Aryaka SmartSecure is designed to complement SmartConnect with managed SD-WAN security-as-a-service offerings. At the branch, an access firewall within the ANAP offers ‘north-south’ control, while an optional NFV-based Tier-1 firewall offers comprehensive L7 protection. Aryaka Zones extends this to the LAN with ‘east-west’ security, through site-segmentation with policy-based access. Together, the two capabilities segment WAN traffic, to Aryaka and to the internet, from LAN traffic, both internal and DMZ. A third capability extends security into the cloud though Aryaka’s security partners, including Zscaler and Palo Alto Networks. The ANAP also supports VRF-based micro-segmentation, enabling multi-tenancy.