Aryaka SD WAN & SASE Cybersecurity Solutions

Netify Review

Aryaka's solution stands out because they leverage a layer-2 global private backbone with hybrid capabilities such as site-to-site DIA, MPLS and VPLS with over 30 PoPs worldwide (underlay) as well as SD WAN (overlay) and managed services. This sets Aryaka apart from other vendors, because generally a vendor will offer the overlay (SD WAN/SASE) and a Managed Service Provider (MSP) will provide underlay (connectivity) and managed services. Aryaka offers an alternative, as their solution comprises of underlay, overlay and managed services. This makes Aryaka a good choice for clients requiring a solution with few or no integrations. 

Aryaka's SD WAN solution is granular and feature rich, with integrated cloud connectivity, security and options for remote users. Netify would recommend Aryaka to SMEs looking for specific regional connectivity options, and global enterprises looking for a secure managed global network with granular features.

As of late 2022, Aryaka's Zero Trust WAN SASE solution will now include Firewall-as-a-Service (FWaaS) and Secure Web Gateway (SWG) capabilities in a move aimed at providing further SASE capabilities to its users. The solution is priced on a per-user or per-site basis as is particularly aimed at large and mid-market enterprises with complex requirements to whom Aryaka's turnkey SASE offering may not be suitable.

Aryaka SD WAN and SASE Solution: Comparisons, Review, Benefits, Use Cases, Pros & Cons

Author: Netify Research Team

If you have questions about Aryaka and how their capability is aligned to your needs, email the Netify research team. UK: uk@netify.co.uk North America: northamerica@netify.com

(Please use the UK email for ROW - Rest of the World - questions or inquiries)

About Aryaka

Aryaka was founded in 2009 and is an SD WAN vendor headquartered in San Mateo, California, North America. Aryaka focuses on the premise of creating SD WAN which is simple to use but highly effective due to their core Layer-2 backbone infrastructure, offering worldwide connectivity, including hard to reach areas such as China and even Fiji.

The company leverages offices in the UK, India, China and Singapore. 

What is the Aryaka SD WAN Solution?

Aryaka’s SD WAN offering is fully managed end-to-end SD WAN services, which they trade as ‘SmartConnect’. The product is available with global, regional and local connectivity, and leverages their Layer-2 global private backbone with over 30 PoPs worldwide. Because of this, Aryaka is able to cater for SME’s as well as large multinational corporations. The network is cloud-enabled, offering connectivity to AWS, Azure, Google Cloud, Oracle Cloud and has one of the highest Net Promoter Scores (NPS) in the industry. 

Configuration-Based Key Features:

Security-Based Key Features:

• Stateful Firewalling: Aryaka’s Edge security offers a managed CPE. 
• Integrated Cloud Security: Leverages partners such as Palo Alto, Zscaler and Symantec, which clients can choose between. 
• Network Address Translation (NAT): Multiple IP addresses are mapped into one public IP address, creating a single secure IP address on the internet. 
• SmartSecure: Aryaka’s cloud-based security solution includes firewalls, micro-segmentation, virtual firewall hosting including management of physical and virtual firewalls, cloud-hosted security that can be altered to fit site size, and secure remote access. 
• SASE: Formed by an acquisition of Secucloud - see What is the Aryaka SASE security solution?

Performance-Based Key Features:

What is the Aryaka SASE security solution?

The Aryaka managed SASE solution is deployed across Aryaka's global network of PoPs and combines orchestration, automation and monitoring workflows with access to the MyAryaka cloud portal to create a fully end-to-end solution. The solution is provided by Aryaka's acquisition of Secucloud, to create a globally deployed managed SASE solution. The offering includes: SD WAN, Private Access with Zero Trust, WAN Optimisation, Bandwidth Aggregation, Network-as-a-Service (NaaS) CDN, last mile services, Secure Web Gateway (SWG), Firewall as a Service (FWaaS), threat prevention and DNS. The solution connects all edges, including WAN, mobile, cloud and Internet of Things (IoT). 

Because Aryaka's acquisition of Secucloud is a recent addition to the company's portfolio (confirmed as of May 2021, but not fully integrated until much later) some clients may still make use of their older SASE offering which relied on integrations from companies such as Palo Alto and Check Point. The deployments were mainly on-premises using firewalls hosted by Aryaka's service Edge nodes and managed by Aryaka's operations team. 

Further, Aryaka's Private Access Solution was launched in December 2020. The offering is client-based and integrated into Aryaka's PoPs, allowing for quick deployment of products on a global scale, whilst leveraging features such as bandwidth pooling and bursting for added flexibility. 

Aryaka SASE can be deployed in four different ways: 

• Edge: Integrates next generation firewall as a virtual network function into ANAP service edge CPE. 
• Cloud: Aryaka’s cloud deployment offering aids the adoption of SASE by connecting to cloud security platforms from technology partners such as Check Point, Palo Alto Networks, Zscaler and Symantec. 
• VPN Acceleration: Improves the performance of existing VPN solutions. 
• Hybrid Workplace Solution: Clients are offered Aryaka’s SmartSecure Private Access, which is a comprehensive VPN solution designed to support remote users and locations. This combines superior application performance with complete flexibility in bandwidth allocation, and leverages containerized VPN server instances in Aryaka service PoPs. 

How does Aryaka access cloud vendors?

SmartCloud is Aryaka’s cloud offering with capabilities to connect to Azure, Google Cloud, Alibaba Cloud, Vodaphone Fiji and Oracle Cloud and supports direct links via ExpressRoute to Azure, DirectConnect to AWS and FastConnect to Oracle Cloud. Clients are also able to connect to IaaS and SaaS on-demand using Aryaka ‘Plug and Play’ multi-cloud. Clients can choose to deploy cloud connectivity using either IPsec tunnels from Aryaka PoPs, or via direct connections to IaaS providers worldwide. Clients based in North and South America, Europe, the Middle East, Africa, Asia and Pacific countries can access cloud services without the need for a dedicated PoP in a defined region.

Cloud acceleration is also offered as an SLA-driven connection directly from the nearest Aryaka PoP. This is designed to reduce latency and packet loss, both commonly associated with DIA and middle mile. 

Does Aryaka offer WAN acceleration and optimization?

Aryaka’s ‘SmartOptimise’ product offers WAN acceleration and optimization. Aryaka creates multi-segment transmission control protocol (TCP) optimization and user datagram protocols (UDP) that are supported by network quality of service. Aryaka LinkAssure applied to branch offices reduces network complexity and provides link aggregation. Aryaka LinkAssure features include:

Aryaka optimizes their first mile available bandwidth through data compression and acceleration of SSL and CIFs through application proxies that shorten feedback loops to improve the performance of WAN-intolerant applications. WAN optimization and acceleration can be deployed through Aryaka’s TurboNet or TurboApp options:

• TurboNet: Included in global and regional deployment. Offers network acceleration including LinkAssure, TCP acceleration and basic optimization. 
• TurboApp: Included with global and optional with regional deployment. Offers application acceleration including data compression, advanced optimization, and acceleration of SSL & CIFS. 

Optimization of network and applications are included in Aryaka’s end-to-end managed SD WAN. Aryaka’s solution ensures global application performance, improving profit and productivity, by utilizing ‘Day 1’ SLAs over a dedicated global backbone. Aryaka’s offering ensures top tier user experience and data integrity, whilst reducing cost of ownership to maximize the return on SD WAN investments. 

How does Aryaka support remote users?

Aryaka’s offering for remote access uses their SmartSecure solutions complemented by SmartCloud to enable work-from-home and hybrid working. Aryaka SmartCloud improves regional IaaS, PaaS and SaaS connectivity. The SmartSecure security-as-a-service solutions offered by Aryaka are:

• SmartSecure Private Access: Supports all major IPsec in line with RFCs, and provides clients for all major mobile and desktop operating systems such as MacOS, iOS, Microsoft Windows and Android. SmartSecure Private Access leverages Aryaka’s worldwide service PoPs for flexible service delivery. VPN bypass allows application definition with split tunneling disabled and ‘whitelisting’ of domains or target addresses that can bypass the VPN tunnel. 
• SmartSecure VPN Accelerate: Improves on-premises cloud and SaaS application performance regionally or globally. Does not require additional software clients or hardware. 

Aryaka’s solution supports remote access for distance/mobile employees and for IT staff. Remote staff benefit from a consistent office-home user experience, accelerated cloud or on-premises SaaS applications to provide effective collaboration through high speed and high quality voice and video across the globe. This offering also meets IT needs by providing reduced costs through a simplified VPN infrastructure, fast deployment using SmartServices and end-to-end visibility of applications and networks. Framed against the emerging hybrid workplace, this solution meets the needs of IT teams. 

Aryaka supports telecommuters through six core capabilities:

What is the Aryaka managed, co-managed and DIY services solution? 

SmartManage is Aryaka’s managed services solution, offering global managed services, including automated cloud-based orchestration, predictive analytics and global monitoring. Last mile management supervises last mile connectivity, choosing the fastest available ISP connectivity. All managed last mile services can be subscribed to at any time, and can be deactivated on-demand. The solution also includes secure cloud-managed CPE with sophisticated routing, traffic management and security. 

Aryaka do not offer DIY, however their managed services come with a management interface which allows clients to self-service their network for a co-managed solution. 

What Reporting and Management is available via the Aryaka Portal?

Clients can manage their network using SmartInsights, which is accessed through the MyAryaka Cloud Portal. The portal features ticketing, dashboards and reporting; Global Self Service and Application, Cloud and Flow Visibility which both allow for configuration; and first, middle and last mile performance management, with SLA verification and end-to-end network insights.

What is the Aryaka SLA?

Below is a table displaying the main focus points of the Aryaka Service Level Agreement (SLA). 

(N.B. Shown above: Service Level for Incident Management)

(N.B.*Within a given month)