HPE Aruba Networking
EdgeConnect SD-WAN
Power branch, WAN and security with a secure SD-WAN as the foundational component for architecting a single-vendor SASE solution.
EdgeConnect SD-WAN & SD-Branch Gateway
For modern enterprise branches and hubs, Aruba EdgeConnect SD-WAN delivers a robust foundation for SD-WAN, SASE, and branch gateway needs.
Built for the Modern Branch & Hub
EdgeConnect combines next-generation firewall, application-aware routing, and cloud/SaaS optimization in a single platform—ideal for branch and hub locations of all sizes.
Next-Generation Firewall (NGFW)
Built-in stateful firewall with IDS/IPS, application visibility, and threat defense. Replace legacy branch firewalls and reduce hardware footprint.
Application-Aware Routing
Automatically steer traffic based on application type, business priority, and real-time WAN conditions. Prioritize Zoom over file transfers, route SAP over MPLS, send web traffic over Internet—all dynamically.
Cloud & SaaS Optimization
Direct-to-cloud breakout for Microsoft 365, Salesforce, AWS, Azure—with local internet egress for the best user experience. No more hairpinning SaaS traffic through the data center.
Award-Winning Platform: EdgeConnect SD-WAN won CRN 2024 Product of the Year and Annual Report Card (ARC) awards—scoring highest overall in the SD-WAN category.
Flexible Deployment Options
Handles small edge sites up through large data-center branch hubs—one platform, many use cases.
Thin-Edge Gateway
Small footprint appliance for 5–25 user sites (retail, clinics, small branches). Compact, PoE-powered, fanless design.
Standard Branch Gateway
1U/2U rack-mount or desktop form factors for 25–500 user branches. Full SD-WAN stack with redundant power, WAN bonding, LTE failover.
Large Hub & Data Center
High-throughput models for regional hubs, campus cores, and data centers. Support for 10 GbE uplinks, thousands of concurrent sessions.
Zero-Touch Provisioning
Ship hardware to remote location. Plug in power and WAN. EdgeConnect auto-registers with Orchestrator and downloads config. Done.
WAN Transport Bonding & Hybrid Connectivity
EdgeConnect supports hybrid WAN—combining Internet, MPLS, and cellular links for maximum performance and resilience.
- Transport bonding: Combine multiple WAN links for aggregated bandwidth
- Active-active failover: Use all links simultaneously, automatic failover on degradation
- LTE/5G backup: Built-in cellular modem options for out-of-band management and WAN redundancy
- Dynamic path selection: Real-time monitoring adjusts routing based on jitter, latency, packet loss
Integration with Aruba Central
Unified monitoring and policy enforcement across both SD-WAN and SD-Branch gateways from a single cloud dashboard.
- One pane of glass: Manage EdgeConnect SD-WAN, APs, switches, and gateways from Aruba Central
- Consistent policies: Define firewall, QoS, and segmentation rules once—apply everywhere
- AIOps insights: AI-powered analytics correlate SD-WAN performance with wireless/wired events
- Simplified licensing: Flexible consumption-based or term licensing through Aruba Central subscriptions
Ready to Transform Your Branch & WAN Infrastructure?
Discover how EdgeConnect SD-WAN delivers security, performance, and flexibility for modern enterprise networks.

Secure branch offices
Enforce Zero Trust in branch offices with a built-in next-generation firewall providing IDS/IPS and role-based segmentation capabilities. Replace legacy branch firewalls and reduce hardware footprint.
Adopt multi-cloud networking
Simplify and automate secure multi-cloud connectivity to leading cloud and SaaS providers, extending the benefits of SD-WAN and delivering the highest levels of application performance.
Exceed performance levels
Because not all SD-WANs are created equal, build a modern WAN that assures the highest performance and availability, whether applications reside in the data center or the cloud.
Reduce costs
Understand the business value and financial impact of SD-WAN through a customer value assessment, analyzing traditional network challenges and justifying a shift to SD-WAN.
Journey to single-vendor SASE starts with a secure SD-WAN
Embrace WAN and security transformation to realize the maximum return from your cloud investments.
EdgeConnect SD-WAN wins CRN 2024 Product of the year and Annual Report Card (ARC) awards!
EdgeConnect SD-WAN scored highest overall in the SD-WAN product category in CRN’s 2024 Products of the year and has been recognized as the overall winner of CRN’s 2024 Annual Report Card (ARC) for SD-WAN.
Building a SASE foundation: SD-WAN with SWG
Learn how the integration of SWG into EdgeConnect SD-WAN helps organizations protect all users and things from web-based threats, at the branch edge, while establishing the foundation for a unified SASE architecture.
Protect branch offices against DDoS attacks with machine learning
With Adaptive DDoS defense, EdgeConnect SD-WAN protects branch offices against DDoS attacks by automatically adjusting DoS thresholds in real time using machine learning.
Secure Edge & SASE — Modern Access, Simplified Security
In a world where users connect from anywhere and applications live across multiple clouds, traditional network security can't keep up. HPE Aruba Networking's Secure Edge / SASE platform brings together SD-WAN connectivity and cloud-native security so you get seamless access, strong control, and less complexity.
Key Security Features
Secure Web Gateway (SWG)
Inspect web traffic, block threats, and enforce policy in the cloud. Protect users from malware, phishing, and malicious websites—no matter where they connect.
Cloud Access Security Broker (CASB)
Protect sensitive data in SaaS applications, control shadow IT, and enforce compliance. Gain visibility into Microsoft 365, Salesforce, Google Workspace, and thousands of other cloud apps.
Zero Trust Network Access (ZTNA)
Give users only the specific apps they need — no full network access by default. Replace legacy VPNs with identity-based, least-privilege access that reduces attack surface.
Integrated SD-WAN
Use HPE Aruba EdgeConnect to combine connectivity and security under one architecture. Eliminate the need for separate SD-WAN and security appliances at every branch.
Cloud-Native PoPs Across Major Clouds
HPE's SASE / SSE infrastructure spans AWS, Azure, Google Cloud, and Oracle Cloud. Traffic is inspected and secured close to the source—reducing latency and improving performance.
Eliminate VPN Pain
Move away from backhauling traffic through legacy VPNs. Get direct, optimized access from branch/remote locations into your cloud applications—faster and more secure.
Use Cases
Remote / Hybrid Workforce
Secure access to corporate apps for employees working from home, coffee shops, or anywhere—without the complexity and performance issues of traditional VPNs.
Retail & Branch Locations
Connect branch offices and retail stores to the cloud without complex VPN infrastructure. Simplified deployment, centralized management, consistent security.
Multi-Cloud Adoption
Organizations using AWS, Azure, and Google Cloud need consistent security policies across all environments. Secure Edge / SASE provides unified protection.
Why SASE Matters
- 70% of workforce now hybrid or remote
- SaaS apps account for 80%+ of traffic
- VPN backhauling adds 30-50% latency
- Traditional perimeter security is obsolete
Ready to Modernize Your Security Architecture?
Replace legacy VPNs and complex security stacks with a unified SASE platform built for the cloud era.
Solutions
Connect your edge
Securely connect all your users, applications and devices.
HPE Aruba Networking SASE
Enhance security and simplify operations while providing fast, secure access to applications and data with a single-vendor SASE solution.
HPE Aruba Networking SSE
Apply consistent security from the cloud and provide more secure access to applications wherever they reside.
