Arista Networks has introduced its AI-enhanced Edge Threat Management (ETM) for VeloCloud SD-WAN, aimed at enhancing security protocols at enterprise branch offices through an integrated zero trust framework. This initiative allows businesses to streamline operations by consolidating multiple devices into a unified, secure SD-WAN edge platform.
The integration of ETM with VeloCloud SD-WAN offers perimeter protection at the WAN edge. This software upgrade facilitates a harmonious blend of zero trust security measures with SD-WAN connectivity. It supports a unified approach by employing a common operating system, enforcement engine, and security policies—all managed through a single interface within the VeloCloud Orchestrator.
Advanced Threat Prevention Features
Key components of the ETM include advanced firewall capabilities, threat prevention, zone-based segmentation, Geo-IP filtering, DNS filtering, and AI-powered policy insights. These features are implemented directly at the branch WAN edge, improving policy control and bolstering network security. Till Bockenheimer from T&A SYSTEME GmbH observed, “The new ETM functionality allows us to offer requested security services on top of the existing SD-WAN infrastructure managed within the same GUI, eliminating the need for separate devices at small branches.”
The integration of ETM with VeloCloud SD-WAN offers perimeter protection at the WAN edge
Edward Fox III, MetTel's Chief Technology Officer, emphasized the need for smarter, autonomous network edges, especially as businesses transition from reactive to predictive AI-driven operations. Arista's ETM leverages its Autonomous Virtual Assist (AVAⓇ) to enhance policy intelligence. Utilizing features like 'Policy Explainer' and 'Traffic Simulation', Ask AVA simplifies complex security policies, aiding administrators in understanding and mitigating potential errors swiftly.
Enhancements to Virtual Edge Platforms
Developed collaboratively by Arista and VeloCloud teams, the ETM showcases integrated zero trust security as part of the celebrations marking the anniversary of VeloCloud's acquisition by Arista. John McCool, Senior Vice President at Arista Networks, highlighted, “Customers can now simplify and unify the branch, extending enterprise-grade zero trust security to the branch office WAN edge.”
The ETM solution underlines Arista's commitment to providing comprehensive, secure networking solutions that cover the entire spectrum from client operations to cloud management, enhancing simplicity and security within enterprise networks.
Availability
The Edge Threat Management solution for VeloCloud SD-WAN is projected to be generally available by the fourth quarter of 2026. It will support all existing VeloCloud hardware and virtual edge platforms.
Arista Networks, a pioneer in networking for cloud and artificial intelligence (AI) fabrics, announces the launch of its new AI-driven Edge Threat Management (ETM) for VeloCloud SD-WAN, delivering integrated zero trust security for enterprise branch offices. Customers can leverage this integration to simplify the branch, collapsing multiple disparate boxes into a single unified secure SD-WAN edge platform.
Integrated ETM provides perimeter protection at the WAN edge as an ideal software upgrade option to VeloCloud SD-WAN, enabling customers to unify zero trust branch office security with SD-WAN connectivity in a single platform. This platform helps simplify the branch with a common operating system, a uniform enforcement engine, and common end-to-end security policies, all with cognitive management via a single pane of glass in the VeloCloud Orchestrator.
AI-powered policy insights
Key features include advanced firewalling and threat prevention capabilities, zone-based segmentation, Geo-IP filtering, DNS filtering, and AI-powered policy insights, all delivered locally at the branch WAN edge. This unified approach provides fine-grained policy control and strengthens the security posture for branch networks.
“The new ETM functionality allows us to offer requested security services on top of the existing SD-WAN infrastructure managed within the same GUI. This eliminates the need to deploy a separate firewall box managed from a separate GUI, especially for small branches,” said Till Bockenheimer from T&A SYSTEME GmbH, a German MSP managing 7500+ sites in 98 countries for 10+ years within VeloCloud SD-WAN for its customers.
Complex security policies
"The network edge must evolve to be smarter and more autonomous as our clients expand their AI-driven operations from reactive troubleshooting to predictive management," states Edward Fox III, Chief Technology Officer at MetTel.
The new Edge Threat Management solution leverages Arista AVAⓇ (Autonomous Virtual Assist) for AI-driven policy intelligence. Features like 'Policy Explainer' and 'Traffic Simulation' use Ask AVA to translate complex security policies into simple language. This helps security administrators reduce errors and quickly understand the impact and outcomes of security policies, especially in scenarios where policies may be contributed by multiple administrators.
Virtual edge platforms
“The new zero trust integrated security with ETM, developed organically by Arista, showcases the power of the combined Arista and VeloCloud teams on the anniversary of the VeloCloud acquisition. Customers can now simplify and unify the branch, extending enterprise-grade zero trust security to the branch office WAN edge,” said John McCool, Senior Vice President at Arista Networks.
The introduction of Edge Threat Management in VeloCloud SD-WAN edge platforms underscores Arista’s commitment to providing end-to-end secure networking infrastructure from client to cloud, making the enterprise network simpler, more secure, and ready for AI-driven operations.
Availability
- ETM for VeloCloud SD-WAN will be generally available in Q4 of 2026.
- ETM will be available for all current VeloCloud hardware and virtual edge platforms.
