Aruba Fully Integrates Silver Peak SD-WAN, Unveils SASE Strategy

ARUBA ATMOSPHERE — Aruba Networks has built more automation, visibility and security into the Silver Peak SD-WAN offering it acquired last year.

The networking vendor on Tuesday unveiled upgrades and integrations to its Edge Services Platform (ESP). Aruba enhanced its EdgeConnect SD-WAN edge offer (formerly of Silver Peak) in addition to updating its Orchestrator management console (also formerly of Silver Peak). Aruba also added Netskope to its roster of cloud security partners and emphasized its commitment to taking a best-of-breed approach to the secure access service edge (SASE).

The vendor rolled out its Edge Services Platform (ESP) back in June. The company said at the time that it intended to use the AI-powered, cloud-based platform to “unify and protect the edge.” Then HPE, which owns Aruba, announced the purchase of SD-WAN provider Silver Peak a month later. The $925 million acquisition brought Silver Peak into the Aruba Business unit.

Integration

Aruba’s Rolf Muralt

Rolf Muralt, Aruba’s senior director of product management, said that although Aruba wanted to make the Silver Peak EdgeConnect solution more complete, the buyer wanted to maintain Silver Peak’s distinctive “elements of innovation.” He said Silver Peak uses centralized orchestration to assign business-intent policies. In addition, he said the updated offering keeps an interface that Silver Peak partners and customers will find familiar.

“For years as an independent company, customers understood that we had this great application identification engine and how important that was from a quality of experience point of view to use MPLS, internet [and] LTE connections, but be sure that the network that was delivered to the application actually fit the topology and the quality of experience that the app wanted,” Muralt said.

However, Muralt said customers were requesting more visibility into their users and devices.

“Whose flow did we just classify from an application point of view? Who was the user that triggered that? What was the device that triggered that? What was the role? Is it maybe the small percentage of traffic that needs closer inspection?” Muralt said.

IoT Problems

According to Muralt, customers in the 50-200 site range were seeing more IoT devices on the network. For example, devices like cameras and point-of-sale terminals were multiplying and presenting problems.

“That traffic was very hard to secure, because you can’t go and install an agent on top of them,” Muralt said.

Therefore, Aruba has integrated its ClearPass Policy Manager with EdgeConnect in order to improve visibility and segmentation. ClearPass ensures that users and devices can only communicate with destinations consistent with their role. For example, a camera only needs to communicate with the surveillance department. A point-of-sale device needs to go to the financial transaction back end but perhaps also to an onsite printer. ClearPass keeps the IoT device in that segment to keep it out of trouble.

“The only way you can secure this device’s traffic is by limiting its lateral movements,” Muralt said. “If something is compromised, make sure it can’t take over something else. If your HVAC is compromised, make sure that it can’t then move over to getting insights into the point-of-sale stuff.”

Partner Opportunities

Paul Kaspian, Aruba’s senior marketing manager for enterprise security, said EdgeConnect partners and customers can now establish more granular policies pertaining to users, roles and devices. Previously, Silver Peak relied on application-centric intelligence in order to steer traffic, but now it can utilize Aruba’s “rich user telemetry.”

Aruba’s Paul Kaspian

Kaspian pointed to the ClearPass/EdgeConnect integration as an opportunity to add professional services. They can help customers handle their proliferating number of IoT devices. Partners can go into the customer location, take inventory of the customer’s various IoT devices using ClearPass, and help the customer segment and protect the traffic.

“We see that as an engagement a partner can do, being the adviser and guiding the customer on the journey of getting better security,” Kaspian said.

Security and SASE

Aruba also integrated Threat Defense, its unified threat management (UTM) solution, into EdgeConnect. As a result, the Silver Peak-based solution and Aruba’s pre-existing SD-Branch solution share a common defense infrastructure. That defense includes …