In short
HPE Aruba SASE, now HPE Networking SASE, combines EdgeConnect SD-WAN with HPE's Security Service Edge (SSE): agent-based and agentless ZTNA, secure web gateway, CASB and DLP, managed with SD-WAN in one console. Forever Systems, an HPE Networking Business Partner, can quote and set it up for UK organisations, including Juniper Secure Edge.
Get a quote for HPE Aruba Networking SASE
Tell us roughly how many users or sites you have and we will come back to you with options and a quote.
What is HPE Aruba SASE?
HPE's SASE page (opens in a new tab) describes HPE Networking SASE as an AI-native SASE platform unifying secure SD-WAN, a Security Service Edge (SSE) and cloud-native NAC. The product is still widely searched as HPE Aruba Networking SASE or Aruba SASE, and HPE's own menu lists it as HPE Aruba Networking Unified SASE.
| Part | What HPE says it does |
|---|---|
| HPE Networking EdgeConnect | Secure SD-WAN, which HPE calls the foundational component for architecting SASE: tunnel bonding, multi-cloud networking, WAN optimisation and a next-generation firewall |
| HPE Networking Security Service Edge (SSE) | Agent-based and agentless ZTNA, secure web gateway (opens in a new tab), CASB and DLP with a unified policy engine |
| Cloud-native NAC with HPE Aruba Networking Central | Zero trust for managed and unmanaged devices, including IoT, using role-based controls and AI profiling |
| HPE Networking SRX Firewalls | Next-generation firewalls in a hybrid mesh firewall (opens in a new tab) approach, where on-site firewalling is still needed |
HPE also says SD-WAN and its Security Service Edge (SSE) are now managed in a single console powered by EdgeConnect, and its FAQ calls the combination a single-vendor SASE solution. Source: HPE, checked 9 November 2026.
Not sure which option fits? Ask us
Tell us what you need and we will recommend the right option for your organisation, with a quote.
Single-vendor or EdgeConnect with another Security Service Edge (SSE)
HPE gives you two routes:
| Route | What it looks like | Often suits |
|---|---|---|
| Single-vendor HPE Networking SASE | EdgeConnect at each site and HPE's Security Service Edge (SSE) for users and cloud traffic, in one console | Organisations standardising on HPE Aruba Networking or refreshing branch WAN and remote access together |
| EdgeConnect with a third-party Security Service Edge (SSE) | EdgeConnect SD-WAN steering traffic to another vendor's security cloud; HPE says it supports integration with multiple Security Service Edge (SSE) vendors | Organisations that already run another vendor's cloud security and want to keep it |
The trade-offs between these models are set out on single vendor SASE and SASE vs SD-WAN.
Juniper Secure Edge (HPE Juniper Networking)
HPE Networking now includes Juniper, and also offers Juniper Secure Edge, a per-user subscription. Its higher service tier adds DNS security, zero-day threat prevention with cloud sandboxing, encrypted traffic insights and IDS/IPS.
It suits organisations whose sites run Juniper SRX firewalls or Mist-managed networks and who want cloud security from the same family. We can quote Juniper Secure Edge alongside HPE Aruba Networking options and help you compare the two. Juniper SRX firewalls and Mist access points are on our hardware store under HPE Networking (opens in a new tab).
Is HPE Aruba Networking SASE the right fit for you?
We will check it against your systems and requirements and recommend the right option.
How HPE Aruba Networking SASE is deployed
- Assess the WAN: links per site, MPLS contracts, SaaS use and where traffic is backhauled today. HPE positions the platform as a way to reduce MPLS dependency and stop backhauling SaaS traffic to the data centre.
- Place EdgeConnect at a pilot site, physical or virtual, and set business intent overlays for key applications.
- Turn on Security Service Edge (SSE) policy for a pilot group of users, with agentless access for contractors and unmanaged devices.
- Add NAC and segmentation through HPE Aruba Networking Central for on-site users and IoT, so the same zero trust policy applies on the LAN.
- Roll out site by site as WAN contracts allow.
HPE offers a browser-based test drive of the SASE production environment and online workshops, which help when you are building a shortlist. Implementation stages for any platform are on SASE implementation.
How it is licensed
HPE Networking SASE is subscription-based: EdgeConnect licences for each site's appliance or virtual instance, and Security Service Edge (SSE) licences for users. Juniper Secure Edge is a per-user subscription. Which tiers you need depends on sites, bandwidth, users and features, so units and terms are confirmed at quote. Subscriptions can be billed monthly, terms confirmed at quote; ask us for a quote.
What Forever Systems does
Forever Systems is an HPE Networking Business Partner. We can:
- Assess your WAN, branch firewalls, remote access and Aruba or Juniper estate
- Recommend single-vendor HPE Networking SASE, EdgeConnect with your current cloud security, or Juniper Secure Edge
- Quote EdgeConnect, Security Service Edge (SSE) licences and any HPE Networking hardware together
- Deploy a pilot site and user group first, with support scope confirmed at quote
Contact us to talk it through. Other platforms are compared on SASE vendors.
How Forever Systems helps with SASE
Forever Systems supplies several SASE and Security Service Edge (SSE) platforms, so we can recommend the one that fits your sites, your people and the network and security kit you already run.
- Assess first: we look at your current VPN, firewalls, WAN links and identity set-up, and the applications people need to reach
- Help you choose: single-vendor or dual-vendor SASE, or Security Service Edge (SSE) first and SD-WAN later, matched to what you need now
- Pilots and phased roll-out: we can help you start with one group of users or one site, then extend policy step by step
- Licensing in one place: subscriptions can be billed monthly, with terms confirmed at quote
We work with businesses, schools, charities and public sector organisations. Pricing depends on users, sites, components and term, so ask us for a quote.
Frequently asked questions
What is HPE Aruba SASE?
HPE Aruba SASE, now marketed as HPE Networking SASE, combines HPE Networking EdgeConnect SD-WAN with HPE's Security Service Edge (SSE) and cloud-native NAC, managed with SD-WAN in one console.
Is HPE Aruba Networking SASE single-vendor?
It can be. HPE describes a single-vendor SASE solution when EdgeConnect is paired with its own Security Service Edge (SSE), and also supports EdgeConnect with other vendors' cloud security.
What does HPE's Security Service Edge (SSE) include?
HPE lists agent-based and agentless ZTNA, a secure web gateway, CASB and DLP, with a unified policy engine.
What is Juniper Secure Edge?
A per-user security subscription from the Juniper side of HPE Networking, with tiers that add DNS security, cloud sandboxing, encrypted traffic insights and IDS/IPS. We can quote it alongside HPE Aruba Networking options.
Can we keep our existing SD-WAN or firewalls?
Often, yes. Sites can move to EdgeConnect in stages, and SRX firewalls can stay where on-site firewalling is needed. We plan the order with you.
Still have a question about HPE Aruba Networking SASE?
Ask us and a member of our team will get back to you.
More SASE guides
Cisco SASECisco Secure Access with Cisco SD-WAN or Meraki SD-WAN, explained.