiving malicious data on the network. However, the firewall is not able to contain the data within the network segment or zone of the device and is certainly not able to limit the malicious data spreading to other devices in that zone/segment. MAKE — USE OF ARUBA CLEARPASS MODULES to isolate the infected device and users with in segment.
Follow below Aruba document
https://support.arubanetworks.com/Documentation/tabid/77/DMXModule/512/EntryId/7961/Default.aspx
OR
Contact https://airowire.com/ for advice.
