Arista Networks introduced Edge Threat Management (ETM), a new AI-driven security platform that integrates zero trust capabilities directly into its VeloCloud SD-WAN edge appliances. The software extends enterprise-grade branch protection by combining SD-WAN connectivity and security into a single platform, allowing organizations to replace standalone firewall appliances with integrated services managed through the VeloCloud Orchestrator. General availability is scheduled for Q4 2026, with support across all existing VeloCloud hardware and virtual edge platforms.
The new ETM software delivers advanced firewalling, intrusion and threat prevention, zone-based segmentation, Geo-IP filtering, DNS filtering, and AI-assisted policy management at the WAN edge. Rather than managing separate networking and security systems, enterprises can administer both functions through a common operating system, unified policy engine, and centralized orchestration platform. Arista said the approach simplifies branch deployments while strengthening security for distributed enterprise locations.
A key differentiator is the integration of Arista AVA (Autonomous Virtual Assist), which applies generative AI to security administration. Ask AVA features such as Policy Explainer and Traffic Simulation translate complex security rules into plain language, simulate policy outcomes before deployment, and help administrators understand how multiple policies interact. Arista positions the offering as part of its broader client-to-cloud networking strategy, extending AI-driven automation from data center fabrics into enterprise branch environments following the company’s acquisition of VeloCloud one year ago.
• Integrates zero trust security directly into VeloCloud SD-WAN edge platforms
• Eliminates the need for separate branch firewall appliances in many deployments
• Includes advanced firewalling, threat prevention, DNS filtering, Geo-IP filtering, and segmentation
• Uses Arista AVA generative AI for Policy Explainer and Traffic Simulation
• Managed through the VeloCloud Orchestrator using unified security policies
• Supports existing physical and virtual VeloCloud edge platforms
• General availability is planned for Q4 2026
“The new zero trust integrated security with ETM, developed organically by Arista, showcases the power of the combined Arista and VeloCloud teams on the anniversary of the VeloCloud acquisition. Customers can now simplify and unify the branch, extending enterprise-grade zero trust security to the branch office WAN edge,” said John McCool, Senior Vice President at Arista Networks.
🌐 Analysis: The announcement reflects Arista’s continued expansion beyond its traditional strength in hyperscale data center switching into enterprise networking and security. Since acquiring VeloCloud, the company has steadily integrated SD-WAN, campus networking, and AI-based operations under a common architecture. ETM represents another step toward delivering a unified networking and security platform rather than relying on third-party security appliances at remote sites.
🌐 Analysis: The broader SD-WAN market continues shifting toward Secure Access Service Edge (SASE) and integrated zero trust architectures. Competitors including Cisco, HPE Aruba, Palo Alto Networks, Fortinet, Juniper Networks, and Versa Networks all combine networking with security services. Arista’s strategy differentiates itself through deeper AI-assisted operations using AVA and by extending its cloud operating model consistently across AI data centers, campus networks, and enterprise branch environments.
🌐 Analysis: Arista’s branch networking strategy stems from its acquisition of VeloCloud from VMware, which closed in 2025 as part of the broader divestiture of VMware’s end-user and networking assets following Broadcom’s acquisition of VMware. VeloCloud pioneered the SD-WAN market after its founding in 2012 by a team including Sanjay Uppal, Steve Woo, and Ajit Gupta, introducing cloud-delivered WAN optimization and dynamic path selection that became a foundation for modern enterprise branch connectivity. VMware acquired VeloCloud in 2017 to establish its SD-WAN portfolio, and the platform grew to support thousands of enterprise customers and service providers worldwide. Under Arista, VeloCloud has become the company’s strategic enterprise WAN platform, with this new Edge Threat Management announcement illustrating how Arista is adding organically developed security and AI capabilities while preserving the mature SD-WAN architecture that helped define the category.
