HPE Aruba Networking SSE – Security Service Edge (SSE) Platform

HPE Aruba Networking SSE / SASE is a cloud-delivered secure access service edge platform that provides zero trust access and edge security for users, devices and applications from anywhere. It combines ZTNA, Secure Web Gateway and Cloud Access Security Broker capabilities to help organisations secure access to SaaS, cloud and private applications with simpler policy control and better visibility.

HPE Aruba Networking SSE – Security Service Edge (SSE) Platform

HPE Aruba Networking SSE / SASE Key Platform Specifications

  • Platform Type: Secure Access Service Edge (SASE)
  • Primary Function: Secure Access & Security Convergence
  • Deployment Model: Cloud-Delivered
  • Management Scope: User, Application & Internet Access
  • Target Environment: Distributed Enterprises
  • Licensing Model: Subscription-Based
Starting from: £410.00 Ex. VAT
Request a free trial
SKU HPE-Aruba-Networking-SSE-/-SASE Categories , Brand:
View all software in this series: SASE

HPE Aruba Networking SSE / SASE Overview

As access expands across remote users, branches, SaaS and private applications, organisations need cloud-delivered controls that enforce policy without adding blind spots or operational friction.

Cloud-Delivered Security Service Edge

HPE Aruba Networking SSE / SASE is a cloud-delivered Security Service Edge platform for securing users, devices and applications across internet, SaaS and private application environments. It supports agent-based and agentless access and is designed for teams moving from appliance-based perimeter controls to a cloud access model.

Applying Zero Trust in Production

The platform uses Zero Trust Network Access to grant controlled access to private applications without broad network exposure. Secure Web Gateway and CASB policies help inspect internet and SaaS usage, while DLP and Digital Experience Monitoring add governance and visibility where access is delivered from the cloud. With EdgeConnect SD-WAN, branch traffic can be service-chained for additional inspection through IPSec tunnels.

Operational Outcomes

This approach helps security and network teams align access control, web protection and application governance in one architecture. It also gives IT teams better insight into user experience when security services are delivered remotely, supporting more consistent operations across distributed environments.

If you are evaluating HPE Aruba Networking SSE / SASE, our team can help you assess where it fits and how to plan deployment across your access and network estate.

HPE Aruba Networking SSE / SASE Key Features​

HPE Aruba Networking SSE is a cloud-delivered SASE platform that provides secure access for users, devices, and applications across internet, SaaS, and private environments through a unified security and visibility model.

Secure Access Across Every Path

Zero Trust Network Access
The platform supports agent-based and agentless ZTNA so remote, branch, and hybrid users can reach approved resources through identity and application-based access controls.

Secure Web Gateway
Its SWG capability helps protect users accessing internet and SaaS applications from anywhere by applying cloud-delivered web security controls.

Cloud Access Security Broker
The CASB function gives compliance teams policy control and visibility into cloud application use and data movement across SaaS environments.

Digital Experience Monitoring
DEM provides operational insight into user experience so IT teams can understand the impact of cloud-delivered access and security services on application performance.

Unified Control For Distributed Networks

Unified Policy Engine
A single policy model applies identity-based security rules across users, devices, servers, and applications to simplify consistent control in distributed environments.

Advanced DLP Protection
Advanced DLP can be included to help control sensitive data movement across cloud application access paths and support policy-driven governance.

Branch Traffic Service Chaining
EdgeConnect traffic can be service-chained to HPE Aruba Networking SSE so branch traffic can receive additional cloud security inspection without rebuilding local security stacks.

Speak to an HPE Aruba Networking Security Specialist

If you are aligning ZTNA, web security, and branch traffic inspection across a distributed environment, our HPE Aruba Networking experts can help map SSE to your access and control requirements.

HPE Aruba Networking SSE / SASE Use Cases

Zero Trust Network Access

Use HPE Aruba Networking SSE to broker controlled access to private applications for managed or unmanaged users, devices and servers without opening broad network access, applying agent-based or agentless ZTNA through a unified policy engine across internet, SaaS and private app environments. Its cloud-delivered architecture and global edge locations make it suitable for scalable Zero Trust access from anywhere.

Secure Web and SaaS Access

Use HPE Aruba Networking SSE when users need secure internet and SaaS access with cloud-delivered inspection and policy enforcement, combining Secure Web Gateway, CASB and ZTNA in a single interface. The platform is designed to route users through more than 500 edge locations for consistent control, visibility and protection without relying on separate on-premises web security tools.

CASB and DLP Control

Use HPE Aruba Networking SSE to govern SaaS usage, protect sensitive data and reduce leakage by combining CASB with Advanced DLP and unified policy controls. This fits workflows where security teams need visibility into cloud application activity, enforcement of data handling rules and central management of user access across SaaS environments.

Digital Experience Monitoring

Use HPE Aruba Networking SSE when security and operations teams need experience monitoring alongside access control, because its DEM capability adds visibility into user and application performance across cloud-delivered access paths. This is well suited to troubleshooting access issues, validating service quality and identifying where connectivity or application experience is affecting productivity.

Unified SASE with EdgeConnect

Use HPE Aruba Networking SSE with EdgeConnect SD-WAN when branch routing, optimisation and security need to be managed together in a unified SASE design. EdgeConnect provides tunnel bonding, multi-cloud networking, WAN optimisation and next-generation firewall features, while SSE supplies agent-based and agentless ZTNA, SWG, CASB and DLP through a shared policy model.

Branch Traffic Service Chaining

Use HPE Aruba Networking SSE to service-chain EdgeConnect branch traffic through IPSec tunnels for additional cloud security inspection, with Orchestrator supporting IPSec tunnel mode to the SSE tenant. This suits branch environments where traffic already handled by SD-WAN needs to be inspected by the SSE platform before reaching internet, SaaS or private resources.

Supported HPE Aruba Networking SSE / SASE Environments & Integrations

Cloud-Delivered SSE Platform

HPE Aruba Networking SSE delivers ZTNA, SWG, CASB and DEM through a single cloud interface with global edge connectivity.

Users, Devices & Servers

Supports agent-based and agentless access for managed or unmanaged users, devices and servers across internet, SaaS and private applications.

Private Application Access with Zero Trust Network Access

Integrates ZTNA for controlled access to private applications without exposing broad network access to remote or hybrid users.

Internet & SaaS Security

Provides cloud-delivered secure web access, SaaS inspection and policy enforcement for users reaching online applications from anywhere.

EdgeConnect SD-WAN Unified SASE

Integrates with EdgeConnect SD-WAN to combine branch routing, tunnel bonding and SSE security in a unified SASE architecture.

IPSec Branch Service Chaining

Supports IPSec tunnel mode from EdgeConnect Orchestrator to send branch traffic to HPE Aruba Networking SSE for cloud security inspection.

HPE Aruba Networking SSE / SASE Licensing Options

User-Based Subscription Licensing

HPE Aruba Networking SSE is licensed as a user-based SaaS subscription, with packages offered by user band, term length and billing option to match the required access population.

Foundation and Foundation SWG

Foundation includes Zero Trust Network Access for private application access, while Foundation SWG adds Secure Web Gateway capability for secured internet and SaaS access.

Foundation Plus and Advanced

Foundation Plus combines ZTNA and SWG in one subscription, and Advanced adds Cloud Access Security Broker and Digital Experience Monitoring for broader cloud access control and visibility.

Advanced Plus

HPE Aruba Networking SSE Advanced Plus extends the Advanced package with Advanced DLP, Cloud Firewall/FWaaS and unlimited Local Edge Connector for more complete security coverage.

Separately Licensed Add-Ons

HPE Aruba Networking SSE may require separate licensing for the Sandbox Package and for Cloud Managed Connector or Local Edge Connector options where connector-based private access is needed.

Licence Review & Optimisation

Our team can help assess user bands, term length, billing option, edition selection, add-on requirements and HPE Aruba Networking SASE alignment with EdgeConnect SD-WAN.

HPE Aruba Networking SSE / SASE Implementation and Support

Solution Design & Planning

We help assess how HPE Aruba Networking SSE should support zero trust access, secure web use and cloud application protection across your users, devices and private resources, so the deployment approach matches operational and security priorities.

Deployment & Configuration

Our team can assist with HPE Aruba Networking SSE setup, policy configuration and access enablement so your security teams can define practical controls for user, application and web access in a structured way.

Integration with Existing Environments

We support integration of HPE Aruba Networking SSE with EdgeConnect SD-WAN, Microsoft Entra ID, Active Directory, SaaS applications and private application environments to align cloud-delivered access controls with your existing estate.

User Adoption & Operational Readiness

We can help prepare administrators and operational teams for HPE Aruba Networking SSE by agreeing access processes, handover steps and day-to-day responsibilities so the service is managed confidently after go-live.

Ongoing Support & Lifecycle Management

Our team can assist with ongoing support for HPE Aruba Networking SSE, including licence alignment, subscription review, renewal planning and operational guidance to help keep the service aligned to changing requirements over time.

Commercial Optimisation & Support for HPE Aruba Networking SSE / SASE

Subscription & Licence Reviews

We help review HPE Aruba Networking SSE user-based subscriptions against current access needs, checking whether Foundation, Foundation Plus, Advanced or Advanced Plus still matches the mix of ZTNA, SWG, CASB, DEM and add-on requirements.

Commercial Portfolio Alignment

Our team can assess how HPE Aruba Networking SSE sits within your wider HPE estate, helping align subscription structures, user bands, term lengths and optional connectors with broader commercial visibility and platform planning.

Commercial Optimisation

Where relevant, we can review subscription tiers, 1/3/5-year terms and add-on packages such as sandbox or connector options to help align investment in HPE Aruba Networking SSE with growth, security priorities and budget control.

Renewal Planning & Lifecycle Management

We support proactive renewal planning by reviewing changing user counts, feature usage and service needs, helping keep HPE Aruba Networking SSE aligned as your access model and security requirements evolve over time.

Adoption & Value Realisation

Long-term value depends on adoption and ongoing optimisation, and our team can help through usage review, policy alignment, capability take-up and lifecycle guidance so HPE Aruba Networking SSE continues to support secure access objectives.

Related solutions for HPE Aruba Networking SSE / SASE

The software and technologies listed here support different requirements and are often used together as part of a wider IT stack.

As an official partner to vendors including Cisco, Juniper, HPE and Fortinet, we can help confirm which software or combination provides the capabilities your team needs, while avoiding under- or over-licensing.

You may also like…

Not sure which software or licensing tier you need?

Speak to our team for help matching the right solution and licence level to your requirements.

Speak to a specialist

Need a clearer view of your software costs?

We can review your current setup, licensing and renewal cycle to check whether your software is still doing what you need, where costs can be reduced, and where administration can be simplified.
Speak to a specialist
Can’t find what you’re looking for? We have more products available - just reach out to us directly! Found a better price elsewhere? Let us know - we’re happy to discuss price matching.