HPE is bringing its EdgeConnect secure access service edge (SASE) offering into both HPE Mist and HPE Aruba Central, putting branch security into the consoles network teams already use. We look at what it unifies, where policy and agentic actions go next, and which team it is built for.
What Is Covered in This Article:
- HPE is integrating EdgeConnect with both HPE Mist and HPE Aruba Central, with Mist support during 2026 and Aruba Central support in the first half of 2027.
- Keeping two consoles spares Aruba and Juniper customers a forced migration, but makes SASE parity between them a standing obligation.
- Shared telemetry gives network and security teams a common view now; a unified security policy model across domains remains on HPE’s roadmap.
- HPE keeps Marvis actions narrow and operator-approved; the real test comes when those actions reach security controls.
- Buyer spending intent favors HPE’s networking lines more than its security line, so winning over security buyers remains the open question.
The News: On October 27, 2026, HPE announced that it is integrating HPE Networking EdgeConnect, its SASE offering that combines SD-WAN and Security Service Edge (SSE), with both HPE Mist and HPE Aruba Central, its two management platforms for wired and wireless networks. HPE describes the combination as a unified agentic framework for NetOps and SecOps from edge to cloud.
EdgeConnect customers will gain access to HPE Marvis, the AI engine and assistant used across HPE’s networking portfolio, including agentic self-driving actions, user experience twinning, and a Large Experience Model that predicts issues with applications such as Zoom and Microsoft Teams. Mist and Aruba Central customers will gain application-aware routing, WAN optimization, integrated security, and SSE integration, with deployment on-premises, in the cloud, or in a virtual private cloud.
HPE Mist support for EdgeConnect is expected during 2026, and HPE Aruba Central support in the first half of 2027. HPE says existing EdgeConnect customers can onboard their current appliances into either console. The move builds on the unified SASE platform HPE launched on EdgeConnect at HPE Discover Las Vegas in June 2026.
HPE Brings SASE Into Its Network Consoles
Analyst Take: Branch networking and branch security have been converging for the better part of a decade, and most of the SASE debate has centered on the security side, specifically which cloud should inspect the traffic. HPE approaches it from the other direction, bringing SASE into the consoles that network operations teams already use every day rather than asking them to adopt another. We think that is a sensible place to start, and it lines up with what buyers tell us: in Futurum’s Cybersecurity Decision-Makers Survey for the first half of 2026, 40% of respondents to the network security questions (N=102) placed consolidating network security vendors into a single-vendor SASE platform among their top three initiatives for the next 12 to 18 months.
Two Front Doors, by Design
HPE has been clear that HPE Mist and HPE Aruba Central will not merge into a single platform; instead, the two share the Marvis AI engine and access-point hardware, and customers choose the console that suits them. This announcement extends that choice to SASE rather than collapsing it, which spares both the Aruba and the Juniper installed bases a forced migration, a reasonable call, in our opinion, given how sticky network management tooling tends to be.
The cost is that parity across two consoles becomes a standing obligation, and the staggered availability (Mist in 2026, Aruba Central in the first half of 2027) is an early example of it. Buyers appear to notice console fragmentation. In the same survey, 36% of respondents (N=100) cited vendor platforms assembled through acquisitions that still require separate consoles for SD-WAN and SSE as a top-three source of friction in SASE consolidation.
HPE addressed that specific split in June, when it brought SD-WAN and SSE together on EdgeConnect, and it describes the Mist and Aruba Central arrangement as “one brain, two bodies”: Marvis is common to both, while telemetry and terminology differ slightly by lineage. The test now is to keep the Mist and Aruba Central SASE experiences close enough to meet customer expectations.
Visibility First, Policy Next
The release leans on visibility, user experience, and faster troubleshooting, which is where network teams feel the pain most. The mechanism is more than a shared dashboard: telemetry from the EdgeConnect orchestrator and its appliances now feeds the Mist data lake, so a question such as why a business application is slow can be answered using data from wired, wireless, firewall, and SASE domains rather than one domain at a time.
Security teams tend to ask a different question: where the policy lives and who owns it. In a briefing after the announcement, HPE explained that SASE security policy continues to be authored in the EdgeConnect orchestrator, where its SSE services share a single policy engine and branch gateway policy is managed alongside them. A write-once policy layer spanning wireless, firewall, and SASE is not part of this release, and HPE has signaled that unified SASE policy is a priority on its roadmap.
To us, that makes this release a meaningful step on operations, giving network and security teams a shared view of the same environment, while the common policy model that would fully bring NetOps and SecOps together is still ahead. That sequencing is reasonable, since shared telemetry tends to come before shared policy, and the policy roadmap is what we will be watching most closely.
Agentic Actions on Security Controls
Extending Marvis’s self-driving actions to SASE is a logical next step, and HPE has given the guardrails real thought. Asked how it keeps agents in bounds, HPE described actions that are narrowly prescribed and enabled by the operator one at a time, a single corrective step per condition (bouncing a stuck port, for example), and a cap of one or two retries before a human takes over, which it framed as least privilege for each agent skill.
That is a suitable approach, and today’s EdgeConnect actions (maximum transmission unit (MTU) mismatches, intermittent WAN links, virtual private network (VPN) paths that go down, software that falls out of compliance) are largely operational. Security controls raise the stakes, though. An agent that steers traffic around a degraded link is one thing; an agent that relaxes an inspection policy or a segmentation rule to restore a user’s video call is another, and those two goals (experience and protection) will not always point the same way.
As actions reach the security policy, we would like to see the same discipline applied explicitly: which SASE actions Marvis can take on its own, which require human approval, and how those decisions are logged. Authorization, more than detection, is where agentic operations will earn or lose the trust of security teams.
A Crowded Field, Sorted by Who Owns the Branch
The market sorts roughly into three camps: vendors whose center of gravity is networking (Cisco, Extreme Networks, and HPE itself), security vendors extending into networking (Fortinet and Palo Alto Networks), and cloud-delivered SASE and SSE specialists such as Zscaler, Netskope, and Cato Networks, among others. Each camp, in effect, argues that its own team, network or security, should own the converged branch. HPE is betting on the network operations team.
Data from ETR, part of Futurum, offers some support for that bet, along with a caution. In ETR’s October 2026 TSIS survey, which measures planned second-half 2026 spending against first-half actuals, HPE’s networking lines all posted Net Scores above the networking sector’s 9, with Aruba Networks at 16 (n=180) and Juniper at 12 (n=174). Juniper’s line within information security, by contrast, posted a Net Score of 3 (n=199), well below that sector’s 15.
The franchise HPE is building from is the network, and this announcement plays to that strength. Whether it also wins over security buyers remains open.
What to Watch:
- Will Mist and Aruba Central reach SASE parity, and how quickly? Aruba-first customers and their channel partners will be watching the gap between the 2026 and first-half 2027 availability dates, and whether features land in both consoles together.
- How soon will SASE policy become write-once across domains? HPE has signaled work toward unified SASE policy; its arrival will decide how far this convergence extends beyond operations.
- What can Marvis change on a security control without a human? HPE’s opt-in, single-action model is a sound start; buyers will want to see it applied, with an audit trail, once actions reach inspection and segmentation policy.
- How will security-first and cloud-delivered SASE vendors respond? Fortinet, Palo Alto Networks, Zscaler, Netskope, Cato Networks, and others may push harder on branch networking, or on keeping the security team at the center of the purchase.
- Can HPE’s security business ride on its network? Integrations like this one give HPE’s security capabilities a path into its networking installed base; whether that changes how security buyers see HPE is worth tracking.
For more information, read the full announcement from HPE.
Declaration of generative AI and AI-assisted technologies in the writing process: This content has been generated with the support of artificial intelligence technologies. Due to the fast pace of content creation and the continuous evolution of data and information, The Futurum Group and its analysts strive to ensure the accuracy and factual integrity of the information presented. However, the opinions and interpretations expressed in this content reflect those of the individual author/analyst. The Futurum Group makes no guarantees regarding the completeness, accuracy, or reliability of any information contained herein. Readers are encouraged to verify facts independently and consult relevant sources for further clarification.
Disclosure: Futurum is a research and advisory firm that engages or has engaged in research, analysis, and advisory services with many technology companies, including those mentioned in this article. The author does not hold any equity positions with any company mentioned in this article.
Analysis and opinions expressed herein are specific to the analyst individually and data and other information that might have been provided for validation, not those of Futurum as a whole.
Read the full Futurum Group Disclosure.
Other Insights From Futurum:
HPE Spaceborne Computer-4 Will Run the First HPC Benchmarks on the Moon
HPE Self-Driving Network Comes to the Miami HEAT’s Kaseya Center
HPE ProLiant Gen13: Security Features Matter More Than the Silicon
Fernando Montenegro serves as the Vice President & Practice Lead for Cybersecurity & Resilience at The Futurum Group. In this role, he leads the development and execution of the Cybersecurity research agenda, working closely with the team to drive the practice’s growth. His research focuses on addressing critical topics in modern cybersecurity. These include the multifaceted role of AI in cybersecurity, strategies for managing an ever-expanding attack surface, and the evolution of cybersecurity architectures toward more platform-oriented solutions.
Before joining The Futurum Group, Fernando held senior industry analyst roles at Omdia, S&P Global, and 451 Research. His career also includes diverse roles in customer support, security, IT operations, professional services, and sales engineering. He has worked with pioneering Internet Service Providers, established security vendors, and startups across North and South America.
Fernando holds a Bachelor’s degree in Computer Science from Universidade Federal do Rio Grande do Sul in Brazil and various industry certifications. Although he is originally from Brazil, he has been based in Toronto, Canada, for many years.