Skip to content
Uniqcli

Aruba EdgeConnect SD-WAN & SSE

Secure SD-WAN and SSE from HPE Aruba Networking, unified single-vendor SASE from branch to cloud

Overview

HPE Aruba Networking EdgeConnect is a secure SD-WAN platform for IT and network leaders who need to connect branch offices, data centers, and cloud workloads over any transport while replacing the routers and firewalls that used to do that job separately. It is built for distributed enterprises, healthcare systems, retailers, and federal and SLED agencies that are backhauling too much traffic to a data center and paying for MPLS circuits they no longer need.

EdgeConnect unifies SD-WAN path steering, a stateful next-generation firewall with IDS/IPS, routing, and an optional WAN optimization pack (Boost) in one appliance, so a branch that once needed a router, a firewall, and a WAN optimizer now needs one box. Gateways range from the fanless EC-10104 for small branch and home-office sites up to the 12 Gbps EdgeConnect 10150 for enterprise hubs and data centers, plus virtual gateways for AWS, Azure, and Google Cloud and an AP-based Microbranch option for home and temporary offices.

Paired with HPE Aruba Networking SSE, a cloud-delivered security service edge unifying ZTNA, Secure Web Gateway, CASB, and Digital Experience Monitoring across 500-plus edge locations, EdgeConnect becomes the on-ramp to single-vendor SASE. HPE Aruba Networking was the first SD-WAN vendor to attain ICSA Labs secure SD-WAN certification, and EdgeConnect SD-WAN was named CRN's highest-scoring 2024 SD-WAN Product of the Year. The stack is centrally managed through Aruba Central and licensable through HPE GreenLake, and TAA-compliant configurations are available for GPC, SAP, FAR-based orders, and GSA eBuy procurement.

Request a quote
Aruba EdgeConnect SD-WAN & SSE

A closer look

Aruba EdgeConnect SD-WAN & SSE — view 1
Aruba EdgeConnect SD-WAN & SSE — view 2
Aruba EdgeConnect SD-WAN & SSE — view 3
Aruba EdgeConnect SD-WAN & SSE — view 4

Why Aruba EdgeConnect SD-WAN & SSE

Applications and users have moved to the cloud, but most WANs were built to backhaul everything to a data center, which adds cost, latency, and a sprawl of branch appliances that each need patching and lifecycle management. EdgeConnect routes traffic intelligently and securely straight to where apps live, improving performance while consolidating separate routers and firewalls into one box to cut hardware, MPLS, and operational spend. Layering on Aruba SSE lets buyers retire VPN, enforce Zero Trust access for a distributed workforce, and get consistent security from one vendor and one policy engine instead of stitching together point products from separate suppliers.

Business-driven SD-WAN

Business Intent Overlays steer each application over the best available link in real time, so voice, video, and mission-critical apps get consistent performance across MPLS, broadband, LTE, and 5G.

Built-in next-gen firewall

An integrated stateful firewall with IDS/IPS, role-based segmentation, and adaptive machine-learning DDoS defense enforces Zero Trust at the branch, letting sites retire standalone firewalls.

Single-vendor SASE foundation

EdgeConnect plus Aruba SSE, unified with cloud-native NAC through Aruba Central, gives distributed organizations one consistent SASE architecture from a single policy engine.

First to ICSA Labs secure SD-WAN certification

HPE Aruba Networking was the first SD-WAN vendor to attain ICSA Labs secure SD-WAN certification, an independent validation of platform security and SD-WAN feature depth.

CRN 2024 SD-WAN Product of the Year

EdgeConnect SD-WAN scored highest overall in CRN's 2024 Products of the Year SD-WAN category and won CRN's 2024 Annual Report Card for SD-WAN.

Zero-touch, business-intent deployment

New branches come online through Business Intent Overlays and zero-touch provisioning, commonly live in minutes rather than the hours a CLI-driven router rollout takes.

What it does

ZTNA that fully replaces VPN

Agent-based or agentless Zero Trust Network Access grants per-application access to private apps, VoIP, AS400, and ICMP traffic, so users never touch the broader network and IT retires legacy VPN concentrators.

Secure Web Gateway with full inspection

SWG applies SSL inspection, URL filtering, sandboxing, malware scanning, DNS filtering, and threat intelligence to every internet-bound session from branch or remote user.

CASB for SaaS data protection

Cloud Access Security Broker enforces access policy by identity, device posture, and app risk, preventing data loss and reducing shadow IT exposure across sanctioned and unsanctioned SaaS.

Boost WAN optimization

An optional performance pack adds TCP acceleration, byte-level deduplication, compression, and forward error correction, cutting effective bandwidth needs for chatty apps, backups, and replication traffic.

Business Intent Overlays and zero-touch provisioning

Policy is defined once in business terms, not per-device CLI, and new branches come online in minutes through Orchestrator-driven zero-touch deployment.

Adaptive DDoS defense

Machine learning continuously adjusts DoS thresholds in real time at the branch edge, protecting sites that would otherwise rely on a centralized scrubbing service.

Digital Experience Monitoring

DEM tracks device, application, and hop-by-hop network performance so IT can pinpoint whether a slowdown originates on the LAN, WAN, ISP, or SaaS provider itself.

Multi-cloud on-ramps

Automated, optimized connectivity to AWS, Azure, Google Cloud, Alibaba Cloud, Equinix, and Megaport ruggedizes the first mile from branch to hyperscaler and interconnect.

The Aruba EdgeConnect SD-WAN & SSE lineup

EdgeConnect 10104

Fanless, silent-operation gateway for small branch and home office sites.

Up to 500 Mbps WAN bandwidth; compact fixed-port appliance with integrated NGFW

EdgeConnect 10106

Small branch gateway adding 1G fiber and PoE+ for connected devices.

Up to 1000 Mbps WAN bandwidth; combo 1G/SFP ports plus PoE+ up to 60W

EdgeConnect 10108

Medium branch gateway for higher-throughput sites needing more headroom.

Up to 2000 Mbps WAN bandwidth; combo 1G/SFP ports plus PoE+

EdgeConnect EC-S-P

Large branch and remote office gateway with pluggable fiber optics.

Up to 3000 Mbps WAN bandwidth; RJ45 plus 1/10 Gbps SFP+ ports, optional dual PSU

EdgeConnect EC-M-H

1U rack-mountable hub gateway for head office and data center hub sites.

Up to 5 Gbps WAN bandwidth; 8x RJ45 plus 4x 1/10 Gbps SFP+, PSU and storage redundancy

EdgeConnect EC-L-H

Higher-capacity hub gateway for larger data center and regional hub deployments.

Up to 10 Gbps WAN bandwidth; rack-mountable with redundant power

EdgeConnect 10150

Top-of-line 1U gateway for enterprise hub and data center locations.

Up to 12 Gbps WAN bandwidth; 8x 10G/25G SFP28 ports, dual PSU

EdgeConnect virtual gateways (EC-V) and Microbranch

Software gateways for AWS, Azure, and Google Cloud, plus AP-based Microbranch for home and micro offices.

Virtual appliances sized by throughput tier; Microbranch built on remote AP hardware

At a glance

Category
Secure SD-WAN and Security Service Edge (SSE) for single-vendor SASE
Unified gateway functions
SD-WAN, stateful next-gen firewall (IDS/IPS), routing, optional WAN optimization (Boost)
Gateway WAN bandwidth range
500 Mbps (EC-10104) to 12 Gbps (EdgeConnect 10150)
Transports
MPLS, broadband internet, fiber, LTE/5G; tunnel bonding and dynamic path steering
SSE components
ZTNA, Secure Web Gateway, CASB, Digital Experience Monitoring
SSE reach
500+ cloud edge locations for secure global access
Cloud on-ramps
AWS, Azure, Google Cloud, Alibaba Cloud, Equinix, Megaport
Certification
First SD-WAN vendor to attain ICSA Labs secure SD-WAN certification
Management
HPE Aruba Networking Orchestrator and Aruba Central; licensable via HPE GreenLake
Recognition
CRN 2024 SD-WAN Product of the Year and Annual Report Card winner

How to buy Aruba EdgeConnect SD-WAN & SSE

EdgeConnect SD-WAN and Aruba SSE are sold as separate SKUs that combine into one SASE bill: SD-WAN hardware or virtual gateways carry a one-time or subscription license, SSE and add-ons like Boost WAN optimization are consumption-based subscriptions tied to bandwidth or user count. Federal, SLED, and healthcare buyers can source the full stack through TAA-compliant configurations and standard government contract vehicles.

Gateway hardware + term license

Buy the EdgeConnect appliance (10104/10106/10108/10150, EC-S-P, EC-M-H, EC-L-H) outright and attach a 1, 3, or 5-year Orchestrator and support subscription per gateway.

Virtual gateway subscription

License EC-V software gateways by throughput tier for AWS, Azure, or Google Cloud deployments with no hardware to procure, ideal for cloud-first or DR sites.

Aruba SSE seat/bandwidth subscription

ZTNA, SWG, CASB, and DEM are licensed as a cloud subscription sized to users or aggregate bandwidth, stackable on top of any EdgeConnect gateway count.

GreenLake-managed consumption

Add EdgeConnect gateways and SSE licensing to an HPE GreenLake account for unified billing, inventory, and Aruba Central management alongside the rest of your HPE estate.

Federal and SLED contract vehicles

TAA-compliant EdgeConnect and Aruba SSE configurations are available through GPC, SAP, FAR-based orders, and GSA eBuy, with GPC purchasing supported for smaller acquisitions.

Where it fits

Replace legacy branch routers and firewalls with one secure SD-WAN appliance sized from EC-10104 (500 Mbps) to EdgeConnect 10150 (12 Gbps)
Connect branches directly and securely to cloud and SaaS apps instead of backhauling over MPLS to a central data center
Adopt single-vendor SASE by pairing EdgeConnect SD-WAN with cloud-delivered Aruba SSE and Aruba Central NAC
Retire VPN concentrators with agent-based or agentless ZTNA that grants per-application access for a hybrid workforce
Protect branch internet and cloud-app traffic with the built-in firewall, SWG, and CASB stack
Extend the secure WAN to home offices and micro-sites with EdgeConnect Microbranch on remote AP hardware
Ruggedize the first mile to AWS, Azure, and Google Cloud with virtual EdgeConnect gateways and cloud on-ramps

Frequently asked

What is SD-WAN?

SD-WAN (software-defined WAN) connects branch sites, data centers, and the cloud using software that steers each application over the best available link, whether broadband, MPLS, or LTE/5G. It improves performance and reliability while cutting reliance on expensive private circuits and the routers that terminate them.

What is SASE and how does EdgeConnect fit in?

SASE (Secure Access Service Edge) converges networking and security into a cloud-delivered model. EdgeConnect provides the SD-WAN connectivity layer; pairing it with Aruba SSE adds ZTNA, SWG, CASB, and DEM from the same vendor, giving buyers a single-vendor SASE architecture instead of stitching together point products.

How does EdgeConnect replace branch firewalls and routers?

EdgeConnect unifies SD-WAN, a stateful next-generation firewall with IDS/IPS, routing, and optional WAN optimization in one appliance. Sites that previously ran a separate router and firewall can retire both, cutting the branch hardware footprint and the number of devices IT has to patch and manage.

What is ZTNA and why replace VPN with it?

Zero Trust Network Access grants a user access to one specific application rather than the whole network, verifying identity and device posture each time. VPN exposes the entire network once connected; ZTNA limits the blast radius of a compromised credential and scales more predictably for a hybrid workforce.

Which clouds and interconnects does EdgeConnect support?

EdgeConnect automates optimized, secure connectivity to AWS, Microsoft Azure, Google Cloud, and Alibaba Cloud, plus interconnect partners Equinix and Megaport. Virtual EdgeConnect gateways deploy directly inside the cloud provider's network to ruggedize the first mile to IaaS and SaaS.

What gateway model fits a small branch versus a data center?

The fanless EC-10104 covers up to 500 Mbps for small branch and home office; the 10106 and 10108 step up to 1 and 2 Gbps for small-to-medium branches with fiber and PoE options. Large branches use the EC-S-P (up to 3 Gbps); head office and data center sites use EC-M-H (5 Gbps), EC-L-H (10 Gbps), or the 10150 (up to 12 Gbps).

Is EdgeConnect SD-WAN independently certified secure?

Yes. HPE Aruba Networking EdgeConnect was the first SD-WAN platform to attain ICSA Labs secure SD-WAN certification, validating tunnel bonding, dynamic path selection, zero-touch provisioning, anti-malware, intrusion prevention, DoS protection, and encryption against a rigorous third-party test standard.

Can federal, SLED, or healthcare buyers procure EdgeConnect and Aruba SSE through Uniqcli?

Yes. As an authorized HPE and HPE Aruba Networking reseller, Uniqcli quotes TAA-compliant EdgeConnect gateways, licensing, and Aruba SSE against GPC, SAP, FAR-based orders, and GSA eBuy contract vehicles, plus GPC purchasing for smaller buys. Submit specs through our quote page and we return a configuration matched to your contract vehicle.

Build your HPE bill of materials.

Send us the requirement, the project, or an existing quote to beat. We come back with a validated, TAA-compliant HPE configuration and a real price, often below list.

connect [at] getuniqcli.com · Chicago, IL