Networking
1819691 Members
3310 Online
109605 Solutions
New Article
Gabriel_Gomane

Simplify zero trust from edge to cloud with a holistic SASE platform

AdobeStock_729582765_layer_4_2_1600_0_72_RGB.jpgToday’s organizations must navigate hybrid workforces, increasing dependency on cloud, and a growing number of devices, including unmanaged IoT — all making zero trust an absolute necessity. However, adopting zero trust principles can seem daunting due to implementation complexity that may disrupt legacy systems and demand significant IT resources.  

A holistic platform simplifies the journey to zero trust from edge to cloud, making it accessible for any branch location, any user, and any device, and seamlessly integrates into existing ecosystems. Unlike traditional zero trust solutions that focus on specific areas like remote connectivity or NAC (Network Access Control), HPE Aruba Networking offers a holistic platform, combining SASE with advanced NAC capabilities. This is supported by security-first, AI-powered networking, enabling organizations to enforce universal ZTNA principles across all devices, whether remote or on-premises. 

Easily expand zero trust everywhere from edge to cloud 

HPE Aruba Networking redefines security with a robust, holistic platform, unlike traditional solutions that focus on specific areas of zero trust protection. Our edge-to-cloud zero trust platform combines single-vendor SASE with advanced, ML-based Network Access Control (NAC) capabilities. This enables organizations to enforce a universal ZTNA approach, with zero trust principles everywhere, on any device, remote or on-premises.  

c&p_launch_blog_3.png

The HPE Aruba Networking edge-to-cloud zero trust platform 

First, organizations can easily extend zero trust to remote users by replacing legacy VPNs with ZTNA to provide secure access to private resources. The solution’s agentless capability ensures secure connectivity for third-party users while minimizing risk. With ZTNA Private Edge, on-premises traffic of ZTNA users remains local, eliminating inefficient hairpin routing to the cloud. 

By extending security with advanced SSE features, cloud-centric organizations can fully protect their users and data wherever they are, with everything centrally managed from the cloud. SWG (Secure Web Gateway) protects all endpoints against web-based threats, such as ransomware and phishing, by filtering web traffic and blocking access to malicious or inappropriate content. CASB (Cloud Access Security Broker) helps protect sensitive data in SaaS applications, providing visibility, whether SaaS apps are authorized or unauthorized, and enforcing security policies to adhere to compliance requirements. Paired with DLP (Data Loss Prevention), the solution monitors user activity and prevents data leaks. 

Leave no device out of your sight with AI 

Because unmanaged devices and IoT create blind spots in organizations, HPE Aruba Networking provides deep network observability by accurately discovering, profiling, and monitoring a broad variety of devices, including IoT, through machine learning classification models. 

Once all endpoints are discovered and authenticated, the platform enforces global zero trust policies and granular access control using EVPN/VXLAN open standards. This facilitates inline policy enforcement to all endpoints through firewalls embedded in EdgeConnect SD-WAN solutions, HPE Aruba Networking access points and CX switches, and even third-party infrastructures. Organizations can also extend zero trust to data centers with HPE Aruba Networking CX 10000 switches, offering zero trust segmentation and east-west firewalling, eliminating the need to hairpin traffic to external hardware appliances. 

c&p_launch_blog_4.png

Enforce zero trust everywhere, from edge to cloud, using a holistic approach 

To monitor and adjust trust in real time, the platform provides security capabilities like IDS/IPS and Network Detection and Response (NDR). IDS/IPS is a signature-based system that monitors network traffic for patterns that match a particular attack signature. It leverages a library of more than 70,000 signatures, updated daily and can operate in either inline mode or out-of-band mode. ML-based network detection and response (NDR) establishes behavioral baselines for all devices, detects anomalies, and identifies threats with high accuracy, leveraging training data from nearly four million devices and over one billion clients. 

Seamlessly integrate into your existing zero trust ecosystem 

The HPE Aruba Networking edge-to-cloud platform integrates with over 150 third-party security products through HPE Aruba Networking 360 Security Exchange. This includes partnerships with identity management solutions and endpoint security providers. The open SSE ecosystem also ensures full integration, whether businesses opt for HPE Aruba Networking SSE or one of its trusted SSE partners. 

Additionally, the platform supports leading cloud providers, including AWS, Microsoft Azure, and Google Cloud to optimize traffic to these providers from branch locations. The newly added secure cloud on-ramp feature leverages the reliable backbones of these providers for fast and secure connectivity. 

To conclude, HPE Aruba Networking simplifies zero trust adoption with a holistic approach that extends from the edge to the cloud. Its AI-powered zero trust platform ensures consistent protection across all devices — whether remote or on-premises. By relying on advanced security architectures like SASE and universal ZTNA principles, HPE Aruba Networking helps organizations greatly improve their security posture while enforcing global zero trust policies. Automation and AI-powered insights provide deep visibility and observability on the network while enhancing threat detection and response. HPE Aruba Networking delivers a security-first AI-powered networking solution that scales with business needs, providing uncompromised security and connectivity.  

To learn more, please visit our SASE page 

 

Other resources: 

 

Microsoft Azure is either a registered trademark or trademark of Microsoft Corporation in the United States and/or other countries. Google Cloud is a trademark of Google LLC. All third-party marks are property of their respective owners. 

0 Kudos
About the Author

Gabriel_Gomane

Gabriel Gomane has more than 15 years of experience in product marketing and product management, focusing primarily on networking, security and digital transformation. He has broad international experience, having held marketing positions based in Europe and in the US. Before joining HPE Aruba Networking, Gabriel worked for various high tech companies including Meru Networks and MEGA International. Gabriel holds a BS in engineering from Grenoble INP and an MBA from HEC Paris.