Aryaka SmartSecure Hosted VM Firewall Service

Aryaka’s Network Access Point (ANAP) integrates a Next Generation Firewall (NGFW) that runs as a virtual network function (VNF) on its ANAP 2600, ANAP 3000 and ANAP 10000 network appliances. The first technology partner providing the NGFW functionality is Palo Alto Networks with its VM series of virtualized NGFWs.

The combined solution delivers on a converged branch solution with best of breed capabilities in both networking and advanced security, optimally configured via intent-based policies. Enterprises can choose between deployment models that optimally fit their needs: self-managed if they have the resources and expertise to optimally configure and maintain their NGFW, or as a managed service if they would rather outsource basic configuration and day-to-day management to Aryaka experts and merely want to supervise operations.

The Challenge

With more than half of all enterprise WAN traffic moving to and from the cloud, global businesses are moving away from legacy architectures like MPLS. In a legacy WAN architecture, internet traffic was backhauled across the WAN to centralized firewalls to maintain security. However, in today’s cloud-centric context, ensuring application performance over such a backhauled setup becomes a challenge. In addition, security is not scalable when the organization has globally distributed users, locations and ever-increasing cloud presence.

Furthermore, optimally configuring, maintaining and extracting maximum benefits from specialized, best of breed security tools has become complex and time intensive.

Enterprises require a cloud-native SD-WAN platform that integrates private connectivity, application acceleration and security without adding network complexity and cost. Furthermore, enterprises must simplify optimal configuration and ongoing maintenance of advanced network and security tools.

Aryaka Cloud-First WAN

Aryaka’s SmartServices solution enables enterprises with fast global connectivity along with accelerated access to mission and business critical applications. Aryaka uses a global private network with built-in optimization and security capabilities that include a multi-layer security approach with a global private core network, fortified security on the POPs , end-to-end encrypted tunnels and stateful firewalls.

Aryaka implements an open, flexible and best of breed security model that empowers enterprises. Instead of being locked into a singular SD-WAN vendor’s security solution, enterprises can choose between best-of-breed security models, express the desired security posture with intent and delegate the implementation to Aryaka experts.

Aryaka SmartSecure: The Power of Choice

Several surveys prove that a majority of global enterprises trust a multi-layer, multi-vendor security strategy to address their individual needs based on global coverage, compliance requirements and their application mix.

The Aryaka SmartSecure solution provides an advanced set of software-based security functions, including stateful firewalls, micro-segmentation and partnerships with industry-leading security providers, allowing enterprises to optimally tailor a multi-layered, multi-vendor security solution to their very own needs.

Aryaka SmartSecure: The Power of Intent

Moreover, network security is complex to plan, configure and manage. Network and security professionals are faced with a myriad of functions and vendor solutions to simultaneously manage. Extracting the best possible performance and maintain the optimal, up-to-date configuration of every component represents a huge challenge. With the optional managed model in Aryaka SmartSecure, enterprise IT can simply define their desired security posture with high level business intent and delegate the implementation to Aryaka’s orchestration and certified product experts on customer approved configuration.

Note that the MyAryaka customer portal always provides full visibility and control over the VM life cycle management.

VNF Performance Visibility with MyAryaka

Delivering on additional functions with NFV deployment allows enterprises to simplify network operations and lower overall cost of ownership. But with NFV deployments it is important to get thorough, consolidated insight into a variety of performance aspects: enterprises now need to pay attention to CPU, memory utilization and its allocation to different VNFs. Visibility into VNF performance through packet data analysis of the traffic flowing across your entire network is critical to successful NFV deployments. Simultaneously, CPU and memory resources need to be closely monitored.

Solution Components

The Aryaka managed NGFW solutions consists of the following solution components:

Aryaka Hosted VM Firewall with Palo Alto Networks


Managed Secure SD-WAN

With WAN security top-of-mind, Aryaka’s SmartSecure offers enterprises a managed, secure SD-WAN service on an end-to-end secure infrastructure, first-mile, middlemile, and into the cloud.

Operational Simplicity

With a managed edge and cloud security service that leverages Tier-1 partners, Aryaka’s end-to-end managed SD-WAN effectively hides complexity from the enterprise.

Best of Breed Network Security

Palo Alto’s VM-Series virtual firewalls allow enterprises to consistently manage network security for applications hosted on-premises, in private and public clouds and across branch locations.

Lower TCO

By consolidating SD-WAN network and security functions on a single device as well as simplifying operations, Aryaka SmartSecure helps enterprises generate the maximum return on their SD-WAN investment.

About Aryaka

Aryaka is the leader and first to deliver Unified SASE as a Service, the only SASE solution designed and built to deliver performance, agility, simplicity and security without tradeoffs. Aryaka meets customers where they are on their unique SASE journeys, enabling them to seamlessly modernize, optimize and transform their networking and security environments. Aryaka’s flexible delivery options empower enterprises to choose their preferred approach for implementation and management. Hundreds of global enterprises, including several in the Fortune 100, depend on Aryaka for cloud-based software-defined networking and security services. For more on Aryaka, please visit