How does Aruba Central handle security for site-to-site connections between AOS 10 gateways?

Aruba Central automates the creation of a secure SD-WAN fabric for site-to-site connections. For traffic between AOS 10 gateways (both Hub and Branch), Central orchestrates the automatic establishment of standards-based IPsec tunnels. It acts as the central controller, securely generating and distributing the necessary cryptographic keys and security association (SA) parameters to all gateways. This automated process ensures that all inter-site traffic is encrypted and authenticated, forming a secure overlay network without manual IPsec configuration on each device.

A: Aruba's SD-WAN security is built on industry-standard IPsec, not proprietary technologies. The claim of being resistant to zero-day attacks is a general security goal, not a specific mechanism.

C: SD-WAN is designed to securely leverage all available transports, including the internet. It does not simply steer traffic to MPLS to avoid encryption; traffic is encrypted over all transports.

D: IPsec is the protocol used for establishing secure site-to-site tunnels between network gateways. TLS is typically used for securing application-layer traffic or for remote access VPNs, not gateway-to-gateway tunnels.

1. ArubaOS 10.x Fundamentals Guide (Official Courseware): In the "SD-WAN" chapter

under the "Overlay Tunnel Orchestration" section

it states

"Aruba Central automatically orchestrates IPsec tunnels between gateways in the same group... Central provides the gateways with the necessary information to build the tunnels

including IPsec crypto and keying material." (Typically found in Module 7).

2. Aruba SD-Branch Fundamentals Guide (Official Courseware): The "Overlay Tunnel Orchestration" section explains that Aruba Central automates the establishment of IPsec tunnels between Branch Gateways and VPN Concentrators (Hubs). It details that "Central is responsible for orchestrating routing and the IPsec tunnels that form the overlay." (Typically found in Chapter 1).

3. Aruba Central User Guide: In sections describing SD-WAN Overlay Configuration

the documentation details the process of "Overlay Route and Tunnel Orchestration

" which explicitly states the automatic setup of IPsec tunnels between hub and branch sites managed by Central.