Looking to expand its pool of customers, Aryaka is combining its SD-WAN with additional cloud security products from Check Point Software Technologies to deliver a global managed secure access service edge (SASE) for distributed enterprises with branch office locations.

Aryaka and Check Point first teamed up in 2020 to pair the former’s cloud-based SD-WAN service with Check Point’s CloudGuard Connect and Edge threat prevention platforms to provide customers with the building blocks they need to adopt a SASE model.

With the expanded partnership, Check Point will provide its Harmony Connect service for cloud security, Quantum Edge for on-premises security and a virtualized firewall.

“Aryaka and Check Point constantly examine ways to improve our customers’ experiences with networking and security as a service, or SASE,” Aryaka Director Klaus Schwegler said. “Providing a comprehensive SD-WAN and security solution delivered as a service can help customers migrate from siloed, legacy architectures to a managed SASE faster by leveraging best-of-breed SD-WAN and security solutions.”

Aryaka’s SmartConnect, a fully managed global SD-WAN service, delivers SLA-based connectivity via its global network of points of presence (PoPs), while Check Point Harmony Connect and Quantum Edge adds a layer of security controls needed for web and cloud-bound traffic.

Aryaka’s edge device, the Aryaka Network Access Point (ANAP), creates IPSec tunnels that connect the site to the Aryaka POP and can be deployed as a Layer 3 hardware device or as a virtual instance. The ANAP is installed at a SmartServices site as part of the vendor’s SD-WAN and SASE as-a-service solution.

With the added integrations, the ANAP and its native firewall capability can forward all internet and cloud-bound traffic directly to the Harmony Connect cloud service. The Aryaka edge device also will automatically forward all public internet traffic to a co-located firewall from Check Point.

Schwegler told SDxCentral  that Aryaka has been working with Check Point for “a couple of years” to offer the Check Point Quantum and Quantum Edge firewalls in order to host them virtualized on Aryaka’s edge appliance as part of its on-premises managed firewall service.

Additionally, Aryaka SmartConnect connects branch offices to cloud services, and Check Point Quantum Edge protects branch offices on-premises with threat prevention that can be managed from one platform.

The Check Point partnership fills many of the gaps in Aryaka’s security capabilities. The SD-WAN vendor’s platform, which is distributed across a growing global network of PoPs all connected by a private backbone, already bears similarities to a SASE architecture, but lacks much of the security stack on its own.

“The partnership expansion provides Aryaka and Check Point access to a larger pool of customers. While Aryaka and Check Point have unified SASE capabilities, combining our SD-WAN with Check Point’s SSE gives our shared customers access to best-in-breed solutions and a managed SASE experience overall,” Schwegler said.