HPE Aruba Networking EdgeConnect SD-WAN QuickSpecs

Contents
Download
Share

QuickSpecs

HPE Aruba Networking Edge Connect SD-WAN QuickSpecs

Shape the Future of QuickSpecs - Your Input Matters

As cloud-based application adoption continues to accelerate, geographically distributed enterprises increasingly view SD-WAN as critical to connecting users to applications.

With enterprise applications migrating from the corporate data center to the cloud, private line connections such as multi-protocol label switching (MPLS) have proven to be overly rigid and expensive. With greater reliance on the internet, the opportunity to achieve “cloud speed” is better served by integrating broadband internet services into the WAN transport mix.

The HPE Aruba Networking EdgeConnect SD-WAN platform enables enterprises to improve application performance and dramatically reduce the cost and complexity of building a WAN by leveraging broadband internet to connect users to applications.

Overview

EdgeConnect SD-WAN provides a secure network foundation for Zero Trust and SASE frameworks to tackle the networking and security challenges of hybrid working and cloud computing. The solution tightly integrates with HPE Aruba Networking SSE to form a unified SASE platform, for simpler adoption and faster deployment of SASE.

Additionally, EdgeConnect SD-WAN includes a built-in next-generation firewall providing fine-grained segmentation and identity-based access control capabilities, as well as IDS/IPS and DDoS defense to protect branch offices from malicious activities.

Recognized by an independent, third-party organization, EdgeConnect SD-WAN has earned the Secure SD-WAN Certification from ICSA Labs thanks to its advanced SD-WAN and security features.

Three components comprise the HPE Aruba Networking EdgeConnect SD-WAN platform:

– HPE Aruba Networking EdgeConnect SD-WAN physical or virtual SD-WAN appliances (supporting any common hypervisors and public clouds) are deployed in branch offices to create a secure, virtual network overlay. This enables customers to move to a broadband WAN at their own pace, whether site-by-site or via a hybrid WAN approach that leverages MPLS and broadband internet connectivity.
– HPE Aruba Networking EdgeConnect SD-WAN Orchestrator, included with the EdgeConnect SD-WAN platform, provides unprecedented levels of visibility into both legacy and cloud applications, and centrally assigns policies based on business intent to secure and control all WAN traffic. Policy automation speeds and simplifies deployment of multiple branch offices and enables consistent policies across applications. Moreover, customers can launch the SD-WAN Orchestrator software directly from HPE Aruba Networking Central to view the enterprise-wide SD-WAN topology, health status, and alarms of all EdgeConnect SD-WAN appliances in the SD-WAN and other HPE Aruba Networking wired and wireless network devices.
– HPE Aruba Networking EdgeConnect WAN Optimization is an optional performance pack that combines WAN optimization technologies with EdgeConnect SD-WAN to create a single, unified WAN edge platform. WAN Optimization accelerates performance of latency-sensitive applications and minimizes transmission of repetitive data across the WAN in a single, unified SD-WAN edge platform.

EdgeConnect SD-WAN unified fabric

EdgeConnect SD-WAN provides a comprehensive portfolio of access deployment options to connect enterprise organizations to a single SD-WAN fabric, orchestrated by HPE Aruba Networking Central. This integration provides a consistent, scalable, and easy-to-manage solution that reduces complexity and enhances performance across all locations. It includes three types of right-sized deployment models, or “onramps,” to the SD-WAN fabric including:

– HPE Aruba Networking EdgeConnect SD-WAN provides maximum network performance and security through an advanced secure SD-WAN using Business Intent Overlays
– HPE Aruba Networking EdgeConnect SD-Branch allows IT Admins to consolidate branch networking components for maximum integration across wireless, LAN, and SD-WAN with integrated security and centralized cloud management.
– HPE Aruba Networking EdgeConnect Microbranch is ideally suited for small office or work-from-home sites. It uses a range of HPE Aruba Networking remote access points (RAPs) paired with SD-WAN capabilities enabling secure connectivity to the corporate enterprise network.

HPE Aruba Networking Central orchestrates the EdgeConnect SD-WAN fabric between EdgeConnect SD-WAN, EdgeConnect SD-Branch and EdgeConnect Microbranch devices. This integration allows EdgeConnect SD-WAN physical appliances to act as VPN concentrators (VPNC) in the SD-WAN fabric, connecting EdgeConnect SD-Branch gateways and EdgeConnect Microbranch APs to either EdgeConnect SD-Branch VPNC or EdgeConnect SD-WAN VPNC in hub locations. Additionally, tunnels and routes are visible on both HPE Aruba Networking Central and SD-WAN Orchestrator. Organizations with an existing EdgeConnect SD-WAN deployment can leverage this feature to build a consistent networking and security strategy, seamlessly integrating with other HPE Aruba Networking products such as EdgeConnect SD-Branch, EdgeConnect Microbranch, switches and access points.

Standard Features

EdgeConnect SD-WAN Key Features

– Business Intent Overlays: EdgeConnect SD-WAN is built upon an application-specific virtual WAN overlay model. Multiple overlays may be defined to abstract the underlying physical transport services from the virtual overlays, each supporting different QoS, transport, failover, and security policies. Groups of applications are mapped to different business intent overlays to deliver applications to users in alignment with business requirements. Business intent overlays may also be deployed to extend micro-segmentation of specific application traffic from the data center across the WAN to help maintain security compliance mandates.
– Path Conditioning: This feature provides private-line-like performance over the public internet. It includes techniques to overcome the adverse effects of dropped and out‑of-order packets that are common with broadband internet and MPLS connections, thus improving application performance.
– Tunnel Bonding: Configured from two or more physical WAN transport services, bonded tunnels form a single logical overlay connection, aggregating the performance of all underlying links. Real-time traffic steering is applied over broadband, MPLS, or any combination of links based upon company-defined policies that hinge on business intent. In the event of an outage or brownout, EdgeConnect SD-WAN automatically continues to carry traffic on remaining links or switches over to a secondary connection.
Network traffic traversing an EdgeConnect SD-WAN can be tuned for availability, quality, throughput, and efficiency. This is accomplished on a per-application basis via Business Intent Overlays. Multiple business intent policies can be created, each with its own specific bonding policy. As part of this policy definition, the customers can customize link prioritization and traffic steering policies based on multiple criteria, including physical performance characteristics, link economics, link resiliency characteristics, and customer-definable attributes.

AppExpress

AppExpress optimizes user experience for up to 50 business-critical private and SaaS applications such as Zoom, Workday, SAP®, Microsoft 365, and other applications. AppExpress exploits SD-WAN path diversity by automatically selecting the best path for each application. The feature leverages synthetic polling and real-time user traffic observations to intelligently steer traffic regardless of how the application traffic is broken out. This includes:

– Local breakout: It efficiently routes traffic over MPLS, internet, 4G/5G, or satellite links, automatically choosing the best link for optimal performance.
– Optimized steering to IaaS: The system automatically steers traffic to a virtual instance of EdgeConnect SD- WAN hosted in IaaS platforms such as Amazon Web Services, Microsoft Azure, and Google Cloud™, ensuring efficient data flow.
– SSE PoP: AppExpress selects the best SSE Point of Presence (PoP) that offers the highest performance, further enhancing user experience.

To determine how to steer the traffic and to report performance, AppExpress relies on the Application Performance Index or Apdex. Apdex is an industry standard that measures user experience based on a sample set of latency measurements to produce a normalized score ranging from 0 to 100. Each measurement is put into three levels of responsiveness including “Satisfied”, “Tolerating” and “Frustrated” to calculate the Apdex score.

The Apdex score is continuously monitored so that the best path is dynamically selected depending on network conditions. This ensures that users consistently enjoy an unparalleled experience when accessing critical business applications.

– First-packet iQ application classification: HPE Aruba Networking EdgeConnect SD-WAN First-packet iQ application classification identifies applications on the first packet to deliver trusted SaaS and web traffic directly to the internet while directing unknown or suspicious traffic to the data center firewall or IDS/IPS. Identifying applications on the first packet is especially important when branches are deployed behind Network Address Translation (NAT); the correct path must be selected based on the first packet to avoid session interruption.

– Secure Internet Breakout: Granular, intelligent traffic steering enabled by First-packet iQ eliminates the inefficiency of backhauling all HTTP/HTTPS traffic to the data center. The solution eliminates the potential for wasted bandwidth and performance bottlenecks for trusted SaaS and web traffic. Trusted traffic is sent directly across the internet while unknown or suspicious traffic may be sent automatically to more robust security services in accordance with corporate security policies.

– Unified SASE (Secure Access Service Edge): To address the growing demand for integrated networking and security in the era of hybrid working and cloud computing, HPE Aruba Networking EdgeConnect SD-WAN solution seamlessly combines with HPE Aruba Networking SSE to establish a unified SASE platform. This cohesive approach streamlines adoption and expedites deployment of SASE.
The unified SASE solution not only encompasses the functionalities of SD-WAN but also extends its capabilities to meet the security needs of remote users and hybrid workers through Zero Trust Network Access (ZTNA). ZTNA ensures that access is granted with the principle of least privilege, strengthening overall security posture. Moreover, ZTNA enables users and authorized third parties to access resources with or without an agent. The unified SASE platform safeguards against malicious web traffic, including ransomware, malware, and phishing attacks, with Secure Web Gateway (SWG), provides robust protection for sensitive data and prevents data loss through Cloud Access Security Broker (CASB) and includes Digital Experience Monitoring (DEM) to optimize user experience and operations.
ZTNA, SWG, CASB, and DEM are seamlessly integrated into a single codebase for simplified policy management through a single interface and a single policy engine. Additionally, the solution harmonizes access across the world via an Amazon Web Services, Microsoft Azure, and Google Cloud backbone.

– Automated orchestration to third-party SSE vendors: HPE Aruba Networking EdgeConnect SD-WAN automates integration with leading SSE partner solutions from Zscaler, Netskope, Palo Alto Networks, Skyhigh Security, Broadcom, and others to create a seamless Secure Access Service Edge architecture. Automated orchestration, using a drag-and-drop interface, enables IT to configure consistent enterprise-wide security policies based on business requirements.

– Next-generation firewall: EdgeConnect SD-WAN includes a next-generation firewall that provides, in a single entity, advanced security features such as intrusion detection and prevention (IDS/IPS), DDoS defense and role-based segmentation, as well as application and user identity awareness. It blocks malware from entering the network based on application, identity and context, regardless of the port/protocol used and provides increased visibility into network activity and potential risks.

– Role-based segmentation: Create secure end-to-end zones across any combination of users, application groups and virtual overlays, pushing configuration updates to sites in accordance with business intent. HPE Aruba Networking ClearPass integration with EdgeConnect SD-WAN augments application intelligence with user and device identity and role-based policy, enabling fine-grained segmentation. The additional identity-based context offers consistent security policy enforcement that can be enforced network wide, from edge-to-cloud, while also accelerating troubleshooting and problem resolution.
Additionally, EdgeConnect SD-WAN integrates Central NetConductor capabilities. This combined solution allows organizations to implement an enterprise wide Zero Trust architecture, even in complex multi-vendor LAN environments, leveraging EVPN/VXLAN open standards. EdgeConnect SD-WAN can transport role information across the entire fabric, whether the traffic is directed towards a VXLAN-based campus fabric managed via NetConductor or a third-party campus fabric solution supporting EVPN VXLAN group-based policy. IT architects can easily create role-to-role micro-segmentation policies that can be applied to the entire enterprise. In case the network does not support VXLAN, radius snooping derives the role directly from RADIUS transactions for authentication and authorization or receives them as login and logout events from ClearPass via API.

– NAC Security: The integration of HPE Aruba Networking ClearPass with EdgeConnect SD-WAN enables administrators to secure EdgeConnect SD-WAN ports using 802.1X and MAC authentication. This is ideal for small locations, home offices, or any place where SD-WAN ports may be vulnerable to unauthorized access. With Network Access Control (NAC) enabled, the EdgeConnect SD-WAN appliance authenticates traffic using 802.1X, supporting EAP-TLS, EAP-TTLS, and EAP-PEAP authentication methods. MAC authentication is also available for devices such as IoT, that don’t support the 802.1X protocol.

– Threat intelligence with Secure Web Service: With the optional Secure Web Service, EdgeConnect SD-WAN enhances security with advanced web classification and reputation, as well as IP reputation analysis. Web classification and reputation (also known as URL filtering) helps organizations block access to harmful, inappropriate, or illegal websites that propagate malware, spam, spyware and phishing attacks, as well as websites with sensitive content such as adult or gambling content. The solution tracks more than 1 billion domains and 43 billion URLs and classifies them into more than 85 site categories including high-risk categories, by leveraging machine learning to increase speed and accuracy. To determine web reputation, the service uses site history, age, rank, location, networks, links, real-time performance, and other contextual and behavioral trend data to determine a URL reputation score from 1 to 100, with tiers split into Trustworthy, Low Risk, Moderate Risk, Suspicious and High Risk.
In addition to web classification and reputation, the IP reputation service strengthens security by providing real-time threat intelligence and global visibility into millions of malicious IPs, with new threats detected daily. IPs are categorized by threat types, including Windows exploits, web attacks, phishing, botnets, scanners, reputation, spam sources, mobile threats, and proxies. Using data analysis and correlation, the service assigns a predictive risk score from 1 to 100 for each IP address. Based on this score, IPs are classified into five tiers similar to URL reputation scores. This enables administrators to quickly identify and block high-risk IPs, helping prevent cyber threats such as malware, ransomware, phishing, and command-and-control attacks.

– Intrusion Detection and Prevention (IDS/IPS): HPE Aruba Networking EdgeConnect SD-WAN optionally integrates a rule-based Intrusion Detection and Prevention System (IDS/IPS) that utilizes the common HPE Aruba Networking Unified Threat Management (UTM) framework. The signature-based system monitors network traffic to find patterns that match a particular attack signature. Integrated with EdgeConnect SD-WAN next-generation firewall, the system allows application-level selection for inspection based on firewall zones and provides actions such as drop or allow traffic. The system can operate either in inline mode or performant mode, traffic is analyzed out of path, providing more efficiency without impacting network performance.
Threat events can be sent to an external SIEM such as Splunk for security analytics to monitor real-time threats, enabling IT to quickly act on them.

The integration with Splunkis performed through a custom application, called HPE Aruba Networking EdgeConnect Security App, easily downloadable from Splunk base. Compatible with both Splunk Enterprise and Splunk Cloud, the EdgeConnect Security App provides a dashboard view of IDS/IPS events stemming from EdgeConnect SD-WAN.
Using Splunk, administrators can filter, sort, navigate, and view the collective security event notifications generated across the entire SD-WAN fabric, overall trends, and top talkers.

– DDoS defense and Firewall Protection Profile: HPE Aruba Networking EdgeConnect SD-WAN detects and prevents DDoS attacks such as protocol attacks, ICMP floods, SYN floods, IP spoofing attacks and more. The solution enforces strict state handling and limits the number of malicious requests through actions such as rapid aging, drop excess and block source, defined for preset or configurable DoS thresholds. With firewall protection profiles, administrators can enforce different levels of DDoS protection levels across the organization by binding firewall protection profiles to firewall zones.
To configure DoS thresholds, the solution combines three categories including threshold classification (source-level and zone-level), metrics to monitor (flows per second, concurrent flows and embryonic flows) and IP protocol (TCP, UDP, ICMP, others, and all). Each threshold is associated with a minimum and maximum value. The minimum threshold helps spot problems early on, while the maximum threshold makes sure traffic doesn’t drop prematurely. This gives administrators better control, making sure that they only drop traffic when necessary. For each threshold, the solution provides the following actions: log, rapid aging, drop excess, block source, and enables SYN cookies for maximum action. The use of SYN cookies prevents legitimate connections from being dropped when the SYN queue fills up during SYN flood attacks. This is achieved by embedding a cookie in the SYN-ACK response, which verifies that the client IP address is real and not spoofed.

– Adaptive DDoS is an optional feature that uses machine learning to automatically adjust DoS thresholds, simplifying DoS threshold configuration and eliminating the need for frequent updates due to changing network conditions. Traditionally, administrators set DoS thresholds manually, often based on estimates, requiring frequent adjustments. Adaptive DDoS automates this process with two key functionalities: Auto Rate-Limiting and Smart Burst. Auto Rate-Limiting uses machine learning to regularly calculate a new baseline based on network statistics and patterns. This baseline sets the minimum DoS threshold. Smart Burst is applied to the maximum threshold, automatically allocating unused flow capacity across configured firewall zones. Smart Burst manages “good traffic bursts” (e.g., login spikes in the morning or backups at night) while preventing bad traffic from consuming bandwidth. It offers four modes: Baseline Plus (adds a buffer to the baseline), Committed Burst (proportionally allocates extra flow capacity to firewall zones), Excess Burst (unused Committed Burst capacity is pooled and shared as an additional layer of support), and a custom setting.

– DDoS Analytics: EdgeConnect SD-WAN includes a comprehensive set of reports for DoS defense such as threshold violations, flow drops, denied hosts and packets counts, top talkers, and alarms such as exceeded DoS thresholds.

– Smart SYN Cookieis an optional feature that adds intelligence to the traditional SYN cookie mechanism, optimizing performance where cookie generation can be resource intensive. A cap is automatically enforced on the number of SYN cookies generated to prevent resource exhaustion. SYN packets exceeding the limit are dropped to preserve system stability. The system also evaluates the reputation of the source IPs based on historical behavior. IP reputation applies to “internal” IPs (or LAN IPs) as well as external IPs when the Secure Web Service option is enabled. Depending on the IP reputation score, the solution decides whether to respond with a SYN cookie, allow a normal flow or denylist the source IP.

– Routing: EdgeConnect SD-WAN supports standard Layer 2 and Layer 3 open networking protocols such as VLAN (802.1Q), LAG (802.3ad), IPv4 and IPv6 forwarding, GRE, IPSec, VRRP, WCCP, PBR, BGP (version 4), OSPF.

– Bridge group: For small locations, EdgeConnect SD-WAN can act as a switch by providing layer 2 connectivity (bridging) between two to four ports of an EdgeConnect SD-WAN appliance, creating a bridge group. Interfaces in the bridge group can be configured with the same parameters available on physical or sub-interfaces, such as segmentation, firewall zones, labels, DHCP server and relay, VRRP, BGP, OSPF, multicast, and branch NAT.

– High availability: The EdgeConnect SD-WAN HA cluster protects from hardware, software and transport failures. High availability is achieved by providing fault tolerance on both the network side (WAN) and on the equipment side. The EdgeConnect SD-WAN appliances are interconnected with a HA link that allows tunnels over each underlay to connect to both appliances.

– Zero-touch provisioning: Plug-and-play deployment enables branch office deployment of HPE Aruba Networking EdgeConnect SD-WAN in seconds, automatically connecting with other EdgeConnect SD-WAN instances in the data center, other branches, or in cloud Infrastructure as a Service (IaaS) such as Amazon Web Services, Microsoft Azure, Oracle® Cloud Infrastructure and Google Cloud Platform™.

– WAN hardening: Each WAN overlay is secured edge-to-edge via 256-bit AES encrypted tunnels, meaning no unauthorized outside traffic can enter the branch. With the option to deploy EdgeConnect SD-WAN directly onto the internet, WAN hardening secures branch offices without the appliance sprawl and operating costs of deploying and managing dedicated firewalls.

– 5G Cellular Bridge/LTE links: HPE Aruba Networking provides flexibility to support high-speed WAN connectivity for enterprise branch offices, pop-up locations, and small office/home offices with either a 5G cellular bridge or USB LTE modem. By using the HPE Aruba Networking 100 Series Cellular Bridge or a plug‑and‑play HPE Aruba Networking USB LTE modem with EdgeConnect SD‑WAN, enterprises can fully manage their equipment through SD‑WAN Orchestrator, while ensuring optimal connectivity to critical applications and resources, even when primary connectivity experience a failure. The 5G Cellular Bridge and the USB LTE modem features global support for nearly all major carriers and works with many EdgeConnect SD‑WAN gateway models.
The 5G Cellular Bridge can be mounted anywhere and powered via power over ethernet (PoE). This provides the option for optimal mounting for enhanced coverage and signal quality.

HPE Aruba Networking WAN Orchestrator Key Features

– Single Screen Administration: Enables quick and easy implementation of network-wide business intent policies to eliminates complex and error-prone policy changes at every branch.
– Real-Time Monitoring and Historical Reporting: Provides specific details into application, location, and network statistics, including continuous performance monitoring of loss, latency, and packet ordering for each enterprise customers’ network path. All HTTP and native application traffic are identified by name and location, and alarms and alerts allow for faster resolution of network issues.
– Bandwidth Cost Savings Reports: Documents the cost savings for moving to broadband connectivity.

Embrace multi-cloud networking

Deploy virtual HPE Aruba Networking EdgeConnectSD-WAN appliances in a public cloud such as Amazon Web Services (AWS), Microsoft Azure, Google Cloud Platform, Oracle Cloud, or Alibaba Cloud, as well as other network connectivity providers such as Equinix and Megaport. A virtual EdgeConnect SD-WAN appliance can also be deployed in AWS GovCloud, AWS China, AWS Outposts, AWS Local Zones, or Azure Government Cloud.

By deploying an EdgeConnect SD-WAN appliance in a cloud environment, organizations can optimize or “ruggedize” the first mile between the branch and the public cloud to deliver better network performance, reliability, and quality. This provides a cloud on-ramp to connect on-premises networks or other cloud environments to cloud workloads, removing the manual complexity of connecting branch offices to the cloud.

The virtual EdgeConnect SD-WAN appliances support establishing tunnels over the internet as well as other private connections such as AWS Direct Connect, Microsoft Azure ExpressRoute, Google Cloud Interconnect, Oracle Cloud FastConnect, or Alibaba Cloud Express Connect. If a brownout or blackout occurs when establishing SD-WAN tunnels over multiple WAN transports, the remaining link(s) continue to carry traffic so that users don’t notice any disruption to voice calls, audio and video conferences, or any other application.

The EdgeConnect SD-WAN AWS Cloud WAN and AWS Transit Gateway integration is designed to provide seamless, scalable, and secure connectivity between enterprise branch locations, data centers, and AWS cloud infrastructure. This integration simplifies multi-region and global networking by leveraging the capabilities of AWS Transit Gateway and AWS Cloud WAN, in conjunction with the advanced features of EdgeConnect SD-WAN. EdgeConnect SD-WAN with AWS Cloud WAN preserves and extends on-premises network segments into AWS, thereby increasing overall data security, access control, and performance.

The Microsoft Azure integration allows an EdgeConnect SD-WAN appliance deployed in a Transit Virtual Network in Azure to seamlessly establish connectivity with an Azure Virtual WAN Hub, an Azure Route Server, or an Azure Internal Load Balancer depending on your use case. Additionally, this integration allows administrators to deploy EdgeConnect SD-WAN directly into an Azure Virtual WAN Hub from HPE Aruba Networking SD-WAN Orchestrator. This enables organizations to extend their SD-WAN capabilities into Azure, ensuring optimized performance and security for Azure-hosted workloads and services.

Tunnel-in-tunnel

The tunnel-in-tunnel feature allows network administrators to create IPSec UDP SD-WAN tunnels inside third-party, standard IPSec tunnels, enabling direct traffic to the backbones of cloud service providers like AWS, Microsoft Azure, Google Cloud, Megaport, and Equinix. With a Virtual Tunnel Interface (VTI) connection between two locations, this protocol supports static routing, improving traffic flow. This setup leverages the fast, reliable backbones of cloud providers to enhance network performance and reduce latency.

Delivering the highest quality of experience for Microsoft 365

With the Microsoft 365 REST API integration, HPE Aruba Networking EdgeConnect SD-WAN continuously learns and discovers new Microsoft 365 end points and/or IP addresses and automatically re-configures EdgeConnect SD-WAN if a new, closer Microsoft 365 end point becomes available. By doing so, users can achieve optimal Microsoft 365 connectivity and performance by reducing the round-trip time (RTT). The EdgeConnect SD-WAN has been independently tested and certified to support the Microsoft 365 Connectivity Principles. As a result of the independent testing, the EdgeConnect SD-WAN platform has been inducted into the Microsoft 365 Networking Partner Program and has been given the official “Works with Microsoft 365” designation.

SASE and built-in security

As cloud-based security becomes increasingly crucial, HPE Aruba Networking EdgeConnect SD-WAN seamlessly integrates with HPE Aruba Networking SSE, resulting in a unified SASE platform that streamlines SASE deployment while simplifying management. This integrated platform offers advanced security features such as ZTNA (Zero Trust Network Access), SWG (Secure Web Gateway), and CASB (Cloud Access Security Broker), addressing the networking and security challenges faced by cloud-centric organizations and hybrid working scenarios. Notably, it provides robust web-based threat defense and data protection for SaaS applications and ensures secure access for remote workers.

Additionally, the EdgeConnect SD-WAN solution streamlines the orchestration process to third-party SSE providers, offering organizations the flexibility to adopt SASE with their preferred security services or smoothly integrate with an existing security ecosystem.

The orchestration is automated with Secure Internet Breakout that intelligently routes traffic based on first packet iQ application classification. The feature directs traffic to SSE services, data centers, or the cloud in compliance with predefined security policies, regulatory mandates, and business intent.

Additionally, the SD-WAN solution incorporates a built-in next-generation firewall, with IDS/IPS and DDoS defense capabilities, allowing organizations to replace legacy firewalls in branch offices. IT teams benefit from centralized and automated security policy governance through zero-touch provisioning, streamlining management processes and minimizing configuration errors.

To deliver Zero Trust networking, the SD-WAN solution enables role-based segmentation of users, applications, and WAN services into secure zones based on identity, access rights, and security posture. Applying the principle of least privilege access, it ensures that users and devices only communicate with destinations that align with their respective roles.

Zero Trust: Securing the edge by role, context, and application

With the increase in mobile devices, remote workers, cloud-hosted applications, and IoT connected devices, enterprises must align their security policies based on business intent while also striving for consistency.

HPE Aruba Networking ClearPass integration with HPE Aruba Networking EdgeConnect SD-WAN augments application intelligence with user and device identity and role-based policy, enabling fine-grained segmentation. This additional identity-based context provides consistent security policies that can be enforced network-wide, from edge-to-cloud, while also accelerating troubleshooting and problem resolution.

As a new user or device connects to the network and registers with ClearPass, the SD-WAN Orchestrator (control plane for EdgeConnect SD-WAN) connects via the ClearPass API. The SD-WAN Orchestrator propagates security policy information related to user, device type, role, and security posture to all EdgeConnect SD-WAN appliances in the network.

Because IoT devices are agentless, it is not possible to run a third-party VPN or ZTNA client on them. Thus, a SASE architecture doesn’t fully address the security challenges posed by the IoT devices in the enterprise network.

With the HPE Aruba Networking ClearPass Zero Trust Security framework, the network can identify and segment IoT devices and traffic at the network edge and isolate it from other traffic in the network. This layer of context enables fine-grained segmentation without the complexity of managing multiple VLANs.

For example, a fine-grained segmentation policy can prevent IoT security cameras from accessing credit card transaction or HVAC systems. Zero Trust Dynamic Segmentation helps enterprises isolate any potential security threats by device type, role, and application while helping them meet industry compliance requirements such as PCI, HIPAA, and SOX.

Virtual routing and forwarding (VRF) segmentation

Network managers can configure and manage separate addressing, routing, and security policies consistently with the HPE Aruba Networking EdgeConnect SD-WAN across end-to-end segments and microsegments for traffic traversing large-scale multinational enterprises and federations of independent companies. Advanced segmentation eliminates the arduous task of manually stitching together VRF, firewall, and NAT policies in a consistent manner, dramatically simplifying the management of diverse scenarios and providing unprecedented flexibility when contending with overlapping IP address spaces.

Secure SD-WAN certification by ICSA Labs

The HPE Aruba Networking EdgeConnect SD-WAN platform has earned the ICSA Labs Secure SD-WAN certification, passing rigorous testing based on a comprehensive and robust set of SD-WAN features and platform security requirements. ICSA Labs Secure SD-WAN certification requirements include:

– Advanced SD-WAN features such as tunnel bonding, dynamic path selection and zero-touch provisioning
– Native support (or via service chaining) for advanced security functions such as anti-malware, intrusion prevention and DoS protection
– Encryption of sensitive data, as well as administrative and operational communications
– Policy enforcements for both WAN-specific functions and security policies
– Security events logging:
- The certification provides the assurance of using a secure SD-WAN solution certified by an independent, third-party organization. It also enables enterprises to simplify network architecture by securely replacing traditional branch firewalls with EdgeConnect SD-WAN.

SD-WAN Orchestrator enables faster SD-WAN deployments

HPE Aruba Networking SD-WAN Orchestrator, included with EdgeConnect SD-WAN for on-premises installations and available as an optional cloud-hosted service subscription, enables zero-touch provisioning of EdgeConnect SD-WAN appliances in the branch. SD-WAN Orchestrator automates the assignment of business intent policies to ensure faster and easier connectivity across multiple branches, eliminating the configuration drift that can come from manually updating rules and access control lists (ACLs) on a site-by-site basis. SD-WAN Orchestrator enables customers to:

– Avoid WAN reconfigurations by delivering applications to users in customized virtual overlays
– Align application delivery to business goals through virtual WAN overlays based on business intent
– Simplify branch deployments with EdgeConnect SD-WAN profiles that describe the virtual and physical configuration of the location

In addition to centralized and automated control of the entire SD-WAN topology, SD-WAN Orchestrator provides specific detail into WAN performance, including:

– Detailed reporting on application, location, and network statistics
– Continuous performance monitoring of throughput, loss, latency, jitter and packet ordering for all network paths
– Identification of all application traffic by name and location
– Alarms and alerts to visualize and prioritize software and hardware issues within the WAN allow for faster problem resolution
– Bandwidth cost savings report for documenting the cost savings of moving to broadband

Boost application performance as needed

HPE Aruba Networking EdgeConnect WAN Optimization is an optional feature that includes:

– Latency mitigation: TCP and other protocol acceleration techniques are applied to all traffic, minimizing the effects of latency on application performance and significantly improving application response times across the WAN.
– Data reduction: Data compression and deduplication eliminates the repetitive transmission of duplicate data. WAN Optimization inspects WAN traffic at the byte level and stores content in local data stores. Advanced fingerprinting techniques recognize repetitive patterns for local delivery. Data reduction can be applied to all IP- ased protocols, including TCP and UDP.

Why add WAN optimization?

EdgeConnect SD-WAN appliances alone provide enhanced application performance for broadband or hybrid WAN deployments, utilizing the included packet-based tunnel bonding, dynamic path control (DPC), and path conditioning for overcoming the adverse effects of dropped and out-of-order packets that are common with internet connections.

However, sometimes additional performance is needed for specific applications or locations. As distance between locations increases over the WAN, application performance degrades. This has less to do with the available bandwidth, and is more about the time it takes to send and receive data packets over distance, and the number of times data must be re-sent.

WAN Optimization use case examples

Customers replicating to a disaster recovery (DR) site thousands of miles away might want to add WAN Optimization to ensure recovery point objectives (RPOs) are not compromised.

Enterprises with remote sites located in rural areas, or with sites that are exceptionally farther away from the company’s data center, might want to add WAN Optimization to overcome the effects of high latency. With WAN Optimization, customers gain the flexibility to enable enhanced WAN optimization capabilities where and when it is needed in a fully integrated solution. WAN Optimization is licensed per Mbps, per month, so customers do not have to pay for WAN optimization across the entire network.

Overcome effects of latency

The time it takes for information to go from sender to receiver and back is referred to as network latency. Since the speed of light is constant, WAN latency is directly proportional to the distance traveled between the two network endpoints. HPE Aruba Networking offers a variety of TCP acceleration techniques to mitigate WAN latency, including Window Scaling, Selective Acknowledgement, Round-Trip Measurement, and High Speed TCP.

Microsoft Windows and other applications that rely on the Common Internet File System (CIFS) often take longer to perform common file operations over distance, such as retrieving and sharing files. WAN Optimization helps these applications not only by improving the underlying TCP transport, but also by accelerating CIFS through CIFS read-ahead, CIFS write‑behind, and CIFS metadata optimizations.

Increase throughput

As packets flow through EdgeConnect SD-WAN appliances, WAN Optimization inspects WAN traffic at the byte level and stores content in local data stores. As new packets arrive, HPE Aruba Networking computes fingerprints of the data contained within the packets, and checks to see whether these fingerprints match data that is stored locally.

If the remote appliance contains the information, there is no need to resend it over the WAN. Instead, specific start-stop instructions are sent to deliver the data locally.

Configuration Information

HPE Aruba Networking EdgeConnect SD-WAN
BTO Models
Rule #	Description	SKU
	HPE Aruba Networking EdgeConnect-10100 Branch Gateways
1	HPE Aruba Networking EdgeConnect 10104 4x RJ45 10/100/1000 Gateway	R9D72A
	– Standard table- top appliance. – Included in packaging box: Table top rubber feet and External Power Supply – 2 - 500Mbps WAN Capacity – Supports up to 200Mbps of WAN Optimization – Includes 1 Power Adapter, 1 Power Cord & 1 Wall Mount – 4 x 10/100/1000 LAN/WAN Ports – 1U - Height
	HPE Aruba Networking EdgeConnect 10104 4x RJ45 10/100/1000 SD-WAN Gateway NoLoc	R9D72A#AC3
	– No Power Cord
1	HPE Aruba Networking EdgeConnect 10104 4x RJ45 TAA SD-WAN Gateway	S3N78A
	– Standard table- top appliance. (TAA Compliant) – Included in packaging box: Table top rubber feet and External Power Supply – 2 - 500Mbps WAN Capacity – Supports up to 200Mbps of WAN Optimization – Includes 1 Power Adapter, 1 Power Cord & 1 Wall Mount – 4 x 10/100/1000 LAN/WAN Ports – 1U - Height"
	HPE Aruba Networking EdgeConnect 10104 4x RJ45 TAA SD-WAN Gateway No Loc	S3N78A#AC3
	– No Power Cord
1, 3	HPE Aruba Networking EdgeConnect 10106 1G 2x SFP 2x Combo 1G 2x RJ45 PoE+ SD-WAN Gateway	S0E22A
	– Standard table- top appliance. – Included in packaging box: Table top rubber feet and External Power Adapter – 2 - 1000Mbps WAN Capacity – Supports up to 250Mbps of WAN Optimization – Includes 1 Power Adapter, 1 Power Cord, 1 Wall Mount Kit, 1 Rack Mount Kit, – 1 Cross-over Adapter, 1 Grounding Cable – 2 x 10/100/1000 RJ45 Ports with POE – 2 x 1G Combo Ports (10/100/1000 RJ45 or 1G SFP) – 2 x 1G/10G SFP+ – 1U - Height
	HPE Aruba Networking EdgeConnect 10106 2x SFP+ 2x Combo 2x PoE SD-WAN Gateway No Loc	S0E22A#AC3
	– No Power Cord
1, 3	HPE Aruba Networking EdgeConnect 10108 1G 2x SFP 2x Combo 1G 2x RJ45 PoE+ SD-WAN Gateway	S0E23A
	– Standard table- top appliance. – Included in packaging box: Table top rubber feet and External Power Adapter – 2 - 2000Mbps WAN Capacity – Supports up to 500Mbps of WAN Optimization – Includes 1 Power Adapter, 1 Power Cord, 1 Wall Mount Kit, 1 Rack Mount Kit, – 1 Cross-over Adapter, 1 Grounding Cable – 2 x 10/100/1000 RJ45 Ports with POE – 2 x 1G Combo Ports (10/100/1000 RJ45 or 1G SFP) – 2 x 1G/10G SFP+ – 1U - Height"
	HPE Aruba Networking EdgeConnect 10108 1G 2x SFP 2x Combo 1G 2x RJ45 PoE+ SD-WAN Gateway No Loc	S0E23A#AC3
	– No Power Cord
1, 3	HPE Aruba Networking EdgeConnect 10108 2x SFP+ 2x Combo 2x PoE NAL SD-WAN Gateway	S3N72A
	– Standard table- top appliance. – Included in packaging box: Table top rubber feet and External Power Adapter – 2 - 2000Mbps WAN Capacity – Supports up to 500Mbps of WAN Optimization – Includes 1 Power Adapter, 1 Power Cord, 1 Wall Mount Kit, 1 Rack Mount Kit, – 1 Cross-over Adapter, 1 Grounding Cable – 2 x 10/100/1000 RJ45 Ports with POE – 2 x 1G Combo Ports (10/100/1000 RJ45 or 1G SFP) – 2 x 1G/10G SFP+ – 1U - Height
	HPE Aruba Networking EdgeConnect 10108 2x SFP+ 2x Combo 2x PoE NAL SD-WAN Gateway No Loc	S3N72A#AC3
	– No Power Cord
	Extra Small
	HPE Aruba Networking EC-XS 4x RJ45 10/100/1000 SD-WAN Gateway	JM962A
	– Standard table- top appliance. – Included in packaging box: Table top rubber feet and External Power Supply – 2 - 1000Mbps WAN Capacity – Supports up to 250Mbps of WAN Optimization – Includes 1 Power Adapter & 1 Power Cord – 4 x 10/100/1000 LAN/WAN Ports – 1U - Height
	HPE Aruba Networking EC-XS 4x RJ45 10/100/1000 SD-WAN Gateway NoLoc	JM962A#AC3
	– No Power Cord
	Small
1, 2	HPE Aruba Networking EC-S-P 8x RJ45 10/100/1000 4x SFP+ 1/10G SD-WAN Gateway	JM538A
	– Installed on appliance: Fixed rack mount ear brackets with cage nuts and screws for square holes – 10 - 2000Mbps WAN Capacity – Supports up to 500Mbps of WAN Optimization – Includes 1 Power Supply & 1 Power Cord – Option to add redundant Power Supply and Power Cord – 8 x 10/100/1000 LAN/WAN Ports – 4 x 1/10 Gbps LAN/WAN Ports (Min0/Max4 SFP/SFP+ XCVRs) – 1U - Height
	HPE Aruba Networking EC-S-P 8x RJ45 10/100/1000 4x SFP+ 1/10G SD-WAN Gateway NoLoc	JM538A#AC3
	– No Power Cord
2	HPE Aruba Networking EC-S-P-DC 8x RJ45 10/100/1000 4x SFP+ 1/10G SD-WAN Gateway	JM769A
	– Installed on appliance: Fixed rack mount ear brackets with cage nuts and screws for square holes – 10 - 2000Mbps WAN Capacity – Supports up to 500Mbps of Boost – Includes 1 Power Supply & 1 Power Cord – Option to add redundant Power Supply and Power Cord – 8 x 10/100/1000 LAN/WAN Ports – 4 x 1/10 Gbps LAN/WAN Ports (Min0/Max4 SFP/SFP+ XCVRs) – 1U – Height

	NAL Compliant Gateways
1, 4	HPE Aruba Networking EdgeConnect 10104 4x RJ45 NAL SD-WAN Gateway	S3N69A
	– Standard table- top appliance. (NAL Compliant) – Included in packaging box: Table top rubber feet and External Power Supply – 2 - 500Mbps WAN Capacity – Supports up to 200Mbps of WAN Optimization – Includes 1 Power Adapter, 1 Power Cord & 1 Wall Mount – 4 x 10/100/1000 LAN/WAN Ports – 1U - Height
	HPE Aruba Networking EdgeConnect 10104 4x RJ45 NAL SD-WAN Gateway No Loc	S3N69A#AC3
	– No Power Cord
	HPE Aruba Networking EdgeConnect 10104 4x RJ45 NAL SD-WAN Gateway CN en	S3N69A#AKM
	– China Localization
1, 2, 3, 4	HPE Aruba Networking EdgeConnect 10106 2x SFP+ 2x Combo 2x PoE NAL SD-WAN Gateway	S3N71A
	– Standard table- top appliance. (NAL Compliant) – Included in packaging box: Table top rubber feet and External Power Adapter – 2 - 1000Mbps WAN Capacity – Supports up to 250Mbps of WAN Optimization – Includes 1 Power Adapter, 1 Power Cord, 1 Wall Mount Kit, 1 Rack Mount Kit, – 1 Cross-over Adapter, 1 Grounding Cable – 2 x 10/100/1000 RJ45 Ports with POE – 2 x 1G Combo Ports (10/100/1000 RJ45 or 1G SFP) – 2 x 1G/10G SFP+ – 1U - Height
	HPE Aruba Networking EdgeConnect 10106 2x SFP+ 2x Combo 2x PoE NAL SD-WAN Gateway No Loc	S3N71A#AC3
	– No Power Cord
	HPE Aruba Networking EdgeConnect 10106 2x SFP+ 2x Combo 2x PoE NAL SD-WAN Gateway CN en	S3N71A#AKM
	– China Localization
	Extra-Small
4	HPE Aruba Networking EdgeConnect Extra Small 4x RJ45 NAL SD-WAN Gateway	S3N70A
	– Standard table- top appliance. (NAL Compliant) – Included in packaging box: Table top rubber feet and External Power Supply – 2 - 1000Mbps WAN Capacity – Supports up to 250Mbps of WAN Optimization – Includes 1 Power Adapter & 1 Power Cord – 4 x 10/100/1000 LAN/WAN Ports – 1U - Height
	HPE Aruba Networking EdgeConnect Extra Small 4x RJ45 NAL SD-WAN Gateway No Loc	S3N70A#AC3
	– No Power Cord
	HPE Aruba Networking EdgeConnect Extra Small 4x RJ45 NAL SD-WAN Gateway CN en	S3N70A#AKM
	– China Localization
	Small
1, 2, 4	HPE Aruba Networking EdgeConnect Small-P 4x SFP+ 10x RJ45 AC PSU 2xSSD NAL SD-WAN Gateway	S3N73A
	– Installed on appliance: Fixed rack mount ear brackets with cage nuts and screws for square holes (NAL Compliant - For China Deployment Only) – 10 - 2000Mbps WAN Capacity – Supports up to 500Mbps of WAN Optimization – Includes 1 Power Supply & 1 Power Cord – Option to add redundant Power Supply and Power Cord – 8 x 10/100/1000 LAN/WAN Ports – 4 x 1/10 Gbps LAN/WAN Ports (Min0/Max4 SFP/SFP+ XCVRs) – 1U - Height
	HPE Aruba Networking EdgeConnect Small-P 4x SFP+ 10x RJ45 AC PSU 2xSSD NAL SD-WAN Gateway No Loc	S3N73A#AC3
	– No Power Cord
	HPE Aruba Networking EdgeConnect Small-P 4x SFP+ 10x RJ45 AC PSU 2xSSD NAL SD-WAN Gateway CN en	S3N73A#AKM
	– China Localization
2, 4	HPE Aruba Networking EdgeConnect Small-P 4x SFP+ 10x RJ45 DC PSU 2xSSD NAL SD-WAN Gateway	S3N74A
	– Installed on appliance: Fixed rack mount ear brackets with cage nuts and screws for square holes (NAL Compliant - For China Deployment Only) – 10 - 2000Mbps WAN Capacity – Supports up to 500Mbps of WAN Optimization – Includes 1 Power Supply & 1 Power Cord – Option to add redundant Power Supply and Power Cord – 8 x 10/100/1000 LAN/WAN Ports – 4 x 1/10 Gbps LAN/WAN Ports (Min0/Max4 SFP/SFP+ XCVRs) – 1U – Height

	Configuration Rules
Rule #	Description
1	Localization required on orders without AC3 options. Refer to HPN Localization Table. OCA Only: Required Custom Choice (Min1/Max1) Localized Power Cord - Default Option No Power Cord - AC3 Option
2	The following SFP+ Transceivers install into this Gateway's SFP+ Ports:
	HPE Aruba Networking EC-SFP-LR Single Mode SFP+	JM534A
	HPE Aruba Networking EC-SFP-SR Multi Mode SFP+	JM535A
3	The following SFP+ Transceivers install into this Gateway's SFP+ Ports:
	HPE Aruba Networking EdgeConnect 1G SFP RJ45 100m Cat5e Transceiver	S3R03A
	HPE Aruba Networking 1G SFP LC SX 500m OM2 MMF Transceiver	J4858D
	HPE Aruba Networking 1G SFP LC LX 10km SMF Transceiver	J4859D
	HPE Aruba Networking 1G SFP LC SX 500m MMF TAA Transceiver	JL745A
	HPE Aruba Networking 1G SFP LC LX 10km SMF TAA Transceiver	JL746A
	HPE Aruba Networking 10G SFP+ LC SR 300m OM3 MMF Transceiver	J9150D
	HPE Aruba Networking 10G SFP+ LC LR 10km SMF Transceiver	J9151E
	HPE Aruba Networking 10G SFP+ LC ER 40km SMF Transceiver	J9153D
4	NAL Certified Gateways are recommended to be deployed only in China
Notes:	OCA Only Model Selection Form - HPE Aruba Networking > Gateways and Controllers > HPE ANW EdgeConnect > EdgeConnect SD-WAN Branch Gateways

HPE Aruba Networking EdgeConnect SD-WAN Gateways Options
	Transceivers
Rule #	Description	SKU
	SFP+ Transceivers
	HPE Aruba Networking EdgeConnect 1G SFP RJ45 100m Cat5e Transceiver	S3R03A
	HPE Aruba Networking 1G SFP LC SX 500m OM2 MMF Transceiver	J4858D
	HPE Aruba Networking 1G SFP LC LX 10km SMF Transceiver	J4859D
	HPE Aruba Networking 1G SFP LC SX 500m MMF TAA Transceiver	JL745A
	HPE Aruba Networking 1G SFP LC LX 10km SMF TAA Transceiver	JL746A
	HPE Aruba Networking EC-SFP-LR Single Mode SFP+	JM534A
	HPE Aruba Networking EC-SFP-SR Multi Mode SFP+	JM535A
	HPE Aruba Networking 10G SFP+ LC SR 300m OM3 MMF Transceiver	J9150D
	HPE Aruba Networking 10G SFP+ LC LR 10km SMF Transceiver	J9151E
	HPE Aruba Networking 10G SFP+ LC ER 40km SMF Transceiver	J9153D
	Power Accessories
	System (std 1 // max 2) User Selection (min 0 // max 1) per Solution
1 , 3	HPE Aruba Networking EC-S-P AC Power Supply Unit	JM779A
	HPE Aruba Networking EC-S-P AC Power Supply Unit NoLoc	JM779A#AC3
2	HPE Aruba Networking EC-S-P DC Power Supply Unit	JM780A
	– DC PSU = No Localization
	Configuration Rules
Rule #	Description	SKU
1	This PSU is compatible with the following EC-S Appliances only:
	HPE Aruba Networking EC-S-P 8x RJ45 10/100/1000 4x SFP+ 1/10G SD-WAN Gateway	JM538A
	HPE Aruba Networking EdgeConnect Small-P 4x SFP+ 10x RJ45 AC PSU 2xSSD NAL SD-WAN Gateway	S3N73A
2	This PSU is compatible with the following EC-S Appliances only:
	HPE Aruba Networking EC-S-P-DC 8x RJ45 10/100/1000 4x SFP+ 1/10G SD-WAN Gateway	JM769A
	HPE Aruba Networking EdgeConnect Small-P 4x SFP+ 10x RJ45 DC PSU 2xSSD NAL SD-WAN Gateway	S3N74A
3	Localization required on orders without AC3 options. Refer to HPN Localization Table. OCA Only: Required Custom Choice (Min1/Max1) Localized Power Cord - Default Option No Power Cord - AC3 Option
	Accessories
2	HPE Aruba Networking EC-XS A1 Accessory Kit	JM965A
3	HPE Aruba Networking EC-S-P Sliding Rail	JM781A
3	HPE Aruba Networking EC-S-P Accessory Kit	JZ893A
4	HPE Aruba Networking EdgeConnect 10104 Rack Mount Kit	R9H42A
4	HPE Aruba Networking EdgeConnect 10104 Accessory Kit	R9Y08A
5, 6	HPE Aruba Networking EdgeConnect EC-10106/EC-10108 Accessory Kit	S2D96A
	Configuration Rules
Rule #	Description	SKU
2	This Accessory is compatible with the following EC-XS Appliances only:
	HPE Aruba Networking EC-XS 4x RJ45 10/100/1000 SD-WAN Gateway	JM962A
	HPE Aruba Networking EdgeConnect Extra Small 4x RJ45 NAL SD-WAN Gateway	S3N70A
3	This Accessory is compatible with the following EC-S Appliances only:
	HPE Aruba Networking EC-S-P 8x RJ45 10/100/1000 4x SFP+ 1/10G SD-WAN Gateway	JM538A
	HPE Aruba Networking EdgeConnect Small-P 4x SFP+ 10x RJ45 AC PSU 2xSSD NAL SD-WAN Gateway	S3N73A
	HPE Aruba Networking EC-S-P-DC 8x RJ45 10/100/1000 4x SFP+ 1/10G SD-WAN Gateway	JM769A
	HPE Aruba Networking EdgeConnect Small-P 4x SFP+ 10x RJ45 DC PSU 2xSSD NAL SD-WAN Gateway	S3N74A
4	This Accessory is compatible with the following EC-10104 Gateways only:
	HPE Aruba Networking EdgeConnect 10104 4x RJ45 10/100/1000 Gateway	R9D72A
	HPE Aruba Networking EdgeConnect 10104 4x RJ45 TAA SD-WAN Gateway	S3N78A
	HPE Aruba Networking EdgeConnect 10104 4x RJ45 NAL SD-WAN Gateway	S3N69A
5	This Accessory is compatible with the following EC-10104 Gateways only:
	HPE Aruba Networking EdgeConnect 10106 1G 2x SFP 2x Combo 1G 2x RJ45 PoE+ SD-WAN Gateway	S0E22A
	HPE Aruba Networking EdgeConnect 10106 2x SFP+ 2x Combo 2x PoE NAL SD-WAN Gateway	S3N71A
6	This Accessory is compatible with the following EC-10108 Gateways only:
	HPE Aruba Networking EdgeConnect 10108 1G 2x SFP 2x Combo 1G 2x RJ45 PoE+ SD-WAN Gateway	S0E23A
	HPE Aruba Networking EdgeConnect 10108 2x SFP+ 2x Combo 2x PoE NAL SD-WAN Gateway	S3N72A
	Spares
2	HPE Aruba Networking EC-XS A1 Power Adapter	JM996A
3	HPE Aruba Networking EdgeConnect 10104 Power Adapter	R9Y46A
4, 5	HPE Aruba Networking EdgeConnect EC-10106/EC-10108 54V Power Adapter	S2D95A
	Configuration Rules
Rule #	Description	SKU
2	This Accessory is compatible with the following EC-XS Appliances only:
	HPE Aruba Networking EC-XS 4x RJ45 10/100/1000 SD-WAN Gateway	JM962A
	HPE Aruba Networking EdgeConnect Extra Small 4x RJ45 NAL SD-WAN Gateway	S3N70A
3	This Accessory is compatible with the following EC-10104 Gateways only:
	HPE Aruba Networking EdgeConnect 10104 4x RJ45 10/100/1000 Gateway	R9D72A
	HPE Aruba Networking EdgeConnect 10104 4x RJ45 TAA SD-WAN Gateway	S3N78A
	HPE Aruba Networking EdgeConnect 10104 4x RJ45 NAL SD-WAN Gateway	S3N69A
4	This Accessory is compatible with the following EC-10106 Gateways only:
	HPE Aruba Networking EdgeConnect 10106 1G 2x SFP 2x Combo 1G 2x RJ45 PoE+ SD-WAN Gateway	S0E22A
	HPE Aruba Networking EdgeConnect 10106 2x SFP+ 2x Combo 2x PoE NAL SD-WAN Gateway	S3N71A
5	This Accessory is compatible with the following EC-10108 Gateways only:
	HPE Aruba Networking EdgeConnect 10108 1G 2x SFP 2x Combo 1G 2x RJ45 PoE+ SD-WAN Gateway	S0E23A
	HPE Aruba Networking EdgeConnect 10108 2x SFP+ 2x Combo 2x PoE NAL SD-WAN Gateway	S3N72A

HPE Aruba Networking EdgeConnect SD-WAN Hub Gateways
BTO Models
	HPE Aruba Networking EdgeConnect SD-WAN Appliance
	Medium
1, 2	HPE Aruba Networking EC-M-H 8x RJ45 10/100/1000 4x SFP+ 1/10G SD-WAN Gateway	JZ872A
	– Installed on appliance: Fixed rack mount ear brackets with cage nuts and screws for square holes – 50 - 5000Mbps WAN Capacity – Supports up to 1Gbps of WAN Optimization – 2 x 480 GB SSD – Includes 2 Power Supplies & 2 Power Cords – 8 x 10/100/1000 LAN/WAN Ports – 4 x 1/10 Gbps LAN/WAN Ports (Min0/Max4 SFP/SFP+ XCVRs) – 1U - Height
	HPE Aruba Networking EC-M-H 8x RJ45 10/100/1000 4x SFP+ 1/10G SD-WAN Gateway NoLoc	JZ872A#AC3
	– No Power Cord
	Large
1, 2, 4	HPE Aruba Networking EC-L-H 6x SFP+ 1/10G SD-WAN Gateway	JZ878A
	– Included in packaging box: 4 post tool-less sliding rail kit (cage nuts/screws not included/needed) – 1 - 10Gbps WAN Capacity – Supports up to 1Gbps of WAN Optimization – 2 x 480 GB SSD – Includes 2 Power Supplies & 2 Power Cords – 6 x 1/10 Gbps LAN/WAN Ports (Min0/Max 6 SFP/SFP+ XCVRs) – 1U - Height
	HPE Aruba Networking EC-L-H 6x SFP+ 1/10G SD-WAN Gateway No Loc	JZ878A#AC3
	– No Power Cord
	Extra-Large
	HPE Aruba Networking EC-XL-H 6x SFP28 1/10/25G SD-WAN Gateway No Loc	JZ881A#AC3
	– No Power Cord
	HPE Aruba Networking EdgeConnect Enterprise XL-H-10G 6x SFP+ 1/10G SD-WAN Gateway No Loc	S0B67A#AC3
	– No Power Cord
	EC-10150
1, 5	HPE Aruba Networking EdgeConnect 10150 2xRJ45 MGMT 8x10G/25G SFP28 2xPSU SD-WAN Gateway	S2N65A
	– 2 - 12Gbps WAN Capacity – Supports up to 8Gbps of WAN Optimization – Includes 2 PSU, 2 Power Cord, 4 post tool-less sliding rail kit (cage nuts/screws not included/needed) – 2 x 10/100/1000 RJ45 Ports – 8 x 1/10/25 Gbps LAN/WAN Ports (Min0/Max8 SFP/SFP+/SFP28 XCVRs) – 1U - Height
	HPE Aruba Networking EdgeConnect 10150 8xSFP28 2xRJ45 2xPSU SD-WAN Gateway PDU	S2N65A#B2B
	– C13 PDU Jumper Cord (NA/MEX/TW/JP) (JL697A C13 PDU cord)
	HPE Aruba Networking EdgeConnect 10150 8xSFP28 2xRJ45 2xPSU SD-WAN Gateway PDU	S2N65A#B2C
	– C13 PDU Jumper Cord (ROW) (JL697A C13 PDU cord)
	HPE Aruba Networking EdgeConnect 10150 8xSFP28 2xRJ45 2xPSU SD-WAN Gateway 220v	S2N65A#B2E
	– HPE 2.3m C13 to NEMA 6-15P Pwr Cord(J9936A)
	HPE Aruba Networking EdgeConnect 10150 8xSFP28 2xRJ45 2xPSU SD-WAN Gateway No Loc	S2N65A#AC3
	– No Power Cord
	NAL Compliant Gateways
	Medium
1, 2, 6	HPE Aruba Networking EdgeConnect Medium-H 4x SFP+ 10x RJ45 AC PSU 2xSSD NAL SD-WAN Gateway	S3N75A
	– Installed on appliance: Fixed rack mount ear brackets with cage nuts and screws for square holes (NAL Compliant - For China Deployment Only) – 50 - 5000 Mbps WAN Capacity – Supports up to 1Gbps of WAN Optimization – 2 x 480 GB SSD – Includes 2 Power Supplies & 2 Power Cords – 8 x 10/100/1000 LAN/WAN Ports – 4 x 1/10 Gbps LAN/WAN Ports (Min0/Max4 SFP/SFP+ XCVRs) – 1U - Height
	HPE Aruba Networking EdgeConnect Medium-H 4x SFP+ 10x RJ45 AC PSU 2xSSD NAL SD-WAN Gateway No Loc	S3N75A#AC3
	– No Power Cord
	HPE Aruba Networking EdgeConnect Medium-H 4x SFP+ 10x RJ45 AC PSU 2xSSD NAL SD-WAN Gateway CN en	S3N75A#AKM
	– China Localization

	Large
	HPE Aruba Networking EdgeConnect Large-H 6x SFP+ 2xPSU 2xSSD NAL SD-WAN Gateway	S3N76A
	– Included in packaging box: 4 post tool-less sliding rail kit (cage nuts/screws not included/needed) (NAL Compliant - For China Deployment Only) – 1 - 10 Gbps WAN Capacity – Supports up to 1Gbps of WAN Optimization – 2 x 480 GB SSD – Includes 2 Power Supplies & 2 Power Cords – 6 x 1/10 Gbps LAN/WAN Ports (Min0/Max6 SFP/SFP+ XCVRs) – 1U - Height
	HPE Aruba Networking EdgeConnect Large-H 6x SFP+ 2xPSU 2xSSD NAL SD-WAN Gateway No Loc	S3N76A#AC3
	– No Power Cord
	HPE Aruba Networking EdgeConnect Large-H 6x SFP+ 2xPSU 2xSSD NAL SD-WAN Gateway CN en	S3N76A#AKM
	– China Localization
	Extra Large
1, 2, 3	HPE Aruba Networking EdgeConnect Extra Large-H 6x SFP28 2xNVMe 2xPSU 2xSSD NAL SD-WAN Gateway	S3N77A
	– Included in packaging box: 4 post tool-less sliding rail kit (cage nuts/screws not included/needed) (NAL Compliant - For China Deployment Only) – 2 - 10Gbps WAN Capacity – Supports up to 5Gbps of WAN Optimization – 2 x 480 GB SSD / 3.2TB NVMe – Includes 2 Power Supplies & 2 Power Cords – 6 x 1/10/25 Gbps LAN/WAN Ports (Min0/Max6 SFP/SFP+/SFP28 XCVRs) – 1U - Height
	HPE Aruba Networking EdgeConnect Extra Large-H 6x SFP28 2xNVMe 2xPSU 2xSSD NAL SD-WAN Gateway No Loc	S3N77A#AC3
	– No Power Cord
	HPE Aruba Networking EdgeConnect Extra Large-H 6x SFP28 2xNVMe 2xPSU 2xSSD NAL SD-WAN Gateway CN en	S3N77A#AKM
	– China Localization
1, 2	HPE Aruba Networking EdgeConnect Extra Large-H 10G 6x SFP+ 2xNVMe 2xPSU 2xSSD NAL SD-WAN Gateway	S3N68A
	– Included in packaging box: 4 post tool-less sliding rail kit (cage nuts/screws not included/needed) (NAL Compliant - For China Deployment Only) – 2 - 10Gbps WAN Capacity – Supports up to 5Gbps of WAN Optimization – 2 x 480 GB SSD / 3.2TB NVMe – Includes 2 Power Supplies & 2 Power Cords – 6 x 1/10 Gbps LAN/WAN Ports (Min0/Max6 SFP/SFP+ XCVRs) – 1U - Height
	HPE Aruba Networking EdgeConnect Extra Large-H 10G 6x SFP+ 2xNVMe 2xPSU 2xSSD NAL SD-WAN GW No Loc	S3N68A#AC3
	– No Power Cord
	HPE Aruba Networking EdgeConnect Extra Large-H 10G 6x SFP+ 2xNVMe 2xPSU 2xSSD NAL SD-WAN GW CN en	S3N68A#AKM
	– China Localization
	EC-10150
1, 5, 6	HPE Aruba Networking EdgeConnect 10150 8x SFP28 2x RJ45 2xPSU NAL SD-WAN Gateway	S3P34A
	– 2 - 12Gbps WAN Capacity – Supports up to 8Gbps of WAN Optimization – Includes 2 PSU, 2 Power Cord, 4 post tool-less sliding rail kit (cage nuts/screws not included/needed) (NAL Compliant - For China Deployment Only) – 2 x 10/100/1000 RJ45 Ports – 8 x 1/10/25 Gbps LAN/WAN Ports (Min0/Max8 SFP/SFP+/SFP28 XCVRs) – 1U - Height
	HPE Aruba Networking EdgeConnect 10150 NAL 8x SFP28 4x RJ45 2x PSU SD-WAN Gateway	S2N34A#B2B
	– C13 PDU Jumper Cord (NA/MEX/TW/JP) (JL697A C13 PDU cord)
	HPE Aruba Networking EdgeConnect 10150 NAL 8x SFP28 4x RJ45 2x PSU SD-WAN Gateway	S2N34A#B2C
	– C13 PDU Jumper Cord (ROW) (JL697A C13 PDU cord)
	HPE Aruba Networking EdgeConnect 10150 NAL 8x SFP28 4x RJ45 2x PSU SD-WAN Gateway	S2N34A#B2E
	– HPE 2.3m C13 to NEMA 6-15P Pwr Cord(J9936A)
	HPE Aruba Networking EdgeConnect 10150 NAL 8x SFP28 4x RJ45 2x PSU SD-WAN Gateway	S2N34A#AC3
	– No Power Cord

	Configuration Rules
Rule #	Description
1	Localization required on orders without AC3 options. Refer to HPN Localization Table. OCA Only: Required Custom Choice (Min1/Max1) Localized Power Cord - Default Option No Power Cord - AC3 Option
2	The following SFP+ Transceivers install into this Gateway's SFP+ Ports:
	HPE Aruba Networking EC-SFP-LR Single Mode SFP+	JM534A
	HPE Aruba Networking EC-SFP-SR Multi Mode SFP+	JM535A
3	The following SFP28 Transceivers install into this Gateway's SFP28 Ports:
	HPE Aruba Networking EC-SFP28-25G-LR Single Mode SFP28	JM532A
	HPE Aruba Networking EC-SFP28-25G-SR Multi Mode SFP28	JM533A
4	The following SFP Transceivers install into this Gateway’s SFP Ports:
	HPE Aruba Networking EdgeConnect 1000BASE-T Copper SFP Transceiver Module	R9Y49A
5	The following SFP+ Transceivers install into this Gateway's SFP+ Ports:
	HPE Aruba Networking 10G SFP+ LC SR 300m OM3 MMF Transceiver	J9150D
	HPE Aruba Networking 10G SFP+ LC LR 10km SMF Transceiver	J9151E
	HPE Aruba Networking 10GBASE-T SFP+ RJ45 30m Cat6A Transceiver	JL563C
	HPE Aruba Networking 25G SFP28 LC SR 100m MMF Transceiver	JL484A
	HPE Aruba Networking 25G SFP28 LC LR 10km SMF Transceiver	JL486A
	HPE Aruba Networking 25G SFP28 to SFP28 5m Direct Attach Copper Cable	JL489A
6	NAL Certified Gateways are recommended to be deployed only in China
Notes:	– Drop down under Gateway should offer the following options and results: – Switch/Router/Power Supply to PDU Power Cord - B2B in North America, Mexico, Taiwan, and Japan or B2C ROW. (OCA Default B2B or B2C for Rack Level CTO) – Switch/Router/Power Supply to Wall Power Cord - Localized Option (OCA Default for BTO and Box Level CTO) – High Volt Switch/Router/Power Supply to Wall Power Cord - B2E Option. (Offered only in North America, Mexico, Taiwan, and Japan) – No Power Cord - AC3 Option – OCA Only Model Selection Form - HPE Aruba Networking > Gateways and Controllers > HPE ANW EdgeConnect > EdgeConnect SD-WAN Hub Gateways
HPE Aruba Networking EdgeConnect SD-WAN Hub Gateways Options
Rule #	Description	SKU
	Transceivers
	SPF Transceivers
	HPE Aruba Networking EdgeConnect 1000BASE-T Copper SFP Transceiver Module	R9Y49A
	SFP+ Transceivers
	HPE Aruba Networking EC-SFP-LR Single Mode SFP+	JM534A
	HPE Aruba Networking EC-SFP-SR Multi Mode SFP+	JM535A
	HPE Aruba Networking 10G SFP+ LC SR 300m OM3 MMF Transceiver	J9150D
	HPE Aruba Networking 10G SFP+ LC LR 10km SMF Transceiver	J9151E
	HPE Aruba Networking 10GBASE-T SFP+ RJ45 30m Cat6A Transceiver	JL563C
	SFP28 Transceivers
	HPE Aruba Networking EC-SFP28-25G-LR Single Mode SFP28	JM532A
	HPE Aruba Networking EC-SFP28-25G-SR Multi Mode SFP28	JM533A
	HPE Aruba Networking 25G SFP28 LC SR 100m MMF Transceiver	JL484A
	HPE Aruba Networking 25G SFP28 LC LR 10km SMF Transceiver	JL486A
	HPE Aruba Networking 25G SFP28 to SFP28 5m Direct Attach Copper Cable	JL489A
	Accessories
4	HPE Aruba Networking EC-M-H Sliding Rails	JZ954A
4	HPE Aruba Networking EC-M-H Accessory Kit	JZ894A
5	HPE Aruba Networking EC-L/EC-XL-H Sliding and 4-Post Static Rails	JZ886A
5	HPE Aruba Networking EC-L/EC-XL-H 2-Post Center Mount Conversion Bracket Kit	JZ888A
6	HPE Aruba Networking EdgeConnect 10150/10170 1.6TB Network Memory Drive Kit	S2N67A
	Configuration Rules
Rule #	Description	SKU
4	This Accessory is compatible with the following EC-M-H Appliances only:
	HPE Aruba Networking EC-M-H 8x RJ45 10/100/1000 4x SFP+ 1/10G SD-WAN Gateway	JZ872A
	HPE Aruba Networking EdgeConnect Medium-H 4x SFP+ 10x RJ45 AC PSU 2xSSD NAL SD-WAN Gateway	S3N75A
5	This Accessory is compatible with the following EC-L-H/EC-XL-H Appliances only:
	HPE Aruba Networking EC-L-H 6x SFP+ 1/10G SD-WAN Gateway	JZ878A
	HPE Aruba Networking EdgeConnect Large-H 6x SFP+ 2xPSU 2xSSD NAL SD-WAN Gateway	S3N76A
	HPE Aruba Networking EdgeConnect Extra Large-H 6x SFP28 2xNVMe 2xPSU 2xSSD NAL SD-WAN Gateway	S3N77A
	HPE Aruba Networking EdgeConnect Extra Large-H 10G 6x SFP+ 2xNVMe 2xPSU 2xSSD NAL SD-WAN Gateway	S3N68A
6	This PSU is compatible with the following EC-10150 Gateways only:
	HPE Aruba Networking EdgeConnect 10150 2xRJ45 MGMT 8x10G/25G SFP28 2xPSU SD-WAN Gateway	S2N65A
	HPE Aruba Networking EdgeConnect 10150 8x SFP28 2x RJ45 2xPSU NAL SD-WAN Gateway	S3P34A
	Spares
Rule #	Description	SKU
4	HPE Aruba Networking EC-M-H 100-240V 50/60Hz 300W AC Power Supply Unit	JZ955A
5	HPE Aruba Networking EC-L/EC-XL-H 100-240V 50/60Hz 800W AC Power Supply Unit	JZ887A
6	HPE Aruba Networking EdgeConnect 10050 800W AC Power Supply Unit	S3P33A
5	HPE Aruba Networking EC -L/EC-XL-H 480GB Solid State Drive	JZ889A
5	HPE Aruba Networking EC-XL-H 1.6TB PCI Express Flash NVM	JZ890A
6	HPE Aruba Networking EdgeConnect 10010 1.6TB Network Memory Spare Drive	S3R70A
6	HPE Aruba Networking EdgeConnect 10020 4 Post Sliding Rail Kit	S3P32A
6	HPE Aruba Networking EdgeConnect 10012 480GB NVMe Boot Drive Kit	S3P35A
	Configuration Rules
Rule #	Description	SKU
4	This Accessory is compatible with the following EC-M-H Appliances only:
	HPE Aruba Networking EC-M-H 8x RJ45 10/100/1000 4x SFP+ 1/10G SD-WAN Gateway	JZ872A
	HPE Aruba Networking EdgeConnect Medium-H 4x SFP+ 10x RJ45 AC PSU 2xSSD NAL SD-WAN Gateway	S3N75A
5	This Accessory is compatible with the following EC-L-H/EC-XL-H Appliances only:
	HPE Aruba Networking EC-L-H 6x SFP+ 1/10G SD-WAN Gateway	JZ878A
	HPE Aruba Networking EdgeConnect Large-H 6x SFP+ 2xPSU 2xSSD NAL SD-WAN Gateway	S3N76A
	HPE Aruba Networking EdgeConnect Extra Large-H 6x SFP28 2xNVMe 2xPSU 2xSSD NAL SD-WAN Gateway	S3N77A
	HPE Aruba Networking EdgeConnect Extra Large-H 10G 6x SFP+ 2xNVMe 2xPSU 2xSSD NAL SD-WAN Gateway	S3N68A
6	This PSU is compatible with the following EC-10150 Gateways only:
	HPE Aruba Networking EdgeConnect 10150 2xRJ45 MGMT 8x10G/25G SFP28 2xPSU SD-WAN Gateway	S2N65A
	HPE Aruba Networking EdgeConnect 10150 8x SFP28 2x RJ45 2xPSU NAL SD-WAN Gateway	S3P34A

HPE Aruba Networking EdgeConnect SD-WAN Gateways (Traditional)
	Advanced Security
Rule #	Description	SKU
2	HPE Aruba Networking EdgeConnect AS Standard 1-year Subscription E-STU	JZ904AAS
2	HPE Aruba Networking EdgeConnect AS Standard 2-year Subscription E-STU	JZ905AAS
2	HPE Aruba Networking EdgeConnect AS Standard 3-year Subscription E-STU	JZ906AAS
2	HPE Aruba Networking EdgeConnect AS Standard 4-year Subscription E-STU	JZ907AAS
2	HPE Aruba Networking EdgeConnect AS Standard 5-year Subscription E-STU	JZ908AAS
2, 4	HPE Aruba Networking EdgeConnect AS Unlimited 1-year Subscription E-STU	JZ909AAS
2, 4	HPE Aruba Networking EdgeConnect AS Unlimited 2-year Subscription E-STU	JZ910AAS
2, 4	HPE Aruba Networking EdgeConnect AS Unlimited 3-year Subscription E-STU	JZ911AAS
2, 4	HPE Aruba Networking EdgeConnect AS Unlimited 4-year Subscription E-STU	JZ912AAS
2, 4	HPE Aruba Networking EdgeConnect AS Unlimited 5-year Subscription E-STU	JZ913AAS
2	HPE Aruba Networking EdgeConnect AS Standard High Availability 1-year Subscription E-STU	JZ914AAS
2	HPE Aruba Networking EdgeConnect AS Standard High Availability 2-year Subscription E-STU	JZ915AAS
2	HPE Aruba Networking EdgeConnect AS Standard High Availability 3-year Subscription E-STU	JZ916AAS
2	HPE Aruba Networking EdgeConnect AS Standard High Availability 4-year Subscription E-STU	JZ917AAS
2	HPE Aruba Networking EdgeConnect AS Standard High Availability 5-year Subscription E-STU	JZ918AAS
2, 4	HPE Aruba Networking EdgeConnect AS Unlimited High Availability 1-year Subscription E-STU	JZ919AAS
2, 4	HPE Aruba Networking EdgeConnect AS Unlimited High Availability 2-year Subscription E-STU	JZ920AAS
2, 4	HPE Aruba Networking EdgeConnect AS Unlimited High Availability 3-year Subscription E-STU	JZ921AAS
2, 4	HPE Aruba Networking EdgeConnect AS Unlimited High Availability 4-year Subscription E-STU	JZ922AAS
2, 4	HPE Aruba Networking EdgeConnect AS Unlimited High Availability 5-year Subscription E-STU	JZ923AAS
	Bandwidth License
2	HPE Aruba Networking EdgeConnect BW 100 1-year Subscription E-STU	JM068AAS
2	HPE Aruba Networking EdgeConnect BW 100 2-year Subscription E-STU	JM069AAS
2	HPE Aruba Networking EdgeConnect BW 100 3-year Subscription E-STU	JM070AAS
2	HPE Aruba Networking EdgeConnect BW 100 4-year Subscription E-STU	JM071AAS
2	HPE Aruba Networking EdgeConnect BW 100 5-year Subscription E-STU	JM072AAS
2	HPE Aruba Networking EdgeConnect BW 100 High Availability 1-year Subscription E-STU	JM075AAS
2	HPE Aruba Networking EdgeConnect BW 100 High Availability 2-year Subscription E-STU	JM076AAS
2	HPE Aruba Networking EdgeConnect BW 100 High Availability 3-year Subscription E-STU	JM077AAS
2	HPE Aruba Networking EdgeConnect BW 100 High Availability 4-year Subscription E-STU	JM078AAS
2	HPE Aruba Networking EdgeConnect BW 100 High Availability 5-year Subscription E-STU	JM079AAS
2	HPE Aruba Networking EdgeConnect BW 1G 1-year Subscription E-STU	JM084AAS
2	HPE Aruba Networking EdgeConnect BW 1G 2-year Subscription E-STU	JM085AAS
2	HPE Aruba Networking EdgeConnect BW 1G 3-year Subscription E-STU	JM086AAS
2	HPE Aruba Networking EdgeConnect BW 1G 4-year Subscription E-STU	JM087AAS
2	HPE Aruba Networking EdgeConnect BW 1G 5-year Subscription E-STU	JM088AAS
2	HPE Aruba Networking EdgeConnect BW 1G High Availability 1-year Subscription E-STU	JM091AAS
2	HPE Aruba Networking EdgeConnect BW 1G High Availability 2-year Subscription E-STU	JM092AAS
2	HPE Aruba Networking EdgeConnect BW 1G High Availability 3-year Subscription E-STU	JM093AAS
2	HPE Aruba Networking EdgeConnect BW 1G High Availability 4-year Subscription E-STU	JM094AAS
2	HPE Aruba Networking EdgeConnect BW 1G High Availability 5-year Subscription E-STU	JM095AAS
2	HPE Aruba Networking EdgeConnect BW 200 1-year Subscription E-STU	JM100AAS
2	HPE Aruba Networking EdgeConnect BW 200 2-year Subscription E-STU	JM101AAS
2	HPE Aruba Networking EdgeConnect BW 200 3-year Subscription E-STU	JM102AAS
2	HPE Aruba Networking EdgeConnect BW 200 4-year Subscription E-STU	JM103AAS
2	HPE Aruba Networking EdgeConnect BW 200 5-year Subscription E-STU	JM104AAS
2	HPE Aruba Networking EdgeConnect BW 200 High Availability 1-year Subscription E-STU	JM107AAS
2	HPE Aruba Networking EdgeConnect BW 200 High Availability 2-year Subscription E-STU	JM108AAS
2	HPE Aruba Networking EdgeConnect BW 200 High Availability 3-year Subscription E-STU	JM109AAS
2	HPE Aruba Networking EdgeConnect BW 200 High Availability 4-year Subscription E-STU	JM110AAS
2	HPE Aruba Networking EdgeConnect BW 200 High Availability 5-year Subscription E-STU	JM111AAS
2	HPE Aruba Networking EdgeConnect BW 20 1-year Subscription E-STU	JM116AAS
2	HPE Aruba Networking EdgeConnect BW 20 2-year Subscription E-STU	JM117AAS
2	HPE Aruba Networking EdgeConnect BW 20 3-year Subscription E-STU	JM118AAS
2	HPE Aruba Networking EdgeConnect BW 20 4-year Subscription E-STU	JM119AAS
2	HPE Aruba Networking EdgeConnect BW 20 5-year Subscription E-STU	JM120AAS
2	HPE Aruba Networking EdgeConnect BW 20 High Availability 1-year Subscription E-STU	JM123AAS
2	HPE Aruba Networking EdgeConnect BW 20 High Availability 2-year Subscription E-STU	JM124AAS
2	HPE Aruba Networking EdgeConnect BW 20 High Availability 3-year Subscription E-STU	JM125AAS
2	HPE Aruba Networking EdgeConnect BW 20 High Availability 4-year Subscription E-STU	JM126AAS
2	HPE Aruba Networking EdgeConnect BW 20 High Availability 5-year Subscription E-STU	JM127AAS
2	HPE Aruba Networking EdgeConnect BW 2G 1-year Subscription E-STU	JM132AAS
2	HPE Aruba Networking EdgeConnect BW 2G 2-year Subscription E-STU	JM133AAS
2	HPE Aruba Networking EdgeConnect BW 2G 3-year Subscription E-STU	JM134AAS
2	HPE Aruba Networking EdgeConnect BW 2G 4-year Subscription E-STU	JM135AAS
2	HPE Aruba Networking EdgeConnect BW 2G 5-year Subscription E-STU	JM136AAS
2	HPE Aruba Networking EdgeConnect BW 2G High Availability 1-year Subscription E-STU	JM139AAS
2	HPE Aruba Networking EdgeConnect BW 2G High Availability 2-year Subscription E-STU	JM140AAS
2	HPE Aruba Networking EdgeConnect BW 2G High Availability 3-year Subscription E-STU	JM141AAS
2	HPE Aruba Networking EdgeConnect BW 2G High Availability 4-year Subscription E-STU	JM142AAS
2	HPE Aruba Networking EdgeConnect BW 2G High Availability 5-year Subscription E-STU	JM143AAS
2	HPE Aruba Networking EdgeConnect BW 500 1-year Subscription E-STU	JM148AAS
2	HPE Aruba Networking EdgeConnect BW 500 2-year Subscription E-STU	JM149AAS
2	HPE Aruba Networking EdgeConnect BW 500 3-year Subscription E-STU	JM150AAS
2	HPE Aruba Networking EdgeConnect BW 500 4-year Subscription E-STU	JM151AAS
2	HPE Aruba Networking EdgeConnect BW 500 5-year Subscription E-STU	JM152AAS
2	HPE Aruba Networking EdgeConnect BW 500 High Availability 1-year Subscription E-STU	JM155AAS
2	HPE Aruba Networking EdgeConnect BW 500 High Availability 2-year Subscription E-STU	JM156AAS
2	HPE Aruba Networking EdgeConnect BW 500 High Availability 3-year Subscription E-STU	JM157AAS
2	HPE Aruba Networking EdgeConnect BW 500 High Availability 4-year Subscription E-STU	JM158AAS
2	HPE Aruba Networking EdgeConnect BW 500 High Availability 5-year Subscription E-STU	JM159AAS
2	HPE Aruba Networking EdgeConnect BW 50 1-year Subscription E-STU	JM164AAS
2	HPE Aruba Networking EdgeConnect BW 50 2-year Subscription E-STU	JM165AAS
2	HPE Aruba Networking EdgeConnect BW 50 3-year Subscription E-STU	JM166AAS
2	HPE Aruba Networking EdgeConnect BW 50 4-year Subscription E-STU	JM167AAS
2	HPE Aruba Networking EdgeConnect BW 50 5-year Subscription E-STU	JM168AAS
2	HPE Aruba Networking EdgeConnect BW 50 High Availability 1-year Subscription E-STU	JM171AAS
2	HPE Aruba Networking EdgeConnect BW 50 High Availability 2-year Subscription E-STU	JM172AAS
2	HPE Aruba Networking EdgeConnect BW 50 High Availability 3-year Subscription E-STU	JM173AAS
2	HPE Aruba Networking EdgeConnect BW 50 High Availability 4-year Subscription E-STU	JM174AAS
2	HPE Aruba Networking EdgeConnect BW 50 High Availability 5-year Subscription E-STU	JM175AAS
2	HPE Aruba Networking EdgeConnect BW Unlimited 1-year Subscription E-STU	JM180AAS
2	HPE Aruba Networking EdgeConnect BW Unlimited 2-year Subscription E-STU	JM181AAS
2	HPE Aruba Networking EdgeConnect BW Unlimited 3-year Subscription E-STU	JM182AAS
2	HPE Aruba Networking EdgeConnect BW Unlimited 4-year Subscription E-STU	JM183AAS
2	HPE Aruba Networking EdgeConnect BW Unlimited 5-year Subscription E-STU	JM184AAS
2 2 2 2 2	HPE Aruba Networking EdgeConnect BW Unlimited High Availability 1-year Subscription E-STU HPE Aruba Networking EdgeConnect BW Unlimited High Availability 2-year Subscription ESTU HPE Aruba Networking EdgeConnect BW Unlimited High Availability 3-year Subscription ESTU HPE Aruba Networking EdgeConnect BW Unlimited High Availability 4-year Subscription ESTU HPE Aruba Networking EdgeConnect BW Unlimited High Availability 5-year Subscription ESTU	JM187AAS JM188AAS JM189AAS JM190AAS JM191AAS

	Configuration Rules
Rule #	Description	SKU
1	These SKUS must be also presented in the OCA Catalog in the following Directory: HPE Aruba Networking > SD-WAN > HPE Aruba Networking EdgeConnect SD-WAN Gateways> Orchestration Software
2	These SKUS must be also presented in the OCA Catalog in the following Directory: HPE Aruba Networking > SD-WAN > HPE Aruba Networking EdgeConnect SD-WAN Gateways> Software Licenses
4	This license is not supported on the following EC-XS Gateways: JM962A
HPE Aruba Networking EdgeConnect SD-WAN Gateways Software (Tiered Subscription)
Rule#	Description	SKU
	SD-WAN Foundation
1, 4	HPE Aruba Networking EdgeConnect SD-WAN Hub Gateway Foundation 1-year Subscription SaaS	S2M85AAS
1, 4	HPE Aruba Networking EdgeConnect Foundation Core 1-year Subscription SaaS	S0Y45AAS
1, 4	HPE Aruba Networking EdgeConnect Foundation Core 3-year Subscription SaaS	S0Y51AAS
1, 4	HPE Aruba Networking EdgeConnect Foundation Core 5-year Subscription SaaS	S0Y57AAS
1, 4	HPE Aruba Networking EdgeConnect Foundation Core 7-year Subscription SaaS	S0Y60AAS
1, 4	HPE Aruba Networking EdgeConnect Foundation Core Subscription SaaS	S0Y63AAS
1, 4	HPE Aruba Networking EdgeConnect Foundation Core 90-day Evaluation Subscription SaaS	S0Y82AAS
1, 4	HPE Aruba Networking EdgeConnect Foundation 100Mbps 1-year Subscription SaaS	S1C49AAS
1, 4	HPE Aruba Networking EdgeConnect Foundation 100Mbps 3-year Subscription SaaS	S1C51AAS
1, 4	HPE Aruba Networking EdgeConnect Foundation 100Mbps 5-year Subscription SaaS	S1C53AAS
1, 4	HPE Aruba Networking EdgeConnect Foundation 100Mbps 7-year Subscription SaaS	S1C54AAS
1, 4	HPE Aruba Networking EdgeConnect Foundation 100Mbps Subscription SaaS	S1C55AAS
1, 4	HPE Aruba Networking EdgeConnect Foundation High Availability 100Mbps 1-year Subscription SaaS	S1C56AAS
1, 4	HPE Aruba Networking EdgeConnect Foundation High Availability 100Mbps 3-year Subscription SaaS	S1A17AAS
1, 4	HPE Aruba Networking EdgeConnect Foundation High Availability 100Mbps 5-year Subscription SaaS	S1A19AAS
1, 4	HPE Aruba Networking EdgeConnect Foundation High Availability 100Mbps 7-year Subscription SaaS	S1A20AAS
1, 4	HPE Aruba Networking EdgeConnect Foundation High Availability 100Mbps Subscription SaaS	S1A21AAS
1, 4	HPE Aruba Networking EdgeConnect Foundation 1Gbps 1-year Subscription SaaS	S1A22AAS
1, 4	HPE Aruba Networking EdgeConnect Foundation 1Gbps 3-year Subscription SaaS	S1A24AAS
1, 4	HPE Aruba Networking EdgeConnect Foundation 1Gbps 5-year Subscription SaaS	S1A26AAS
1, 4	HPE Aruba Networking EdgeConnect Foundation 1Gbps 7-year Subscription SaaS	S1A27AAS
1, 4	HPE Aruba Networking EdgeConnect Foundation 1Gbps Subscription SaaS	S1A28AAS
1, 4	HPE Aruba Networking EdgeConnect Foundation High Availability 1Gbps 1-year Subscription SaaS	S1A29AAS
1, 4	HPE Aruba Networking EdgeConnect Foundation High Availability 1Gbps 3-year Subscription SaaS	S1A31AAS
1, 4	HPE Aruba Networking EdgeConnect Foundation High Availability 1Gbps 5-year Subscription SaaS	S1A33AAS
1, 4	HPE Aruba Networking EdgeConnect Foundation High Availability 1Gbps 7-year Subscription SaaS	S1A34AAS
1, 4	HPE Aruba Networking EdgeConnect Foundation High Availability 1Gbps Subscription SaaS	S1A35AAS
1, 4	HPE Aruba Networking EdgeConnect Foundation Unlimited 90-day Evaluation SaaS	S1C59AAS
1, 4	HPE Aruba Networking EdgeConnect Foundation High Availability Unlimited 90-day Evaluation SaaS	S1C60AAS
1, 4	HPE Aruba Networking EdgeConnect Foundation Unlimited 1-year Subscription SaaS	S1A36AAS
1, 4	HPE Aruba Networking EdgeConnect Foundation Unlimited 3-year Subscription SaaS	S1A38AAS
1, 4	HPE Aruba Networking EdgeConnect Foundation Unlimited 5-year Subscription SaaS	S1A40AAS
1, 4	HPE Aruba Networking EdgeConnect Foundation Unlimited 7-year Subscription SaaS	S1A41AAS
1, 4	HPE Aruba Networking EdgeConnect Foundation Unlimited Subscription SaaS	S1A42AAS
1, 4	HPE Aruba Networking EdgeConnect Foundation High Availability Unlimited 1-year Subscription SaaS	S1A43AAS
1, 4	HPE Aruba Networking EdgeConnect Foundation High Availability Unlimited 3-year Subscription SaaS	S1A45AAS
1, 4	HPE Aruba Networking EdgeConnect Foundation Unlimited High Availability 5-year Subscription SaaS	S1A77AAS
1, 4	HPE Aruba Networking EdgeConnect Foundation Unlimited High Availability 7-year Subscription SaaS	S1A78AAS
1, 4	HPE Aruba Networking EdgeConnect Foundation Unlimited High Availability Subscription SaaS	S1A79AAS
1, 4	HPE Aruba Networking EdgeConnect Foundation High Availability Unlimited 3-year Subscription SaaS	S1A45AAS
1, 4	HPE Aruba Networking EdgeConnect Foundation High Availability Unlimited 3-year Subscription SaaS	S1A45AAS

	SD-WAN Advanced
2, 4	HPE Aruba Networking EdgeConnect SD-WAN Hub Gateway Advanced 1-year Subscription SaaS	S2M86AAS
2, 4	HPE Aruba Networking EdgeConnect Advanced Core 1-year Subscription SaaS	S0Y46AAS
2, 4	HPE Aruba Networking EdgeConnect Advanced Core 3-year Subscription SaaS	S0Y52AAS
2, 4	HPE Aruba Networking EdgeConnect Advanced Core 5-year Subscription SaaS	S0Y58AAS
2, 4	HPE Aruba Networking EdgeConnect Advanced Core 7-year Subscription SaaS	S0Y61AAS
2, 4	HPE Aruba Networking EdgeConnect Advanced Core Subscription SaaS	S0Y64AAS
2, 4	HPE Aruba Networking EdgeConnect Advanced 20Mbps 1-year Subscription SaaS	S1B06AAS
2, 4	HPE Aruba Networking EdgeConnect Advanced 20Mbps 3-year Subscription SaaS	S1B08AAS
2, 4	HPE Aruba Networking EdgeConnect Advanced 20Mbps 5-year Subscription SaaS	S1B10AAS
2, 4	HPE Aruba Networking EdgeConnect Advanced 20Mbps 7-year Subscription SaaS	S1B11AAS
2, 4	HPE Aruba Networking EdgeConnect Advanced 20Mbps Subscription SaaS	S1B12AAS
2, 4	HPE Aruba Networking EdgeConnect Advanced High Availability 20Mbps 1-year Subscription SaaS	S1B13AAS
2, 4	HPE Aruba Networking EdgeConnect Advanced High Availability 20Mbps 3-year Subscription SaaS	S1B15AAS
2, 4	HPE Aruba Networking EdgeConnect Advanced High Availability 20Mbps 5-year Subscription SaaS	S1B17AAS
2, 4	HPE Aruba Networking EdgeConnect Advanced High Availability 20Mbps 7-year Subscription SaaS	S1B18AAS
2, 4	HPE Aruba Networking EdgeConnect Advanced High Availability 20Mbps Subscription SaaS	S1B19AAS
2, 4	HPE Aruba Networking EdgeConnect Advanced 50Mbps 1-year Subscription SaaS	S1B20AAS
2, 4	HPE Aruba Networking EdgeConnect Advanced 50Mbps 3-year Subscription SaaS	S1B22AAS
2, 4	HPE Aruba Networking EdgeConnect Advanced 50Mbps 5-year Subscription SaaS	S1B24AAS
2, 4	HPE Aruba Networking EdgeConnect Advanced 50Mbps 7-year Subscription SaaS	S1B25AAS
2, 4	HPE Aruba Networking EdgeConnect Advanced 50Mbps Subscription SaaS	S1B26AAS
2, 4	HPE Aruba Networking EdgeConnect Advanced High Availability 50Mbps 1-year Subscription SaaS	S1B27AAS
2, 4	HPE Aruba Networking EdgeConnect Advanced High Availability 50Mbps 3-year Subscription SaaS	S1B29AAS
2, 4	HPE Aruba Networking EdgeConnect Advanced High Availability 50Mbps 5-year Subscription SaaS	S1B31AAS
2, 4	HPE Aruba Networking EdgeConnect Advanced High Availability 50Mbps 7-year Subscription SaaS	S1B32AAS
2, 4	HPE Aruba Networking EdgeConnect Advanced High Availability 50Mbps Subscription SaaS	S1B33AAS
2, 4	HPE Aruba Networking EdgeConnect Advanced 100Mbps 1-year Subscription SaaS	S1B34AAS
2, 4	HPE Aruba Networking EdgeConnect Advanced 100Mbps 3-year Subscription SaaS	S1B36AAS
2, 4	HPE Aruba Networking EdgeConnect Advanced 100Mbps 5-year Subscription SaaS	S1B38AAS
2, 4	HPE Aruba Networking EdgeConnect Advanced 100Mbps 7-year Subscription SaaS	S1B39AAS
2, 4	HPE Aruba Networking EdgeConnect Advanced 100Mbps Subscription SaaS	S1B40AAS
2, 4	HPE Aruba Networking EdgeConnect Advanced High Availability 100Mbps 1-year Subscription SaaS	S1B41AAS
2, 4	HPE Aruba Networking EdgeConnect Advanced High Availability 100Mbps 3-year Subscription SaaS	S1B43AAS
2, 4	HPE Aruba Networking EdgeConnect Advanced High Availability 100Mbps 5-year Subscription SaaS	S1B45AAS
2, 4	HPE Aruba Networking EdgeConnect Advanced High Availability 100Mbps 7-year Subscription SaaS	S1B46AAS
2, 4	HPE Aruba Networking EdgeConnect Advanced High Availability 100Mbps Subscription SaaS	S1B47AAS
2, 4	HPE Aruba Networking EdgeConnect Advanced 200Mbps 1-year Subscription SaaS	S1B48AAS
2, 4	HPE Aruba Networking EdgeConnect Advanced 200Mbps 3-year Subscription SaaS	S1B50AAS
2, 4	HPE Aruba Networking EdgeConnect Advanced 200Mbps 5-year Subscription SaaS	S1B52AAS
2, 4	HPE Aruba Networking EdgeConnect Advanced 200Mbps 7-year Subscription SaaS	S1B53AAS
2, 4	HPE Aruba Networking EdgeConnect Advanced 200Mbps Subscription SaaS	S1B54AAS
2, 4	HPE Aruba Networking EdgeConnect Advanced High Availability 200Mbps 1-year Subscription SaaS	S1B55AAS
2, 4	HPE Aruba Networking EdgeConnect Advanced High Availability 200Mbps 3-year Subscription SaaS	S1B57AAS
2, 4	HPE Aruba Networking EdgeConnect Advanced High Availability 200Mbps 5-year Subscription SaaS	S1B59AAS
2, 4	HPE Aruba Networking EdgeConnect Advanced High Availability 200Mbps 7-year Subscription SaaS	S1B60AAS
2, 4	HPE Aruba Networking EdgeConnect Advanced High Availability 200Mbps Subscription SaaS	S1B61AAS
2, 4	HPE Aruba Networking EdgeConnect Advanced 500Mbps 1-year Subscription SaaS	S1B62AAS
2, 4	HPE Aruba Networking EdgeConnect Advanced 500Mbps 3-year Subscription SaaS	S1B64AAS
2, 4	HPE Aruba Networking EdgeConnect Advanced 500Mbps 5-year Subscription SaaS	S1B67AAS
2, 4	HPE Aruba Networking EdgeConnect Advanced 500Mbps 7-year Subscription SaaS	S1B68AAS
2, 4	HPE Aruba Networking EdgeConnect Advanced 500Mbps Subscription SaaS	S1B69AAS
2, 4	HPE Aruba Networking EdgeConnect Advanced High Availability 500Mbps 1-year Subscription SaaS	S1B70AAS
2, 4	HPE Aruba Networking EdgeConnect Advanced High Availability 500Mbps 3-year Subscription SaaS	S1B72AAS
2, 4	HPE Aruba Networking EdgeConnect Advanced High Availability 500Mbps 5-year Subscription SaaS	S1B74AAS
2, 4	HPE Aruba Networking EdgeConnect Advanced High Availability 500Mbps 7-year Subscription SaaS	S1B75AAS
2, 4	HPE Aruba Networking EdgeConnect Advanced High Availability 500Mbps Subscription SaaS	S1B76AAS
2, 4	HPE Aruba Networking EdgeConnect Advanced 1Gbps 1-year Subscription SaaS	S1B77AAS
2, 4	HPE Aruba Networking EdgeConnect Advanced 1Gbps 3-year Subscription SaaS	S1B79AAS
2, 4	HPE Aruba Networking EdgeConnect Advanced 1Gbps 5-year Subscription SaaS	S1B81AAS
2, 4	HPE Aruba Networking EdgeConnect Advanced 1Gbps 7-year Subscription SaaS	S1B82AAS
2, 4	HPE Aruba Networking EdgeConnect Advanced 1Gbps Subscription SaaS	S1B83AAS
2, 4	HPE Aruba Networking EdgeConnect Advanced High Availability 1Gbps 1-year Subscription SaaS	S1B84AAS
2, 4	HPE Aruba Networking EdgeConnect Advanced High Availability 1Gbps 3-year Subscription SaaS	S1B86AAS
2, 4	HPE Aruba Networking EdgeConnect Advanced High Availability 1Gbps 5-year Subscription SaaS	S1B88AAS
2, 4	HPE Aruba Networking EdgeConnect Advanced High Availability 1Gbps 7-year Subscription SaaS	S1B89AAS
2, 4	HPE Aruba Networking EdgeConnect Advanced High Availability 1Gbps Subscription SaaS	S1B90AAS
2, 4	HPE Aruba Networking EdgeConnect Advanced 2Gbps 1-year Subscription SaaS	S1B91AAS
2, 4	HPE Aruba Networking EdgeConnect Advanced 2Gbps 3-year Subscription SaaS	S1B93AAS
2, 4	HPE Aruba Networking EdgeConnect Advanced 2Gbps 5-year Subscription SaaS	S1B95AAS
2, 4	HPE Aruba Networking EdgeConnect Advanced 2Gbps 7-year Subscription SaaS	S1B96AAS
2, 4	HPE Aruba Networking EdgeConnect Advanced 2Gbps Subscription SaaS	S1C27AAS
2, 4	HPE Aruba Networking EdgeConnect Advanced High Availability 2Gbps 1-year Subscription SaaS	S1C28AAS
2, 4	HPE Aruba Networking EdgeConnect Advanced High Availability 2Gbps 3-year Subscription SaaS	S1C30AAS
2, 4	HPE Aruba Networking EdgeConnect Advanced High Availability 2Gbps 5-year Subscription SaaS	S1C32AAS
2, 4	HPE Aruba Networking EdgeConnect Advanced High Availability 2Gbps 7-year Subscription SaaS	S1C33AAS
2, 4	HPE Aruba Networking EdgeConnect Advanced High Availability 2Gbps Subscription SaaS	S1C34AAS
2, 4	HPE Aruba Networking EdgeConnect Advanced Unlimited 1-year Subscription SaaS	S1C35AAS
2, 4	HPE Aruba Networking EdgeConnect Advanced Unlimited 3-year Subscription SaaS	S1C37AAS
2, 4	HPE Aruba Networking EdgeConnect Advanced Unlimited 5-year Subscription SaaS	S1C39AAS
2, 4	HPE Aruba Networking EdgeConnect Advanced Unlimited 7-year Subscription SaaS	S1C40AAS
2, 4	HPE Aruba Networking EdgeConnect Advanced Unlimited Subscription SaaS	S1C41AAS
2, 4	HPE Aruba Networking EdgeConnect Advanced Unlimited High Availability 1-year Subscription SaaS	S1C42AAS
2, 4	HPE Aruba Networking EdgeConnect Advanced Unlimited High Availability 3-year Subscription SaaS	S1C44AAS
2, 4	HPE Aruba Networking EdgeConnect Advanced Unlimited High Availability 5-year Subscription SaaS	S1C46AAS
2, 4	HPE Aruba Networking EdgeConnect Advanced Unlimited High Availability 7-year Subscription SaaS	S1C47AAS
2, 4	HPE Aruba Networking EdgeConnect Advanced Unlimited High Availability Subscription SaaS	S1C48AAS

	SD-WAN Foundation/Advanced Add-On's
4, 6	HPE Aruba Networking EdgeConnect WAN Optimization 100Mbps 1-year Subscription SaaS	S0Z71AAS
4, 6	HPE Aruba Networking EdgeConnect WAN Optimization 100Mbps 3-year Subscription SaaS	S0Z73AAS
4, 6	HPE Aruba Networking EdgeConnect WAN Optimization 100Mbps 5-year Subscription SaaS	S0Z75AAS
4, 6	HPE Aruba Networking EdgeConnect WAN Optimization 100Mbps 7-year Subscription SaaS	S0Z76AAS
4, 6	HPE Aruba Networking EdgeConnect WAN Optimization 100Mbps Subscription SaaS	S0Z77AAS
4, 6	HPE Aruba Networking EdgeConnect WAN Optimization High Availability 100Mbps 1-year Subscription SaaS	S0Z78AAS
4, 6	HPE Aruba Networking EdgeConnect WAN Optimization High Availability 100Mbps 3-year Subscription SaaS	S0Z80AAS
4, 6	HPE Aruba Networking EdgeConnect WAN Optimization High Availability 100Mbps 5-year Subscription SaaS	S0Z82AAS
4, 6	HPE Aruba Networking EdgeConnect WAN Optimization High Availability 100Mbps 7-year Subscription SaaS	S0Z83AAS
4, 6	HPE Aruba Networking EdgeConnect WAN Optimization High Availability 100Mbps Subscription SaaS	S0Z84AAS
4, 6	HPE Aruba Networking EdgeConnect WAN Optimization 10Gbps 1-year Subscription SaaS	S0Z85AAS
4, 6	HPE Aruba Networking EdgeConnect WAN Optimization 10Gbps 3-year Subscription SaaS	S0Z87AAS
4, 6	HPE Aruba Networking EdgeConnect WAN Optimization 10Gbps 5-year Subscription SaaS	S0Z89AAS
4, 6	HPE Aruba Networking EdgeConnect WAN Optimization 10Gbps 7-year Subscription SaaS	S0Z90AAS
4, 6	HPE Aruba Networking EdgeConnect WAN Optimization 10Gbps Subscription SaaS	S0Z91AAS
4, 6	HPE Aruba Networking EdgeConnect WAN Optimization High Availability 10Gbps 1-year Subscription SaaS	S0Z92AAS
4, 6	HPE Aruba Networking EdgeConnect WAN Optimization High Availability 10Gbps 3-year Subscription SaaS	S0Z94AAS
4, 6	HPE Aruba Networking EdgeConnect WAN Optimization High Availability 10Gbps 5-year Subscription SaaS	S0Z96AAS
4, 6	HPE Aruba Networking EdgeConnect WAN Optimization High Availability 10Gbps 7-year Subscription SaaS	S0Z97AAS
4, 6	HPE Aruba Networking EdgeConnect WAN Optimization High Availability 10Gbps Subscription SaaS	S0Z98AAS
4, 6	HPE Aruba Networking EdgeConnect Dynamic Threat Defense High Availability 1y Subscription SaaS	S0Z44AAS
4, 6	HPE Aruba Networking EdgeConnect Dynamic Threat Defense High Availability 3y Subscription SaaS	S0Y26AAS
4, 6	HPE Aruba Networking EdgeConnect Dynamic Threat Defense High Availability 5y Subscription SaaS	S0Y28AAS
4, 6	HPE Aruba Networking EdgeConnect Dynamic Threat Defense High Availability 7y Subscription SaaS	S0Y29AAS
4, 6	HPE Aruba Networking EdgeConnect Dynamic Threat Defense High Availability Subscription SaaS	S0Y30AAS
4, 6	HPE Aruba Networking EdgeConnect Dynamic Threat Defense 1-year Subscription SaaS	S0Z37AAS
4, 6	HPE Aruba Networking EdgeConnect Dynamic Threat Defense 3-year Subscription SaaS	S0Z39AAS
4, 6	HPE Aruba Networking EdgeConnect Dynamic Threat Defense 5-year Subscription SaaS	S0Z41AAS
4, 6	HPE Aruba Networking EdgeConnect Dynamic Threat Defense 7-year Subscription SaaS	S0Z42AAS
4, 6	HPE Aruba Networking EdgeConnect Dynamic Threat Defense Subscription SaaS	S0Z43AAS

	SD-WAN Advanced-OnPrem
3, 4	HPE Aruba Networking EdgeConnect On-Premises Core 1-year Subscription E-STU	S0Y47AAS
3, 4	HPE Aruba Networking EdgeConnect On-Premises Core 3-year Subscription E-STU	S0Y53AAS
3, 4	HPE Aruba Networking EdgeConnect On-Premises Core 5-year Subscription E-STU	S0Y59AAS
3, 4	HPE Aruba Networking EdgeConnect On-Premises Core 7-year Subscription E-STU	S0Y62AAS
3, 4	HPE Aruba Networking EdgeConnect On-Premises Core Subscription E-STU	S0Y65AAS
3, 4	HPE Aruba Networking EdgeConnect On-Premises 500Mbps 1-year Subscription E-STU	S0X93AAS
3, 4	HPE Aruba Networking EdgeConnect On-Premises 500Mbps 3-year Subscription E-STU	S0X95AAS
3, 4	HPE Aruba Networking EdgeConnect On-Premises 500Mbps 5-year Subscription E-STU	S0X97AAS
3, 4	HPE Aruba Networking EdgeConnect On-Premises 500Mbps 7-year Subscription E-STU	S0X98AAS
3, 4	HPE Aruba Networking EdgeConnect On-Premises 500Mbps Subscription E-STU	S0X99AAS
3, 4	HPE Aruba Networking EdgeConnect On-Premises High Availability 500Mbps 1-year Subscription E-STU	S0Y00AAS
3, 4	HPE Aruba Networking EdgeConnect On-Premises High Availability 500Mbps 3-year Subscription E-STU	S0Y02AAS
3, 4	HPE Aruba Networking EdgeConnect On-Premises High Availability 500Mbps 5-year Subscription E-STU	S0Y04AAS
3, 4	HPE Aruba Networking EdgeConnect On-Premises High Availability 500Mbps 7-year Subscription E-STU	S0Y05AAS
3, 4	HPE Aruba Networking EdgeConnect On-Premises High Availability 500Mbps Subscription E-STU	S0Y06AAS
3, 4	HPE Aruba Networking EdgeConnect On-Premises 1Gbps 1-year Subscription E-STU	S0Y07AAS
3, 4	HPE Aruba Networking EdgeConnect On-Premises 1Gbps 3-year Subscription E-STU	S0Y09AAS
3, 4	HPE Aruba Networking EdgeConnect On-Premises 1Gbps 5-year Subscription E-STU	S0Y11AAS
3, 4	HPE Aruba Networking EdgeConnect On-Premises 1Gbps 7-year Subscription E-STU	S0Y12AAS
3, 4	HPE Aruba Networking EdgeConnect On-Premises 1Gbps Subscription E-STU	S0Y13AAS
3, 4	HPE Aruba Networking EdgeConnect On-Premises High Availability 1Gbps 1-year Subscription E-STU	S0Y14AAS
3, 4	HPE Aruba Networking EdgeConnect On-Premises High Availability 1Gbps 3-year Subscription E-STU	S0Y16AAS
3, 4	HPE Aruba Networking EdgeConnect On-Premises High Availability 1Gbps 5-year Subscription E-STU	S0Y18AAS
3, 4	HPE Aruba Networking EdgeConnect On-Premises High Availability 1Gbps 7-year Subscription E-STU	S0Y19AAS
3, 4	HPE Aruba Networking EdgeConnect On-Premises High Availability 1Gbps Subscription E-STU	S0Y20AAS
3, 4	HPE Aruba Networking EdgeConnect On-Premises 2Gbps 1-year Subscription E-STU	S0Y21AAS
3, 4	HPE Aruba Networking EdgeConnect On-Premises 2Gbps 3-year Subscription E-STU	S0Z45AAS
3, 4	HPE Aruba Networking EdgeConnect On-Premises 2Gbps 5-year Subscription E-STU	S0Z47AAS
3, 4	HPE Aruba Networking EdgeConnect On-Premises 2Gbps 7-year Subscription E-STU	S0Z48AAS
3, 4	HPE Aruba Networking EdgeConnect On-Premises 2Gbps Subscription E-STU	S0Z49AAS
3, 4	HPE Aruba Networking EdgeConnect On-Premises High Availability 2Gbps 1-year Subscription E-STU	S0Z50AAS
3, 4	HPE Aruba Networking EdgeConnect On-Premises High Availability 2Gbps 3-year Subscription E-STU	S0Z52AAS
3, 4	HPE Aruba Networking EdgeConnect On-Premises High Availability 2Gbps 5-year Subscription E-STU	S0Z54AAS
3, 4	HPE Aruba Networking EdgeConnect On-Premises High Availability 2Gbps 7-year Subscription E-STU	S0Z55AAS
3, 4	HPE Aruba Networking EdgeConnect On-Premises High Availability 2Gbps Subscription E-STU	S0Z56AAS
3, 4	HPE Aruba Networking EdgeConnect On-Premises 20Mbps 1-year Subscription E-STU	S1A80AAS
3, 4	HPE Aruba Networking EdgeConnect On-Premises 20Mbps 3-year Subscription E-STU	S1A82AAS
3, 4	HPE Aruba Networking EdgeConnect On-Premises 20Mbps 5-year Subscription E-STU	S1A84AAS
3, 4	HPE Aruba Networking EdgeConnect On-Premises 20Mbps 7-year Subscription E-STU	S1A85AAS
3, 4	HPE Aruba Networking EdgeConnect On-Premises 20Mbps Subscription E-STU	S1A86AAS
3, 4	HPE Aruba Networking EdgeConnect On-Premises Core 90-day Evaluation Subscription E-STU	S1C61AAS
3, 4	HPE Aruba Networking EdgeConnect On-Premises High Availability 20Mbps 1-year Subscription E-STU	S1A87AAS
3, 4	HPE Aruba Networking EdgeConnect On-Premises High Availability 20Mbps 3-year Subscription E-STU	S1A89AAS
3, 4	HPE Aruba Networking EdgeConnect On-Premises High Availability 20Mbps 5-year Subscription E-STU	S1A91AAS
3, 4	HPE Aruba Networking EdgeConnect On-Premises High Availability 20Mbps 7-year Subscription E-STU	S1A92AAS
3, 4	HPE Aruba Networking EdgeConnect On-Premises High Availability 20Mbps Subscription E-STU	S1A93AAS
3, 4	HPE Aruba Networking EdgeConnect On-Premises 50Mbps 1-year Subscription E-STU	S1A94AAS
3, 4	HPE Aruba Networking EdgeConnect On-Premises 50Mbps 3-year Subscription E-STU	S1A96AAS
3, 4	HPE Aruba Networking EdgeConnect On-Premises 50Mbps 5-year Subscription E-STU	S1A98AAS
3, 4	HPE Aruba Networking EdgeConnect On-Premises 50Mbps 7-year Subscription E-STU	S1A99AAS
3, 4	HPE Aruba Networking EdgeConnect On-Premises 50Mbps Subscription E-STU	S1B00AAS
3, 4	HPE Aruba Networking EdgeConnect On-Premises High Availability 50Mbps 1-year Subscription E-STU	S1B01AAS
3, 4	HPE Aruba Networking EdgeConnect On-Premises High Availability 50Mbps 3-year Subscription E-STU	S1B03AAS
3, 4	HPE Aruba Networking EdgeConnect On-Premises High Availability 50Mbps 5-year Subscription E-STU	S1B05AAS
3, 4	HPE Aruba Networking EdgeConnect On-Premises High Availability 50Mbps 7-year Subscription E-STU	S1B97AAS
3, 4	HPE Aruba Networking EdgeConnect On-Premises High Availability 50Mbps Subscription E-STU	S1B98AAS
3, 4	HPE Aruba Networking EdgeConnect On-Premises 100Mbps 1-year Subscription E-STU	S1B99AAS
3, 4	HPE Aruba Networking EdgeConnect On-Premises 100Mbps 3-year Subscription E-STU	S1C01AAS
3, 4	HPE Aruba Networking EdgeConnect On-Premises 100Mbps 5-year Subscription E-STU	S1C03AAS
3, 4	HPE Aruba Networking EdgeConnect On-Premises 100Mbps 7-year Subscription E-STU	S1C04AAS
3, 4	HPE Aruba Networking EdgeConnect On-Premises 100Mbps Subscription E-STU	S1C05AAS
3, 4	HPE Aruba Networking EdgeConnect On-Premises High Availability 100Mbps 1-year Subscription E-STU	S1C06AAS
3, 4	HPE Aruba Networking EdgeConnect On-Premises High Availability 100Mbps 3-year Subscription E-STU	S1C08AAS
3, 4	HPE Aruba Networking EdgeConnect On-Premises High Availability 100Mbps 5-year Subscription E-STU	S1C10AAS
3, 4	HPE Aruba Networking EdgeConnect On-Premises High Availability 100Mbps 7-year Subscription E-STU	S1C11AAS
3, 4	HPE Aruba Networking EdgeConnect On-Premises High Availability 100Mbps Subscription E-STU	S1C12AAS
3, 4	HPE Aruba Networking EdgeConnect On-Premises 200Mbps 1-year Subscription E-STU	S1C13AAS
3, 4	HPE Aruba Networking EdgeConnect On-Premises 200Mbps 3-year Subscription E-STU	S1C15AAS
3, 4	HPE Aruba Networking EdgeConnect On-Premises 200Mbps 5-year Subscription E-STU	S1C17AAS
3, 4	HPE Aruba Networking EdgeConnect On-Premises 200Mbps 7-year Subscription E-STU	S1C18AAS
3, 4	HPE Aruba Networking EdgeConnect On-Premises 200Mbps Subscription E-STU	S1C19AAS
3, 4	HPE Aruba Networking EdgeConnect On-Premises 200Mbps HA 1-year Subscription E-STU	S1C20AAS
3, 4	HPE Aruba Networking EdgeConnect On-Premises High Availability 200Mbps 3-year Subscription E-STU	S1C22AAS
3, 4	HPE Aruba Networking EdgeConnect On-Premises High Availability 200Mbps 5-year Subscription E-STU	S1C24AAS
3, 4	HPE Aruba Networking EdgeConnect On-Premises High Availability 200Mbps 7-year Subscription E-STU	S1C25AAS
3, 4	HPE Aruba Networking EdgeConnect On-Premises High Availability 200Mbps Subscription E-STU	S1C26AAS
3, 4	HPE Aruba Networking EdgeConnect On-Premises Unlimited 1-year Subscription E-STU	S0Z57AAS
3, 4	HPE Aruba Networking EdgeConnect On-Premises Unlimited 3-year Subscription E-STU	S0Z59AAS
3, 4	HPE Aruba Networking EdgeConnect On-Premises Unlimited 5-year Subscription E-STU	S0Z61AAS
3, 4	HPE Aruba Networking EdgeConnect On-Premises Unlimited 7-year Subscription E-STU	S0Z62AAS
3, 4	HPE Aruba Networking EdgeConnect On-Premises Unlimited Subscription E-STU	S0Z63AAS
3, 4	HPE Aruba Networking EdgeConnect On-Premises Unlimited High Availability 1-year Subscription E-STU	S0Z64AAS
3, 4	HPE Aruba Networking EdgeConnect On-Premises Unlimited High Availability 3-year Subscription E-STU	S0Z66AAS
3, 4	HPE Aruba Networking EdgeConnect On-Premises Unlimited High Availability 5-year Subscription E-STU	S0Z68AAS
3, 4	HPE Aruba Networking EdgeConnect On-Premises Unlimited High Availability 7-year Subscription E-STU	S0Z69AAS
3, 4	HPE Aruba Networking EdgeConnect On-Premises Unlimited High Availability Subscription E-STU	S0Z70AAS

	SD-WAN Advanced-OnPrem Add-On's
3, 4	HPE Aruba Networking EdgeConnect Boost On-Premises 100Mbps Subscription E-STU	S0Z15AAS
3, 4	HPE Aruba Networking EdgeConnect Boost On-Premises High Availability 100Mbps 1y Subscription E-STU	S0Z16AAS
3, 4	HPE Aruba Networking EdgeConnect Boost On-Premises High Availability 100Mbps 3y Subscription E-STU	S0Z18AAS
3, 4	HPE Aruba Networking EdgeConnect Boost On-Premises High Availability 100Mbps 5y Subscription E-STU	S0Z20AAS
3, 4	HPE Aruba Networking EdgeConnect Boost On-Premises High Availability 100Mbps 7y Subscription E-STU	S0Z21AAS
3, 4	HPE Aruba Networking EdgeConnect Boost On-Premises High Availability 100Mbps Subscription E-STU	S0Z22AAS
3, 4	HPE Aruba Networking EdgeConnect Boost On-Premises 10Gbps 1-year Subscription E-STU	S0Z23AAS
3, 4	HPE Aruba Networking EdgeConnect Boost On-Premises 10Gbps 3-year Subscription E-STU	S0Z25AAS
3, 4	HPE Aruba Networking EdgeConnect Boost On-Premises 10Gbps 5-year Subscription E-STU	S0Z27AAS
3, 4	HPE Aruba Networking EdgeConnect Boost On-Premises 10Gbps 7-year Subscription E-STU	S0Z28AAS
3, 4	HPE Aruba Networking EdgeConnect Boost On-Premises 10Gbps Subscription E-STU	S0Z29AAS
3, 4	HPE Aruba Networking EdgeConnect Boost On-Premises High Availability 10Gbps 1y Subscription E-STU	S0Z30AAS
3, 4	HPE Aruba Networking EdgeConnect Boost On-Premises High Availability 10Gbps 3y Subscription E-STU	S0Z32AAS
3, 4	HPE Aruba Networking EdgeConnect Boost On-Premises High Availability 10Gbps 5y Subscription E-STU	S0Z34AAS
3, 4	HPE Aruba Networking EdgeConnect Boost On-Premises High Availability 10Gbps 7y Subscription E-STU	S0Z35AAS
3, 4	HPE Aruba Networking EdgeConnect Boost On-Premises High Availability 10Gbps Subscription E-STU	S0Z36AAS
3, 4	HPE Aruba Networking EdgeConnect Boost On-Premises 100Mbps 1-year Subscription E-STU	S0Z99AAS
3, 4	HPE Aruba Networking EdgeConnect Boost On-Premises 100Mbps 3-year Subscription E-STU	S1A01AAS
3, 4	HPE Aruba Networking EdgeConnect Boost On-Premises 100Mbps 5-year Subscription E-STU	S1A03AAS
3, 4	HPE Aruba Networking EdgeConnect Boost On-Premises 100Mbps 7-year Subscription E-STU	S1A04AAS
3, 4	HPE Aruba Networking EdgeConnect Dynamic Threat Defense On-Premises 1-year Subscription E-STU	S0Y31AAS
3, 4	HPE Aruba Networking EdgeConnect Dynamic Threat Defense On-Premises 3-year Subscription E-STU	S0Y33AAS
3, 4	HPE Aruba Networking EdgeConnect Dynamic Threat Defense On-Premises 5-year Subscription E-STU	S0Y35AAS
3, 4	HPE Aruba Networking EdgeConnect Dynamic Threat Defense On-Premises 7-year Subscription E-STU	S0Y36AAS
3, 4	HPE Aruba Networking EdgeConnect Dynamic Threat Defense On-Premises Subscription E-STU	S0Y37AAS
3, 4	HPE Aruba Networking EdgeConnect Dynamic Threat Defense On-Premises HA 1-year Subscription E-STU	S0Y38AAS
3, 4	HPE Aruba Networking EdgeConnect Dynamic Threat Defense On-Premises HA 3-year Subscription E-STU	S0Y40AAS
3, 4	HPE Aruba Networking EdgeConnect Dynamic Threat Defense On-Premises HA 5-year Subscription E-STU	S0Y42AAS
3, 4	HPE Aruba Networking EdgeConnect Dynamic Threat Defense On-Premises HA 7-year Subscription E-STU	S0Y43AAS
3, 4	HPE Aruba Networking EdgeConnect Dynamic Threat Defense On-Premises HA Subscription E-STU	S0Y44AAS
	SD-WAN Traditional Incremental Subscriptions
4	HPE Aruba Networking EdgeConnect Cloud Orchestrator Extra Large 1-year Subscription (US) SaaS	S4M43AAS
4	HPE Aruba Networking EdgeConnect Cloud Orchestrator Extra Large 3-year Subscription (US) SaaS	S4M44AAS
4	HPE Aruba Networking EdgeConnect Cloud Orchestrator Extra Large 5-year Subscription (US) SaaS	S4M45AAS
4	HPE Aruba Networking EdgeConnect Cloud Orchestrator 2Extra Large 1-year Subscription (US) SaaS	S4M46AAS
4	HPE Aruba Networking EdgeConnect Cloud Orchestrator 2Extra Large 3-year Subscription (US) SaaS	S4M47AAS
4	HPE Aruba Networking EdgeConnect Cloud Orchestrator 2Extra Large 5-year Subscription (US) SaaS	S4M48AAS
4	HPE Aruba Networking EdgeConnect Cloud Orchestrator Extra Large Subscription (US) SaaS	S4M49AAS
4	HPE Aruba Networking EdgeConnect Cloud Orchestrator 2Extra Large Subscription (US) SaaS	S4M50AAS
4	HPE Aruba Networking EdgeConnect GE Orchestrator Extra Large 1-year Subscription (US) SaaS	S4M51AAS
4	HPE Aruba Networking EdgeConnect GE Orchestrator Extra Large 3-year Subscription (US) SaaS	S4M52AAS
4	HPE Aruba Networking EdgeConnect GE Orchestrator Extra Large 5-year Subscription (US) SaaS	S4M53AAS
4	HPE Aruba Networking EdgeConnect GE Orchestrator 2Extra Large 1-year Subscription (US) SaaS	S4M54AAS
4	HPE Aruba Networking EdgeConnect GE Orchestrator 2Extra Large 3-year Subscription (US) SaaS	S4M55AAS
4	HPE Aruba Networking EdgeConnect GE Orchestrator 2Extra Large 5-year Subscription (US) SaaS	S4M56AAS
4	HPE Aruba Networking EdgeConnect GE Orchestrator Extra Large Subscription (US) SaaS	S4M57AAS
4	HPE Aruba Networking EdgeConnect GE Orchestrator 2Extra Large Subscription (US) SaaS	S4M58AAS
	Configuration Rules
Rule #	Description
1	IRIS Error: User cannot mix SKUS across subscription tiers within a single EdgeConnect Solution. These SKUS are identified as Tier 1: SD-WAN Foundation
2	IRIS Error: User cannot mix SKUS across subscription tiers within a single EdgeConnect Solution. These SKUS are identified as Tier 2: SD-WAN Advanced
3	IRIS Error: User cannot mix SKUS across subscription tiers within a single EdgeConnect Solution. These SKUS are identified as Tier 3: SD-WAN Advanced-OnPrem
4	For IRIS reference only. No action required for OCX and Clic
6	This Add-on license can be selected in conjunction with either of the following Subscription Tiers: Tier 1: SD-WAN Foundation Tier 2: SD-WAN Advanced
Notes:	These SKUs must be presented in the IRIS Catalog in the following Directory: HPE Aruba Networking > SASE > EdgeConnect SD-WAN Subscriptions

Technical Specifications

HPE Aruba Networking EdgeConnect SD-WAN Gateways
	EdgeConnect 10104	EdgeConnect XS	EdgeConnect 10106
Model	EC-10104	EC-XS	EC-10106
Typical Deployment	Small branch/home office	Small branch	Small branch
Typical WAN Bandwidth3	2-500 Mbps	2-1000 Mbps	2-1000 Mbps
Simultaneous Connections	256,000	256,000	256,000
Recommended WAN Optimization up to	200 Mbps	250 Mbps	250 Mbps
IDS/IPS	Yes	Yes	Yes
Redundancy/FRUs⁴	No	No	No
Datapath Interfaces⁵	4 x RJ45 10/100/1000	4 x RJ45 10/100/1000	2x 1G/10G SFP+ 2x Combo (SFP/1GbE) 2xGbE (PoE)
	EdgeConnect S-P	EdgeConnect M-H	EdgeConnect L-H
Model	EC-S-P	EC-M-H¹	EC-L-H¹
Typical Deployment	Large branch	Head office/DC large hub	Data center large hub
Typical WAN Bandwidth³	10-3000 Mbps	50-5000 Mbps	2-10 Gbps
Simultaneous Connections	256,000	2,000,000	2,000,000
Recommended WAN Optimization up to	500 Mbps	1 Gbps	1 Gbps
IDS/IPS	Yes	Yes	Yes
Redundancy/FRUs⁴	SSD and Power (AC or DC)	SSD and Power	SSD and Power
Datapath Interfaces⁵	8 x RJ45 4 x 1/10G Optical	8 x RJ45 4 x 1/10G Optical	6 x 1/10G Optical
	EdgeConnect 10108	EdgeConnect XL-H	EdgeConnect 10150
Model	EC-10108	EC-XL-H¹	EC-10150
Typical Deployment	Medium branch	Data center large hub	Data center large hub
Typical WAN Bandwidth³	2-2000 Mbps	2-10 Gbps	Up to 12 Gbps
Simultaneous Connections	256,000	2,000,000	2,000,000
Recommended WAN Optimization up to	500 Mbps	5 Gbps	8 Gbps
IDS/IPS	Yes	Yes	Yes
Redundancy/FRUs⁴	No	SSD, NVMe, Power	SSD, NVMe, Power
Datapath Interfaces⁵	2x 1G/10G SFP+ 2x Combo (SFP/1GbE) 2xGbE (PoE)	6 x optical interfaces EC-XL-H: 6 x 1/10G/25G EC-XL-H 10G:6 x 1/10G	2x RJ45 10/100/1000, 8x 1/10G SFP+ or 10/25G SFP28

Notes:

– ¹EC XL H and EC XL H 10G comes pre equipped with NVMe for maximum WAN optimization.

– ³WAN Bandwidth assumes bidirectional traffic (symmetric uplink and downlink). For total WAN throughput (Rx+Tx), multiply these numbers by 2.

– ⁴FRU Power Supplies are an additional SKU.

– ⁵EC10106, EC 10108, EC S P, EC M H, EC L H, EC XL H and EC 10150 all support pluggable optics.

HPE Aruba Networking EdgeConnect SD-WAN Gateways Technical Support
Term	Support is included as part of the HPE Aruba Networking EdgeConnect SD-WAN subscription license
Web-based support portal	Unlimited access 24 / 7 / 365 includes software downloads, technical documentation, and online knowledge base
Software Updates	Major and minor features releases; maintenance releases
Technical Support	24 / 7 / 365 phone / e-mail / web (Global Technical Assistance Centers — TAC)
Response Time	30 minutes for high priority (P1) — critical

Flexible Deployment Models

− HPE Aruba Networking EdgeConnect SD-WAN Virtual (EC-V)— Download and install EdgeConnect SD-WAN from anywhere in the world. The software runs on all common hypervisors, including VMware ESXi™, Microsoft Hyper-V, Citrix XenServer, and KVM. HPE Aruba Networking customers who have an IaaS presence in AWS, Microsoft Azure, Oracle Cloud Infrastructure or Google Cloud Platform can deploy EdgeConnect SD-WAN within their hosted cloud environment.
− EdgeConnect SD-WAN Physical (EC) — For enterprises that are not virtualized in the branch, choose one of the EdgeConnect SD-WAN hardware appliance models for plug-and-play deployment.

HPE EdgeConnect SD-WAN tiered subscription licensing

HPE Aruba Networking EdgeConnect SD-WAN platform is available as a software subscription. Two subscription tiers are available, Foundation and Advanced, in either single or multi-year increments (1, 3, 5, and 7 years) and at multiple bandwidth tiers. Subscription tier mixing is not supported, i.e., every EdgeConnect SD-WAN appliance in an SD-WAN fabric must run either Foundation or Advanced licenses.

Foundation License Tier: The Foundation license tier includes essential SD-WAN features and all of the advanced NGFW features. The Foundation license is available in 100 Mbps, 1 Gbps, and unlimited bandwidth tiers. Moreover, the Foundation license supports Hub-and-Spoke topology (4 Hubs/ region), a limited number of VRFs, and includes a cloud-hosted SD-WAN Orchestrator subscription (Foundation OaaS). The Foundation license supports three BIOS, all essential QoS parameters and fundamental data retention capabilities, making it ideal for customers who require a simple, easy-to-manage SD-WAN with comprehensive NGFW features.

Advanced License Tier: Advanced license tier includes all EdgeConnect SD-WAN advanced SD-WAN features and all of the advanced NGFW features. The Advanced license is available in 20 Mbps, 50 Mbps, 100 Mbps, 200 Mbps, 500 Mbps, 1 Gbps, 2 Gbps, and unlimited bandwidth tiers. Moreover, the Advanced license supports unlimited topology, 64 VRFs and includes a cloud-hosted SD-WAN Orchestrator subscription (Advanced OaaS). The Advanced OaaS appeals to enterprises that prefer a zero-CapEx SD-WAN management solution without the capital investment and the associated complexity of managing on-premises infrastructure. The Advanced license supports up to seven BIOS, advanced QoS parameters, and enhanced data retention capabilities making it ideal for customers who do not want to compromise on the SD-WAN features and want comprehensive NGFW features.

Enterprises that require on-premises deployment of SD-WAN Orchestrator can purchase a separate SKU set with the Advanced on-prem license tier. The on-prem edition of the Advanced license offers the same rich capabilities as the Advanced license but enables enterprises to manage their own instance of SD-WAN Orchestrator. It is well suited for customers that require a private installation of their SD-WAN management software.

Optional HPE Aruba Networking EdgeConnect SD-WAN licenses*

Dynamic Threat Defense: This is an optional security license that adds IDS/IPS, Adaptive DDoS , Smart SYN cookie and Secure web service (web classification and reputation, IP reputation) to the EdgeConnect SD-WAN to create a single, secure SD-WAN platform.

WAN Optimization: HPE Aruba Networking EdgeConnect WAN Optimization is an optional WAN optimization performance pack that may be ordered and deployed flexibly to sites that require application acceleration. WAN Optimization is offered in 100 Mbps or 10 Gbps blocks.

Moreover, large global enterprises with multiple business units (BU) or subsidiaries that have a requirement to support different regional QoS or security policies can optionally deploy HPE Aruba Networking EdgeConnect SD-WAN Orchestrator Global Enterprise (not applicable for Advanced on-prem license)

Notes: *The content of an optional license may vary depending on the HPE Aruba Networking EdgeConnect SD-WAN Operating System version.

HPE Aruba Networking EdgeConnect 10104 SD-WAN Gateway
Capacity
WAN bandwidth capacity (all features + encryption)	Up to 500 Mbps (bidirectional)
Simultaneous connections	256,000
Recommended WAN optimization up to	200 Mbps
Resiliency
Drives	Single
Power supplies	Single
Network	4 ports supporting any combination of WAN and LAN including support for up to 64 802.1q VLANs. WAN link redundancy supported via business intent overlays with multiple link bonding options. LAN-side protection includes VRRP and BGP. Multiple IPSLA options included.
Routing	BGP and OSPF support
RAM	ECC memory
MTBF	63 years
Security
Disk encryption	128-bit AES
Network encryption	IPsec (256-bit AES)
Connectivity
LAN/WAN ethernet	4 x 10/100/1000 LAN/WAN (2 LAN/2 WAN) as per IEEE 802.3i, 802.3u, 802.3ab, 802.1Q
Management	Console port (RJ45, micro USB)
USB	1 x USB 3.0
Deployment
In-line router mode	In-line as next-hop gateway at site perimeter, connected to a broadband internet modem for zero touch provisioning, with WAN hardening or zone-based stateful firewall
Power
AC requirement	Input: 100 - 240V AC / 50-60Hz Power consumption: 48W / 163.78 BTU
Power supplies	Single adapter
Dimensions
Height	1.50 in (38.2 mm)
Width	7.81 in (198.5 mm)
Depth	6.03 in (153.1 mm)
Weight	2.52 lbs (1.14 kg)
Regulatory
EMC	47 CFR FCC Part15B/ICES-003 Issue 7 Class B, EN 55032 Class B, EN55035, IEC/N61000-3-2/3-3, VCCI Class B, CISPR 32 Class B, CISPR 35, EN 300 386 V2.1.1
Safety	IEC/EN 60950-1:2005 w/all known National Deviations, IEC/EN 62368-1(2nd and 3rd Ed) w/all known National Deviations, UL 62368-1 3rd Ed, CSA C22.2 No. 62368-1:19 3rd Ed
Environmental
Temperature (operating)	0°C to 40°C (32° to 104°F)
Temperature (storage)	-40°C to 70°C (-40° to 158°F)
Humidity (operating)	10 to 90 percent relative humidity, non-condensing
Humidity (storage)	10 to 95 percent relative humidity, non-condensing
Altitude (operating)	Up to 10,000 ft (3,048 m)
Altitude (storage)	Up to 40,000 ft (12,192 m)
Management
CLI	Full-featured CLI available over console port or SSH
UI/HTTPS	HPE Aruba Networking EdgeConnect Operating System (ECOS) includes a Web User Interface and REST API which manages an individual appliance. HPE Aruba Networking EdgeConnect SD-WAN Orchestrator provides centralized configuration, monitoring, and management of multiple EdgeConnect SD-WAN gateways. It also provides REST API and streaming notification service.
SNMP	SNMPv3
Secure access	SSH and HTTPS
Logging	Secure syslog with configurable levels. Email alerts
Authentication	Local database, RADIUS, TACACS+
Statistics	Graphing and monitoring, real-time and historical. NetFlow and IPFIX supported.

HPE Aruba Networking EdgeConnect 10106 SD-WAN Gateway
Capacity
WAN bandwidth	2 to 1000 Mbps (bidirectional)
Simultaneous connections	256,000
Hardware
Drives	Single 120 GB SSD
Power supplies	Single adapter
Network	Six ports supporting any combination of WAN and LAN including support for up to 64 802.1q VLANs. WAN link redundancy supported through business intent overlays with multiple link bonding options. LAN-side protection includes VRRP and BGP. Multiple IPSLA options included.
Routing	BGP and OSPF support
RAM	16 GB ECC memory
MTBF	125,075 hours
Security
Disk encryption	AES-128
Network encryption	IPSec (AES-256)
Connectivity
LAN/WAN ethernet	2x 10M/100M/1000M RJ45 ports with PoE Support 2x combo ports (RJ45 or SFP) 2x 1G/10G SFP+* ports
Management	2x 10M/100M/1000M RJ45 ports; console port (1x RJ45 and 1x USB-C)
USB	1x USB 3.0 Type A
WAN optimization
Recommended WAN optimization up to	250 Mbps
Deployment
In-line router mode	In-line as next-hop gateway at site perimeter, connected to the internet for Zero Touch Provisioning, with WAN hardening or zone-based stateful firewall
Power
AC requirement	Input: 100–240 VAC / 50–60 Hz Power consumption: 165W / 563 BTU
Power supply	Single adapter
Dimensions
Height	1.72 inch (43.7 mm)
Width	11.61 inch (294.8 mm)
Depth	7.92 inch (201.05 mm)
Weight	5.08 lbs (2.305 kg)
Regulatory
EMC	47 CFR FCC Part15B/ICES-003 Issue 7 Class B, EN 55032 Class B, EN55035, IEC/N61000-3-2/3-3, VCCI Class B, CISPR 32 Class B, CISPR 35, EN 300 386 V2.2.1
Safety	IEC/EN 60950-1:2005 IEC/EN 62368-1(2nd and 3rd Ed) UL 62368-1 3rd Ed, CSA C22.2 No. 62368-1:19 3rd Ed.
Environmental
Temperature (operating)	0°C to 40°C (32°F to 104°F)
Temperature (storage)	–40°C to 70°C (–40°F to 158°F)
Humidity (operating)	10% to 90% relative humidity, noncondensing
Humidity (storage)	10% to 95% relative humidity, noncondensing
Management
CLI	Full-featured CLI available over console port or SSH
UI/HTTPS	HPE Aruba Networking EdgeConnect Operating System (ECOS) includes a web user interface and REST API which manages an individual appliance. HPE Aruba Networking EdgeConnect SD-WAN Orchestrator provides centralized configuration, monitoring, and management of multiple HPE Aruba Networking EdgeConnect SD-WAN Gateway. It also provides REST API and streaming notification service.
SNMP	SNMPv3
Secure access	SSH and HTTPS
Logging	Secure syslog with configurable levels; Email alerts
Authentication	Local database, RADIUS, TACACS+
Statistics	Graphing and monitoring, real time and historical; NetFlow and IPFIX supported.

HPE Aruba Networking EdgeConnect 10108 SD-WAN Gateway
Capacity
WAN bandwidth	2 to 2000 Mbps (bidirectional)
Simultaneous connections	256,000
Recommended WAN optimization up to	500 Mbps
Resiliency
Drives	Single 120GB SSD
Network	6 ports supporting any combination of WAN and LAN including support for up to 128 802.1q VLANs. WAN link redundancy supported via business intent overlays with multiple link bonding options. LAN-side protection includes VRRP and BGP. Multiple IPSLA options included.
Routing	BGP and OSPF support
RAM	32GB ECC memory
MTBF	125,452 hours
Security
Disk encryption	AES-128
Network encryption	IPsec (AES-256)
Connectivity
LAN/WAN ethernet	2 x 10M/100M/1000M RJ45 ports with POE Support 2 x Combo ports (RJ45 or SFP) 2 x 1G/10G SFP+ Ports
Management	2 x 10M/100M/1000M RJ45 Ports; Console port (1 x RJ45 and 1 x USB-C)
USB	1 x USB 3.0 Type A
Deployment
In-line router mode	In-line as next-hop gateway at site perimeter, connected to the internet for Zero Touch Provisioning, with WAN hardening or zone-based stateful firewall
Power
AC requirement	100-240VAC / 50-60Hz / 165W / 563.00 BTU
Power supply	Single External Power Adapter
Dimensions
Height	1.72 inch (43.7 mm)
Width	11.61 inch (294.8 mm)
Depth	7.92 inch (201.05 mm)
Weight	5.08 lbs (2.305 kg)
Regulatory
EMC	47 CFR FCC Part15B/ICES-003 Issue 7 Class B, EN 55032 Class B, EN55035, IEC/N61000-3-2/3-3, VCCI Class B, CISPR 32 Class B, CISPR 35, EN 300 386 V2.2.1
Safety	IEC/EN 60950-1:2005 IEC/EN 62368-1 (2nd and 3rd Ed) UL 62368-1 3rd Ed, CSA C22.2 No. 62368-1:19 3rd Ed.
Environmental
Temperature (operating)	0° C to 40° C (32° to 104° F)
Temperature (storage)	-40° C to 70° C (-40° to 158° F)
Humidity (operating)	10 to 90 percent relative humidity, non-condensing
Humidity (storage)	10 to 95 percent relative humidity, non-condensing
Management
CLI	Full-featured CLI available over console port or SSH
UI/HTTPS	HPE Aruba Networking EdgeConnect Operating System (ECOS) includes a Web User Interface and REST API which manages an individual appliance. HPE Aruba Networking EdgeConnect SD-WAN Orchestrator provides centralized configuration, monitoring, and management of multiple EdgeConnect SD-WAN gateways. It also provides REST API and streaming notification service.
SNMP	SNMPv3
Secure access	SSH and HTTPS. Supports PKI as per RFC 5280, RFC 6960 and RFC 7030
Logging	Secure syslog with configurable levels.
Authentication	Local database, RADIUS, TACACS+
Statistics	Graphing and monitoring, real-time and historical. NetFlow and IPFIX supported.

HPE Aruba Networking EdgeConnect SD‑WAN XS
Capacity
WAN bandwidth capacity (all features + encryption)	2 to 1000 Mbps (bidirectional)
Simultaneous connections	256,000
Recommended WAN optimization up to	250 Mbps
Resiliency
Drives	Single
Power supplies	Single
Network	WAN link redundancy supported via business intent overlays with multiple link bonding options. LAN-side protection includes VRRP and BGP. Multiple IPSLA options included.
RAM	ECC memory
MTBF	162,171 hours (18.5 years)
Security
Disk encryption	128-bit AES
Network encryption	IPsec (256-bit AES)
Connectivity
LAN/WAN Ethernet	4 x 10/100/1000 LAN/WAN (2 LAN/ 2 WAN) as per IEEE 802.3i, 802.3u, 802.3ab, 802.1Q
Management	2 x 10/100/1000; console port
Deployment
In-line router mode	In-line as next-hop gateway between L2 switch and WAN router or broadband internet modem for zero touch provisioning, with WAN hardening or zone-based stateful firewall
Power
Requirement	Input: 100-240 V AC / 50-60 Hz Max power consumption: 34 W / 116 BTU
Power supplies	Single adapter
Dimensions
Height	1.7 in (44 mm)
Width	9.4 in (240 mm)
Depth	7.9 in (200 mm)
Weight	3.5 lbs (1.6 kg)
Regulatory
EMC	FCC Part 15 Class B, EN 55022 Class B, VCCI Class B EN 61000-3-2/3-3, EN 55024
Safety	UL/cUL/60950, EN 60950
Environmental
Temperature (operating)	0°C to 40°C (32° to 104°F)
Temperature (storage)	-40°C to 65°C (-40° to 149°F)
Humidity (operating)	8–90% relative humidity, non-condensing
Humidity (storage)	8–95% relative humidity, non-condensing
Altitude (operating)	Up to 10,000 ft (3,048 m)
Altitude (storage)	Up to 40,000 ft (12,192 m)
Management
CLI	Full-featured CLI available over console port or SSH
UI/HTTPS	HPE Aruba Networking EdgeConnect Operating System (ECOS) includes a web user interface and REST API which manages an individual appliance. HPE Aruba Networking EdgeConnect SD‑WAN Orchestrator provides centralized configuration, monitoring, and management of multiple EdgeConnect SD‑WAN gateways. It also provides REST API and streaming notification service.
SNMP	SNMPv3
Secure access	SSH and HTTPS, Supports PKI as per RFC 5280, RFC 6960 and RFC 7030
Logging	Secure syslog with configurable levels. Email alerts.
Authentication	Local database, RADIUS, TACACS+
Statistics	Graphing and monitoring, real-time and historical. NetFlow and IPFIX supported.

HPE Aruba Networking EdgeConnect SD-WAN S-P
Capacity
WAN bandwidth capacity (all features + encryption)	10 to 3000 Mbps
Simultaneous connections	256,000
Recommended WAN optimization up to	500 Mbps
Resiliency
Drives	SSD — dual
Power supplies	Single and dual redundant options. Both AC and DC.
Network	WAN link redundancy supported via business intent overlays with multiple link bonding options. LAN-side protection includes VRRP and BGP. Multiple IPSLA options included.
RAM	ECC memory
MTBF	177,726 hours (20 years)
Security
Disk encryption	128-bit AES
Network encryption	IPsec (256-bit AES)
Connectivity
LAN/WAN Ethernet	8 x 10/100/1000 (4 LAN/4 WAN) as per IEEE 802.3i, 802.3u, 802.3ab, 802.1Q 4 x 1/10 Gbps Ethernet SFP+ fiber data ports (2 LAN/2 WAN) as per IEEE 802.3z, 802.3ae, 802.1Q
Management	2 x 10/100/1000; console port
Deployment
In-line router mode	In-line as next-hop gateway between L2 switch and WAN router or broadband internet modem for zero touch provisioning, with WAN hardening or zone-based stateful firewall
Power
AC requirement	100–240VAC/47–63 Hz/111W
AC power supplies	Single or dual
DC requirement	-48V/103W
DC power supplies	Single or dual
Dimensions
Height	1.7 in (44 mm)
Width	17.2 in (438 mm)
Depth	16.5 in (420 mm)
Weight	18.14 lb (8.23 kg)
Regulatory
EMC	FCC Part 15 Class A, EN 55024/55032/55035 Class A, VCCI Class A, EN 61000-3-2/3-3
Safety	UL/CB 60950-1/62368-1, EN 60950/62368
Environmental
Temperature (operating)	0°C to 40°C (32° to 104°F)
Temperature (storage)	-40°C to 65°C (-40° to 149°F)
Humidity (operating)	8–90% relative humidity, non-condensing
Humidity (storage)	8–95% relative humidity, non-condensing
Altitude (operating)	Up to 10,000 ft (3,048 m)
Management
CLI	Full-featured CLI available over console port or SSH
UI/HTTPS	HPE Aruba Networking EdgeConnect Operating System (ECOS) includes a web user interface and REST API which manages an individual appliance. HPE Aruba Networking EdgeConnect WAN Orchestrator provides centralized configuration, monitoring, and management of multiple EdgeConnect SD‑WAN gateways. It also provides REST API and streaming notification service.
SNMP	SNMPv3
Secure access	SSH and HTTPS, supports PKI as per RFC 5280, RFC 6960 and RFC 7030
Logging	Secure syslog with configurable levels. Email alerts.
Authentication	Local database, RADIUS, TACACS+
Statistics	Graphing and monitoring, real-time and historical. NetFlow and IPFIX supported.

HPE Aruba Networking EC-M-H SD-WAN Gateway
Capacity
WAN bandwidth capacity (all features + encryption)	50 Mbps to 5 Gbps (bidirectional)
Simultaneous connections	2,000,000
Recommended WAN optimization up to	1 Gbps
Resiliency
Power supplies	Dual redundant
Network	WAN link redundancy supported via business intent overlays with multiple link bonding options. LAN-side protection includes VRRP and BGP. Multiple IPSLA options included.
Storage	960 GB SSD
Routing	BGP and OSPF supported
MTBF	15.0 years
Security
Disk encryption	128-bit AES
Network encryption (data plane)	IPsec (256-bit AES)
Network encryption (management plane)	TLS 1.2
Connectivity
LAN/WAN ethernet	8 x 10/100/1000 (4 LAN/4 WAN) as per IEEE 802.3i, 802.3u, 802.3ab, 802.1Q and 4 x 1/10 Gbps SFP+ optical interfaces that can support pluggable optics
Management	2 x 10/100/1000; Console port
Power
AC requirement	153W/522 BTU
Power adapter	1+1 redundant
Dimensions
Height	1.69 in (42.9 mm)/1U
Width	17.2 in (436.9 mm)
Depth	16.5 in (419.1 mm)
Weight	18.1 lb (8.2 kg)
Regulatory
EMC	FCC Part 15 Class A, EN 55024/55032/55035 Class A, VCCI Class A, EN 61000-3-2/3-3
Safety	UL/CB 60950-1/62368-1, EN 60950/62368
Environmental
Temperature (operating)	0°C to 40°C (32° to 104°F)
Temperature (storage)	-40°C to 65°C (-40° to 149°F)
Humidity (operating)	10–80% relative humidity, non-condensing
Humidity (storage)	8–95% relative humidity, non-condensing
Altitude (operating)	Up to 10,000 ft (3,048 m)
Altitude (storage)	Up to 40,000 ft (12,192 m)
Management
CLI	Full-featured CLI available over console port or SSH
GUI	HPE Aruba Networking EdgeConnect SD‑WAN Operating System (ECOS) includes a web user interface which manages an individual appliance. HPE Aruba Networking WAN Orchestrator provides centralized configuration, monitoring, and management of multiple HPE Aruba Networking EdgeConnect SD‑WAN appliances.
API	REST API at appliance level. HPE Aruba Networking WAN Orchestrator provides REST API for systems integration.
SNMP	SNMPv2c, SNMPv3
Secure access	SSH and HTTPS (Web UI), supports PKI as per RFC 5280, RFC 6960 and RFC 7030
Logging	Secure syslog with configurable levels
Authentication	Local database, RADIUS, TACACS+
Statistics	Graphing and monitoring, real-time and historical. NetFlow and IPFIX supported.

HPE Aruba Networking EC‑L‑H SD‑WAN Gateway
Capacity
WAN bandwidth capacity (all features + encryption)	2 to 10 Gbps (bidirectional)
Simultaneous connections	2,000,000
Recommended WAN optimization up to	1 Gbps
Resiliency
Power supplies	Dual redundant
Network	WAN link redundancy supported via business intent overlays with multiple link bonding options. LAN-side protection includes VRRP and BGP. Multiple IPSLA options included.
Storage	960 GB SSD
Routing	BGP and OSPF supported
MTBF	Greater than 10 years
Security
Disk encryption	128-bit AES
Network encryption (data plane)	IPsec (256-bit AES)
Network encryption (management plane)	TLS 1.2
Connectivity
LAN/WAN Ethernet	6 x 1/10 Gbps SFP+ transceiver cages as per IEEE 802.3z, 802.3ae, 802.1Q
Management	2 x 10/100/1000; Console port
Power
AC requirement	404W/1379 BTU
Power adapter	1+1 redundant
Dimensions
Height	1.69 in (42.9 mm)/1U
Width	17.11 in (434.6 mm)
Depth	27.83 in (706.9 mm)
Weight	32 lb (14.6 kg)
Regulatory
EMC	FCC Part 15 Class A, CISPR 22/23, EN 55032 Class A, EN 55024, VCCI Class A, IEC 61000-3-2/3-3, EN 61000-3-2/3-3
Safety	UL 60950-1, IEC 60950-1, IEC 62368
Environmental
Temperature (operating)	0°C to 40°C (32° to 104°F)
Temperature (storage)	-40°C to 65°C (-40° to 149°F)
Humidity (operating)	10–80% relative humidity, non-condensing
Humidity (storage)	8–95% relative humidity, non-condensing
Altitude (operating)	Up to 10,000 ft (3,048 m)
Altitude (storage)	Up to 40,000 ft (12,192 m)
Management
CLI	Full-featured CLI available over console port or SSH
GUI	HPE Aruba Networking EdgeConnect SD‑WAN Operating System (ECOS) includes a web user interface which manages an individual appliance. HPE Aruba Networking WAN Orchestrator provides centralized configuration, monitoring, and management of multiple HPE Aruba Networking EdgeConnect SD‑WAN appliances.
API	REST API at appliance level. HPE Aruba Networking WAN Orchestrator provides REST API for systems integration.
SNMP	SNMPv2c, SNMPv3
Secure access	SSH and HTTPS (Web UI), supports PKI as per RFC 5280, RFC 6960 and RFC 7030
Logging	Secure syslog with configurable levels
Authentication	Local database, RADIUS, TACACS+
Statistics	Graphing and monitoring, real-time and historical. NetFlow and IPFIX supported.

HPE Aruba Networking EC‑XL‑H SD‑WAN Gateway
Capacity
WAN bandwidth capacity (all features + encryption)	2 to 10 Gbps (bidirectional)
Simultaneous connections	2,000,000
Recommended WAN optimization up to	5 Gbps
Resiliency
Power supplies	Dual redundant
Network	6 ports supporting any combination of WAN and LAN including support for up to 64 802.1q VLANs. WAN link redundancy supported via business intent overlays with multiple link bonding options. LAN‑side protection includes VRRP and BGP. Multiple IPSLA options included.
Storage	ECOS: 960 GB SSD, Network Memory (-NM): 3.2 TB NVMe
Routing	BGP and OSPF supported
MTBF	Greater than 10 years
Security
Disk encryption	128-bit AES
Network encryption (data plane)	IPsec (256-bit AES)
Network encryption (management plane)	TLS 1.2
Connectivity
LAN/WAN ethernet	SKU JZ881A–6 x 1/10 Gbps SFP+ or 10/25 Gbps SFP28 transceiver cages as per IEEE 802.3z, 802.3ae, 802.1Q, 802.3by, 802.3cc SKU S0B67A–6 x 1/10 Gbps SFP+ transceiver cages as per IEEE 802.3z, 802.3ae, 802.1Q
Management	2 x 10/100/1000; Console port
Power
AC requirement	SKU JZ881A–435W/1484 BTU \| SKU S0B67A–413W/1409 BTU
Power adapter	1+1 Redundant, AC
Dimensions
Height	1.69 in (42.9 mm)/1U
Width	17.11 in (434.6 mm)
Depth	27.83 in (706.9 mm)
Weight	33.5 lbs (15.2 kg)
Regulatory
EMC	FCC Part 15 Class A, CISPR 22/23, EN 55032 Class A, EN 55024, VCCI Class A, IEC 61000-3-2/3-3, EN 61000-3-2/3-3
Safety	UL 60950-1, IEC 60950-1, IEC 62368
Environmental
Temperature (operating)	0°C to 40°C (32° to 104°F)
Temperature (storage)	-40°C to 65°C (-40° to 149°F)
Humidity (operating)	10–80% relative humidity, non-condensing
Humidity (storage)	8–95% relative humidity, non-condensing
Altitude (operating)	Up to 10,000 ft (3,048 m)
Altitude (storage)	Up to 40,000 ft (12,192 m)
Management
CLI	Full-featured CLI available over console port or SSH
GUI	HPE Aruba Networking EdgeConnect SD‑WAN Operating System (ECOS) includes a web user interface which manages an individual appliance. HPE Aruba Networking SD‑WAN Orchestrator provides centralized configuration, monitoring and management of multiple HPE Aruba Networking EdgeConnect SD‑WAN appliances.
API	REST API at appliance level. HPE Aruba Networking SD-WAN Orchestrator provides REST API for systems integration.
SNMP	SNMPv2c, SNMPv3
Secure access	SSH and HTTPS (WebUI), supports PKI as per RFC 5280, RFC 6960 and RFC 7030
Logging	Secure syslog with configurable levels
Authentication	Local database, RADIUS, TACACS+
Statistics	Graphing and monitoring, real-time and historical. NetFlow and IPFIX supported.

HPE Aruba Networking EdgeConnect 10150 SD-WAN Gateway
Capacity
WAN bandwidth capacity (all features + encryption)	Up to 12 Gbps (bidirectional)
Simultaneous connections	2,000,000
Recommended WAN optimization up to	8 Gbps (bidirectional)
Maximum tunnels	10,000
Maximum fabric peers	4096
Resiliency
Storage	System disk: 2x 480 GB NVMe, EC-10010 NM drive kit: 2x 1.6 TB NVMe (optional*)
MTBF (without storage)	300,236 hours
Security
FIPS	Federal Information Processing Standards (FIPS) 140-2, level 1
Common criteria	Collaborative Protection Profile for Network Devices (NDcPP) v2.2e PP-module for VPN gateways version 1.3 PP-module for stateful traffic filter firewalls, version 1.4
CSfC	RFC8784 post-quantum pre-shared keys
Disk encryption	128-bit AES
Network encryption (data plane)	IPSec (256-bit AES)
Network encryption (management plane)	TLS 1.2
Authentication	Strict password enforcement, RADIUS, TACACS+
TPM	TPM 2.0 supported
Connectivity
Data plane Ethernet ports	8x 1/10 Gbps SFP+ or 10/25 Gbps SFP28 transceiver cages as per IEEE 802.3z, 802.3ae, 802.1Q, 802.3by, 802.3cc, 802.3ab, 802.3i 2x 10M/100M/1000M RJ45
Management ports	Management: 2x 10M/100M/1000M RJ45; console port (DB-9)
Network	10 versatile interfaces supporting any combination of WAN and LAN, including support for up to128 802.1q VLANs; WAN link redundancy is supported through business intent overlays with multiple link bonding options. LAN-side protection includes VRRP, OSPF with BFD, and BGP with BFD Multiple IPSLA options supported 802.1 AX Link Aggregation supported.
Routing	Static, VRRP, BGP, and OSPF—Supports up to 60,000 IPv4 prefixes and 30,000 IPv6 prefixes
Power
AC requirement	Input voltage: 100V–240V, 50 Hz–60 Hz 423W / 1443 BTU without network memory drives 456W / 1518 BTU with network memory drives
Power supply	1+1 redundant, 800W AC
Dimensions
Height	1.69 inch (4.28 cm) /1U
Width	17.12 inch (43.46 cm)
Depth	25.57 inch (64.94 cm)
Weight	32.4 lb (14.7 kg)
Regulatory
EMC	47 CFR FCC Part 15B/ICES-003 Issue 7 Class A, EN 55032 Class A, EN55035, IEC/EN 61000-3-2/3-3, VCCI Class A, CISPR 32 Class B, CISPR 35
Safety	IEC/EN 60950-1:2005 IEC/EN 62368-1 (2nd and 3rd Ed) UL 62368-3rd Ed, CSA C22.2 No. 62368-1:19 3rd Ed.
Environmental
Temperature (operating)	0°C to 40°C (32°F to 104°F)
Temperature (storage)	–40°C to 65°C (–40°F to 149°F)
Humidity (operating)	10% to 80% relative humidity, non-condensing
Humidity (storage)	8% to 95% relative humidity, non-condensing
Altitude (operating)	Up to 10,000 ft (3048m)
Altitude (storage)	Up to 40,000 ft (12192m)
Management
CLI	Full-featured CLI available over console port or SSH.
GUI	HPE Aruba Networking EdgeConnect SD-WAN Operating System includes a web user interface (WebUI), which manages an individual appliance. HPE Aruba Networking SD-WAN Orchestrator provides centralized configuration, monitoring, and management of multiple HPE Aruba Networking EdgeConnect SD-WAN Gateways.
API	HPE Aruba Networking EdgeConnect SD-WAN Operating System includes a REST API over HTTPS for individual gateway management, including retrieval of per second network statistics. HPE Aruba Networking SD-WAN Orchestrator provides an aggregated REST API for the entire SD-WAN.
Flow reporting	IPFIX with custom information elements, including the option for data-anonymization
SNMP	SNMPv2c, SNMPv3
Secure access	SSH and HTTPS (WebUI) Supports PKI as per RFC 5280, RFC 6960, and RFC 7030 Authentication with RADIUS and TACACS+
Logging	Secure syslog with configurable levels

Summary of Changes

Date	Version History	Action	Description of Change
06-Oct-2025	Version 17	Added	New As-a-Service SKUs added in Configuration Information section: S4M43AAS, S4M44AAS, S4M45AAS, S4M46AAS, S4M47AAS, S4M48AAS, S4M49AAS, S4M50AAS, S4M51AAS, S4M52AAS, S4M53AAS, S4M54AAS, S4M55AAS, S4M56AAS, S4M57AAS, S4M58AAS.
07-Jul-2025	Version 16	Changed	Addition of EdgeConnect 9.6 features. Information for Microsoft Azure integration was updated in Embrace multi-cloud networking and Information for Dynamic Threat Defense was updated in Optional HPE Aruba Networking EdgeConnect SD-WAN licenses in Standard Features section.
		Added	Properties for EC 10150 added in table, and HPE Aruba Networking EdgeConnect 10150 SD-WAN Gateway table added in Technical Specifications section.
		Removed	Table for EC10105 was deleted in Technical Specifications section.
05-May-2025	Version 15	Changed	Configuration Information and Technical Specifications sections were updated.
03-Mar-2025	Version 14	Changed	Overview, Standard Features, and Technical Specifications sections were updated.
02-Dec-2024	Version 13	Changed	Overview and Configuration Information sections were updated.
07-Oct-2024	Version 12	Changed	Overview, Configuration Information, and Technical Specifications sections were updated.
03-Sep-2024	Version 11	Changed	Configuration Information section was updated.
19-Aug-2024	Version 10	Changed	Configuration Information section was updated.
03-Jun-2024	Version 9	Changed	Configuration Information section was updated.
06-May-2024	Version 8	Changed	Configuration Information section was updated.
05-Feb-2024	Version 7	Changed	Configuration Information section was updated.
22-Jan-2024	Version 6	Changed	Series name was updated.
02-Oct-2023	Version 5	Changed	Configuration Information section was updated.
05-Sep-2023	Version 4	Changed	Standard Features, Configuration Information and Technical Specifications sections were updated.
05-Dec-2022	Version 3	Changed	Technical Specifications section was updated.
03-Oct-2022	Version 2	Changed	Configuration Information and Technical Specifications sections were updated. New EC-XL-H models added.
02-May-2022	Version 1	New	New QuickSpecs

Shape the Future of QuickSpecs - Your Input Matters

© Copyright 2025 Hewlett Packard Enterprise Development LP. The information contained herein is subject to change without notice. The only warranties for Hewlett Packard Enterprise products and services are set forth in the express warranty statements accompanying such products and services. Nothing herein should be construed as constituting an additional warranty. Hewlett Packard Enterprise shall not be liable for technical or editorial errors or omissions contained herein.

To learn more, visit: http://www.hpe.com/networking

a50004289enw, 16893 - Worldwide - V17 - 06-October-2025

GreenLake

GreenLake

Introducing GreenLake Intelligence

Solutions

Our solutions

Products

Our products

Support

Support that keeps everything running.

Company

Our company

QuickSpecs