The Aryaka Secure SD-WAN service utilizes Aryaka’s Zero Trust WAN and OnePASS architecture, offering optimal service level guarantees for any site, application, cloud, or user, delivered as-a-Service. Aryaka’s private core network (Zero Trust WAN) spans over 40 points of presence (POPs) worldwide, across six continents, ensuring reliable global coverage. The private core network is designed to offer optimized cost and deterministic performance and is backed by comprehensive Service Level Agreements (SLAs).
It is designed to deliver a software-defined network service experience that aligns with modern, distributed enterprises and the use of various applications and cloud services. A global, cloud-based delivery of our infrastructure ensures rapid worldwide connectivity and security services guarantee reliable performance and better user experience.
Aryaka’s Zero Trust WAN leverages a global dual private core network with a single-pass architecture, mesh service fabric, and integrated on-ramps to cloud and SaaS providers. Aryaka’s private global network is a closed network in which data is transported through enterprise-grade encrypted tunnels. A dedicated tunnel per customer on the network’s core provides traffic segregation. Combined with Aryaka AppAssure and Deep Packet Inspection allows Aryaka to treat every application according to the organization users’ requirements. Coupled with integrated WAN optimization, patented application acceleration features, application & link assurance technologies, proactive monitoring, and 24X7 managed service, it provides every application and user and optimal network performance experience.
Aryaka Secure SD-WAN leverages Aryaka’s OnePASS architecture design of a single management pane with a single pane of glass customer portal, a unified control plane and distributed data plane. The latter uses Aryaka’s Service POPs and edge appliance, the Aryaka Network Access Point (ANAP), with multi-traffic steering options to Aryaka’s private core network, ANAP to ANAP connectivity, local internet breakout and MPLS interworking, enabling seamless migration.
This flexible configuration allows enterprises to select the right traffic path for optimized for deterministic performance and cost efficiency. The service supports Aryaka’s integrated L3/4 stateful firewall, zones firewall, and standard IPsec encryption between branches/sites and POPs, site-to datacenters, site-to SaaS/Cloud, and site-to-site (intersite) communications. Deep Packet Inspection (DPI)/L7 for built-in AppAssure and adaptive QoS technologies, which enable auto-configuration for complete control over network resource allocation and provide full, immediate visibility into network and application performance.
The OnePASS architecture ensures that every flow is ‘run to completion’ for all SD-WAN and Unified SASE functions. It enforces policy consistently and without user performance impact across global scale deployments
Global Reach and Performance: Leverages Aryaka’s global private core network, a mesh service
fabric encompassing over 40 points of presence ensuring sub-30ms latency to over 95% of the
world’s business population.
Multi-Traffic Path Steering: Enhances network performance and reliability by dynamically managing multiple WAN connections.
Adaptive Traffic Management: Provides end-to-end application and network optimization with built-in AppAssure and adaptive QoS technologies.
Branch and Cloud Security: Integrates security features including stateful firewalls, micro-segmentation and zones firewalls, cloud-connectors, and select 3rd party virtual firewalls.
Zero Touch Deployment: Streamlined and automated process designed to simplify the setup and deployment of Aryaka’s SD-WAN solutions with pre-configured, plug-and-play, secure authentication to management portal.
Single Portal: Integrated access to web-based portal for management, monitoring, configuration, troubleshooting for SD-WAN, Unified SASE, Advanced Security insights and control.
Rapid Deployment: Features fast site deployment capabilities ranging from hours to days, supported by zero-touch provisioning at the service edge.
Operational Efficiency: Simplifies operations through closed-loop workflows, rapid change management, and a unified management framework.
Cost Efficiency: Operates on a 100% subscription-based OPEX model, eliminating CAPEX and hardware replacement costs.
| Features | |
| Site Licenses with Bandwidth (S, M, L, XL) S: 100MB | M: 200MB | L: 500MB | XL: 1GB |
Included |
| Traffic Steering / Link Assure (VPN Path Aryaka) • Path Preference, Path Selection • Path Replication, Load Balancing • Packet Loss Recovery, De-jitter |
Included |
| MPLS Interworking | Included |
| Hybrid WAN (Internet VPN Path) • Site-to-Site over Internet • Internet Link Assure (Path Preference, Load Balancing, FEC, De-jitter) |
Included |
| Security • Stateful Firewall L3/L4/App DPI • Micro-Segmentation / Zones • Cloud Security Connector (i.e., Menlo Security, Zscaler, others) |
Included |
| AppAssure (Observability & Control/DPI) | Included |
| ANAP (Edge Appliance) Portfolio | Included |
| ANAP Zero Touch Deployment | Included |
| Service POP Global Footprint | Included |
| Single Portal (MyAryaka) | Included |
| Multi-Cloud Connectivity enabled | See document |
| WAN Optimization enabled | See document |
| AI>Perform enabled | See document |
| Secure Remote Access enabled | See document |
| SLA Private Core Network Uptime | up to 99.999% |
| Add-ons | |
| High-Availability (POP and ANAP)/td> | See document |
| SaaS Acceleration | See document |
| AI>Observe | See document |
| Upgrade | |
| Unified SASE and Advanced Security upgrade-ready | See plans |
Secure SD-WAN is part of Aryaka SD-WAN services which has two types of licenses to meet different deployment needs: site licenses and user licenses. Site licenses are used to enable Global Connectivity services at a specific location. User licenses are used to enable the services for remote users.
| Service | Prerequisite Service Plan | Upgrade Options |
| Secure SD-WAN | Aryaka SD-WAN | Aryaka Unified SASE Aryaka Advanced Security |
Secure SD-WAN
Global Connectivity
Multi-Cloud
WAN
Optimization
AI> Perform
Secure Remote
Access
NGFW-SWG
IPS
Anti-Malware
CASB
DLP*
*Coming soon
Aryaka is the leader in delivering Unified SASE as a Service, a fully integrated solution combining networking, security, and observability. Built for the demands of Generative AI as well as today’s multi-cloud hybrid world, Aryaka enables enterprises to transform their secure networking to deliver uncompromised performance, agility, simplicity, and security. Aryaka’s flexible delivery options empower businesses to choose their preferred approach for implementation and management. Hundreds of global enterprises, including several in the Fortune 100, depend on Aryaka for their secure networking solutions. For more on Aryaka, please visit www.aryaka.com.