Aruba EdgeConnect SD-WAN & SSE
Secure SD-WAN and SSE from HPE Aruba Networking, unified single-vendor SASE from branch to cloud
Overview
HPE Aruba Networking EdgeConnect is a secure SD-WAN platform for IT and network leaders who need to connect branch offices, data centers, and cloud workloads over any transport while replacing the routers and firewalls that used to do that job separately. It is built for distributed enterprises, healthcare systems, retailers, and federal and SLED agencies that are backhauling too much traffic to a data center and paying for MPLS circuits they no longer need.
EdgeConnect unifies SD-WAN path steering, a stateful next-generation firewall with IDS/IPS, routing, and an optional WAN optimization pack (Boost) in one appliance, so a branch that once needed a router, a firewall, and a WAN optimizer now needs one box. Gateways range from the fanless EC-10104 for small branch and home-office sites up to the 12 Gbps EdgeConnect 10150 for enterprise hubs and data centers, plus virtual gateways for AWS, Azure, and Google Cloud and an AP-based Microbranch option for home and temporary offices.
Paired with HPE Aruba Networking SSE, a cloud-delivered security service edge unifying ZTNA, Secure Web Gateway, CASB, and Digital Experience Monitoring across 500-plus edge locations, EdgeConnect becomes the on-ramp to single-vendor SASE. HPE Aruba Networking was the first SD-WAN vendor to attain ICSA Labs secure SD-WAN certification, and EdgeConnect SD-WAN was named CRN's highest-scoring 2024 SD-WAN Product of the Year. The stack is centrally managed through Aruba Central and licensable through HPE GreenLake, and TAA-compliant configurations are available for GPC, SAP, FAR-based orders, and GSA eBuy procurement.

A closer look




Why Aruba EdgeConnect SD-WAN & SSE
Applications and users have moved to the cloud, but most WANs were built to backhaul everything to a data center, which adds cost, latency, and a sprawl of branch appliances that each need patching and lifecycle management. EdgeConnect routes traffic intelligently and securely straight to where apps live, improving performance while consolidating separate routers and firewalls into one box to cut hardware, MPLS, and operational spend. Layering on Aruba SSE lets buyers retire VPN, enforce Zero Trust access for a distributed workforce, and get consistent security from one vendor and one policy engine instead of stitching together point products from separate suppliers.
Business-driven SD-WAN
Business Intent Overlays steer each application over the best available link in real time, so voice, video, and mission-critical apps get consistent performance across MPLS, broadband, LTE, and 5G.
Built-in next-gen firewall
An integrated stateful firewall with IDS/IPS, role-based segmentation, and adaptive machine-learning DDoS defense enforces Zero Trust at the branch, letting sites retire standalone firewalls.
Single-vendor SASE foundation
EdgeConnect plus Aruba SSE, unified with cloud-native NAC through Aruba Central, gives distributed organizations one consistent SASE architecture from a single policy engine.
First to ICSA Labs secure SD-WAN certification
HPE Aruba Networking was the first SD-WAN vendor to attain ICSA Labs secure SD-WAN certification, an independent validation of platform security and SD-WAN feature depth.
CRN 2024 SD-WAN Product of the Year
EdgeConnect SD-WAN scored highest overall in CRN's 2024 Products of the Year SD-WAN category and won CRN's 2024 Annual Report Card for SD-WAN.
Zero-touch, business-intent deployment
New branches come online through Business Intent Overlays and zero-touch provisioning, commonly live in minutes rather than the hours a CLI-driven router rollout takes.
What it does
ZTNA that fully replaces VPN
Agent-based or agentless Zero Trust Network Access grants per-application access to private apps, VoIP, AS400, and ICMP traffic, so users never touch the broader network and IT retires legacy VPN concentrators.
Secure Web Gateway with full inspection
SWG applies SSL inspection, URL filtering, sandboxing, malware scanning, DNS filtering, and threat intelligence to every internet-bound session from branch or remote user.
CASB for SaaS data protection
Cloud Access Security Broker enforces access policy by identity, device posture, and app risk, preventing data loss and reducing shadow IT exposure across sanctioned and unsanctioned SaaS.
Boost WAN optimization
An optional performance pack adds TCP acceleration, byte-level deduplication, compression, and forward error correction, cutting effective bandwidth needs for chatty apps, backups, and replication traffic.
Business Intent Overlays and zero-touch provisioning
Policy is defined once in business terms, not per-device CLI, and new branches come online in minutes through Orchestrator-driven zero-touch deployment.
Adaptive DDoS defense
Machine learning continuously adjusts DoS thresholds in real time at the branch edge, protecting sites that would otherwise rely on a centralized scrubbing service.
Digital Experience Monitoring
DEM tracks device, application, and hop-by-hop network performance so IT can pinpoint whether a slowdown originates on the LAN, WAN, ISP, or SaaS provider itself.
Multi-cloud on-ramps
Automated, optimized connectivity to AWS, Azure, Google Cloud, Alibaba Cloud, Equinix, and Megaport ruggedizes the first mile from branch to hyperscaler and interconnect.
The Aruba EdgeConnect SD-WAN & SSE lineup
EdgeConnect 10104
Fanless, silent-operation gateway for small branch and home office sites.
Up to 500 Mbps WAN bandwidth; compact fixed-port appliance with integrated NGFW
EdgeConnect 10106
Small branch gateway adding 1G fiber and PoE+ for connected devices.
Up to 1000 Mbps WAN bandwidth; combo 1G/SFP ports plus PoE+ up to 60W
EdgeConnect 10108
Medium branch gateway for higher-throughput sites needing more headroom.
Up to 2000 Mbps WAN bandwidth; combo 1G/SFP ports plus PoE+
EdgeConnect EC-S-P
Large branch and remote office gateway with pluggable fiber optics.
Up to 3000 Mbps WAN bandwidth; RJ45 plus 1/10 Gbps SFP+ ports, optional dual PSU
EdgeConnect EC-M-H
1U rack-mountable hub gateway for head office and data center hub sites.
Up to 5 Gbps WAN bandwidth; 8x RJ45 plus 4x 1/10 Gbps SFP+, PSU and storage redundancy
EdgeConnect EC-L-H
Higher-capacity hub gateway for larger data center and regional hub deployments.
Up to 10 Gbps WAN bandwidth; rack-mountable with redundant power
EdgeConnect 10150
Top-of-line 1U gateway for enterprise hub and data center locations.
Up to 12 Gbps WAN bandwidth; 8x 10G/25G SFP28 ports, dual PSU
EdgeConnect virtual gateways (EC-V) and Microbranch
Software gateways for AWS, Azure, and Google Cloud, plus AP-based Microbranch for home and micro offices.
Virtual appliances sized by throughput tier; Microbranch built on remote AP hardware
At a glance
- Category
- Secure SD-WAN and Security Service Edge (SSE) for single-vendor SASE
- Unified gateway functions
- SD-WAN, stateful next-gen firewall (IDS/IPS), routing, optional WAN optimization (Boost)
- Gateway WAN bandwidth range
- 500 Mbps (EC-10104) to 12 Gbps (EdgeConnect 10150)
- Transports
- MPLS, broadband internet, fiber, LTE/5G; tunnel bonding and dynamic path steering
- SSE components
- ZTNA, Secure Web Gateway, CASB, Digital Experience Monitoring
- SSE reach
- 500+ cloud edge locations for secure global access
- Cloud on-ramps
- AWS, Azure, Google Cloud, Alibaba Cloud, Equinix, Megaport
- Certification
- First SD-WAN vendor to attain ICSA Labs secure SD-WAN certification
- Management
- HPE Aruba Networking Orchestrator and Aruba Central; licensable via HPE GreenLake
- Recognition
- CRN 2024 SD-WAN Product of the Year and Annual Report Card winner
How to buy Aruba EdgeConnect SD-WAN & SSE
EdgeConnect SD-WAN and Aruba SSE are sold as separate SKUs that combine into one SASE bill: SD-WAN hardware or virtual gateways carry a one-time or subscription license, SSE and add-ons like Boost WAN optimization are consumption-based subscriptions tied to bandwidth or user count. Federal, SLED, and healthcare buyers can source the full stack through TAA-compliant configurations and standard government contract vehicles.
Gateway hardware + term license
Buy the EdgeConnect appliance (10104/10106/10108/10150, EC-S-P, EC-M-H, EC-L-H) outright and attach a 1, 3, or 5-year Orchestrator and support subscription per gateway.
Virtual gateway subscription
License EC-V software gateways by throughput tier for AWS, Azure, or Google Cloud deployments with no hardware to procure, ideal for cloud-first or DR sites.
Aruba SSE seat/bandwidth subscription
ZTNA, SWG, CASB, and DEM are licensed as a cloud subscription sized to users or aggregate bandwidth, stackable on top of any EdgeConnect gateway count.
GreenLake-managed consumption
Add EdgeConnect gateways and SSE licensing to an HPE GreenLake account for unified billing, inventory, and Aruba Central management alongside the rest of your HPE estate.
Federal and SLED contract vehicles
TAA-compliant EdgeConnect and Aruba SSE configurations are available through GPC, SAP, FAR-based orders, and GSA eBuy, with GPC purchasing supported for smaller acquisitions.
Where it fits
Frequently asked
What is SD-WAN?
SD-WAN (software-defined WAN) connects branch sites, data centers, and the cloud using software that steers each application over the best available link, whether broadband, MPLS, or LTE/5G. It improves performance and reliability while cutting reliance on expensive private circuits and the routers that terminate them.
What is SASE and how does EdgeConnect fit in?
SASE (Secure Access Service Edge) converges networking and security into a cloud-delivered model. EdgeConnect provides the SD-WAN connectivity layer; pairing it with Aruba SSE adds ZTNA, SWG, CASB, and DEM from the same vendor, giving buyers a single-vendor SASE architecture instead of stitching together point products.
How does EdgeConnect replace branch firewalls and routers?
EdgeConnect unifies SD-WAN, a stateful next-generation firewall with IDS/IPS, routing, and optional WAN optimization in one appliance. Sites that previously ran a separate router and firewall can retire both, cutting the branch hardware footprint and the number of devices IT has to patch and manage.
What is ZTNA and why replace VPN with it?
Zero Trust Network Access grants a user access to one specific application rather than the whole network, verifying identity and device posture each time. VPN exposes the entire network once connected; ZTNA limits the blast radius of a compromised credential and scales more predictably for a hybrid workforce.
Which clouds and interconnects does EdgeConnect support?
EdgeConnect automates optimized, secure connectivity to AWS, Microsoft Azure, Google Cloud, and Alibaba Cloud, plus interconnect partners Equinix and Megaport. Virtual EdgeConnect gateways deploy directly inside the cloud provider's network to ruggedize the first mile to IaaS and SaaS.
What gateway model fits a small branch versus a data center?
The fanless EC-10104 covers up to 500 Mbps for small branch and home office; the 10106 and 10108 step up to 1 and 2 Gbps for small-to-medium branches with fiber and PoE options. Large branches use the EC-S-P (up to 3 Gbps); head office and data center sites use EC-M-H (5 Gbps), EC-L-H (10 Gbps), or the 10150 (up to 12 Gbps).
Is EdgeConnect SD-WAN independently certified secure?
Yes. HPE Aruba Networking EdgeConnect was the first SD-WAN platform to attain ICSA Labs secure SD-WAN certification, validating tunnel bonding, dynamic path selection, zero-touch provisioning, anti-malware, intrusion prevention, DoS protection, and encryption against a rigorous third-party test standard.
Can federal, SLED, or healthcare buyers procure EdgeConnect and Aruba SSE through Uniqcli?
Yes. As an authorized HPE and HPE Aruba Networking reseller, Uniqcli quotes TAA-compliant EdgeConnect gateways, licensing, and Aruba SSE against GPC, SAP, FAR-based orders, and GSA eBuy contract vehicles, plus GPC purchasing for smaller buys. Submit specs through our quote page and we return a configuration matched to your contract vehicle.
Works with
EdgeConnect and Aruba SSE are one leg of a broader Aruba Networking and HPE stack. Pair the WAN and security edge with campus switching, wireless, NAC, and unified cloud management for a single vendor from branch to data center to cloud.
Compare before you buy
All comparisonsHPE Aruba Networking EdgeConnect SD-WAN vs Cisco Catalyst SD-WAN
Aruba EdgeConnect SD-WAN vs Cisco Catalyst SD-WAN
HPE Aruba Networking EdgeConnect SD-WAN vs Fortinet Secure SD-WAN
Aruba EdgeConnect vs Fortinet Secure SD-WAN Compared
HPE Aruba Networking EdgeConnect SD-WAN vs Cisco Catalyst SD-WAN
Aruba EdgeConnect vs Cisco Catalyst SD-WAN: Branch WAN
HPE Aruba Networking SSE (Axis Security) vs Zscaler Zero Trust Exchange
HPE Aruba SSE vs Zscaler: Security Service Edge Compared
Related in Networking

Aruba Access Points & Wi-Fi
The full Aruba AP portfolio, from entry Wi-Fi 6 to flagship Wi-Fi 7, matched to your density, environment, and budget

Aruba Central
AI-native cloud management for the whole network, with agentic AIOps and a GreenLake Copilot that reasons and acts

Aruba ClearPass Policy Manager
The multivendor NAC engine behind Aruba's Zero Trust access, hardware, virtual, or GreenLake, sized from 100 to 100,000 endpoints
Shop Aruba EdgeConnect SD-WAN & SSE in the catalog
See all results
Aruba Networking EdgeConnect 10150/10170 1.6TB Network Memory Drive Kit
S2N67A
Aruba Networking EdgeConnect 10150/10170 1.6TB Network Memory Drive Kit

Aruba Networking EdgeConnect 10012 480GB NVMe Boot Drive Kit
S3P35A
Aruba Networking EdgeConnect 10012 480GB NVMe Boot Drive Kit

Aruba Networking EdgeConnect 10020 4 Post Sliding Rail Kit
S3P32A
Aruba Networking EdgeConnect 10020 4 Post Sliding Rail Kit

Aruba EdgeConnect EC-10106/EC-10108 Accessory Kit
S2D96A
Aruba EdgeConnect EC-10106/EC-10108 Accessory Kit

HPE EdgeConnect Enterprise 10104 Rack Mount Kit
R9H42A
HPE EdgeConnect Enterprise 10104 Rack Mount Kit

JL172A#ABA
HPE OfficeConnect 1850 24G 2XGT PoE+ 185W Switch

JH327AR
HPE OfficeConnect 1420 5G Switch

JG708B#ABA
HPE OfficeConnect 1420 24G Switch
Build your HPE bill of materials.
Send us the requirement, the project, or an existing quote to beat. We come back with a validated, TAA-compliant HPE configuration and a real price, often below list.
connect [at] getuniqcli.com · Chicago, IL