Arista Edge Threat Management

What Is Arista Edge Threat Management?

When you’re responsible for protecting a real network—staff devices, guest Wi‑Fi, school labs, small offices, branch sites—the pain isn’t “do we have a firewall.” The pain is keeping policies consistent, getting visibility into what’s actually happening, and doing it without stitching together five products that don’t agree on identity, reporting, or VPN.

Arista’s Edge Threat Management (ETM) is built around that reality: a modular NG Firewall (unified threat management / next‑gen firewall) that you can deploy as software on x86 hardware, as a virtual appliance (including cloud options), or as an Arista appliance—then manage centrally via ETM Dashboard. The NG Firewall uses an app/plugin model (firewall, IPS, web filtering, VPN, WAN failover, reporting, etc.) so you can install what you need and skip what you don’t.

Where ETM stands out (when you’re running more than one site) is the cloud-based ETM Dashboard: browser-based central management, remote access to appliances via SSO, templates, backups, license management, and integrations for endpoint security visibility (Bitdefender/Malwarebytes/Webroot). It’s positioned for organizations with limited IT time/budget, plus MSP-like multi-deployment oversight.

Arista Edge Threat Management Features and Performance

ETM is not a consumer VPN. It’s a firewall platform that includes VPN features (site-to-site and remote access) alongside gateway security controls. In Arista’s own packaging, “NG Firewall” is the core product, and “Edge Threat Management” is the broader solution that includes NG Firewall, Micro Edge, and ETM Dashboard.

VPN protocols (verified + what Arista documents)

Your verified specs list these VPN protocols: IPsec, IKEv2, OpenVPN, WireGuard. On Arista’s storefront and documentation, NG Firewall includes apps for IPsec VPN, OpenVPN, and WireGuard VPN (plus “Tunnel VPN” as a separate app).

Arista’s data sheet also frames remote access and “mobile policy enforcement” over IPsec, WireGuard, or OpenVPN (so remote clients can receive the same policies as on-network users).

Security and gateway controls (app-based)

With NG Firewall Complete, Arista lists a full app library including (not exhaustive): Firewall, Intrusion Prevention, Threat Prevention, Virus Blocker, Phish Blocker, SSL Inspector, Web Filter/Web Monitor, Application Control, Bandwidth Control, WAN Balancer/WAN Failover, Captive Portal, Reports, Directory Connector, and configuration backup/branding tools.

That app model matters operationally: it’s the reason the UI can stay “modular” and why deployments can be tuned for small environments (only install what you use) versus “turn on everything and drown in settings.” Arista explicitly describes the platform as uniting apps around a common GUI/database/reporting, and notes that apps inspect traffic simultaneously (their docs/wiki describes this as reducing resource requirements for each app).

Central management: ETM Dashboard

ETM Dashboard is Arista’s cloud management plane for Micro Edge and NG Firewall deployments: centralized reporting, secure remote access via SSO to appliances, license management, daily backups with optional restore, templates with real-time sync, and notifications (email/Slack/PagerDuty/VictorOps).

One important nuance: Arista states ETM Dashboard is a free service, but full functionality depends on the appliance having a subscription assigned. Features called out as subscription-gated include Policies, Alerts, Reports, and Networks (i.e., fleet-wide management features, not just “can you log in”).

Performance: what we can and can’t claim

Arista’s marketing pages claim “superior connectivity & performance” and talk about QoS, uptime, and bandwidth optimization capabilities like application-based shaping.

What we can’t honestly do from public sources: give you a single “Mbps number” that applies across deployments. NG Firewall runs on different hardware profiles (software install, virtual, cloud, or Arista appliances), and throughput is workload-dependent (IPS, SSL inspection, reporting/logging volume, number of sessions, etc.). Arista’s own getting-started guide stresses hardware requirements and dedicated installation, which implies performance is tied to the box you run it on.

What we can say based on public discussion: there are admins reporting performance degradation under high session rates in real deployments. That’s not a controlled benchmark, but it’s a real-world complaint you should treat as a sizing and tuning warning (especially if you plan to turn on heavy inspection features).

Pricing and Plans

ETM is explicitly a freemium model: Arista sells subscriptions (packages and individual apps), and also offers an NG Firewall Free tier.

Free vs paid packages

Arista’s “NG Firewall Packages” page lists at least two software packages:

• NG Firewall Free: described as “basic security and connectivity features needed to lay the foundation of a secure network,” with multiple apps available but some marked “limited.”
• NG Firewall Complete: described as a comprehensive subscription to the entire app library (with ETM Dashboard included), and advertised as starting at $25/month.

The packages page also notes that some apps (like Web Filter and IPsec VPN) are available as individual add-ons.

Term options and device-based licensing

Arista’s online store UI shows you select a licensed device tier (example: “Up To 12”) and a subscription term such as Monthly, Annual (10% savings), or 3‑year (20% savings). In the same store flow, an example annual price shown is $270.00 for “Up To 12” devices on an annual term (that’s the store’s displayed cart example at the time crawled).

Their purchasing/subscription FAQ page states their pricing model allows purchasing monthly, 1‑year, 3‑year, or 5‑year subscriptions for an NG Firewall deployment.

Trials

Arista advertises a 30‑day free trial for NG Firewall Complete (“try it in your network risk-free”).

Refunds

A specific refund window/policy is not clearly stated in the sources we reviewed. The product pages mention trials, but we did not find a definitive published refund policy for paid subscriptions in the sources captured here—so we’re not going to guess.

Privacy and Security Assessment

What this product is (and isn’t)

From a privacy-tools perspective: ETM is an enterprise gateway product, not an anonymity tool. It’s designed to enforce policy (filtering, inspection, identity-aware access, reporting) at the network edge and for remote access back into your network.

If your goal is “hide my browsing from my ISP” or “stream geo-blocked content,” ETM is the wrong category. It’s built to give administrators more visibility and control, not less.

Central management and cloud implications

ETM Dashboard is a cloud-based management platform for centralized reporting, remote access, templates, backups, licensing, and notifications.

Arista states ETM Dashboard is a free service, but also makes clear that certain dashboard features are subscription-dependent (Policies, Alerts, Reports, Networks).

For privacy and risk analysis, the key point is operational: if you depend on a cloud dashboard for remote administration and orchestration, that’s an additional dependency compared with a fully local-only firewall UI. Public reports (unverified, community posts) describe at least one instance where admins experienced dashboard inaccessibility and associated VPN issues. Treat that as a resilience risk to validate in your own environment (especially if you’re standardizing on dashboard-driven workflows).

Logging, audits, and open-source posture

Arista describes NG Firewall as a platform that unites applications around a common database and reporting, and it sells a Reports app specifically designed for deep drill-down reporting and alert rules.

For a “no-logs” privacy claim: none was found in the official ETM sources we reviewed. That’s expected—this kind of product is commonly deployed specifically to log and enforce policy. Similarly, we did not find public third-party “no-logs” audits or a formal independent audit statement in the sources captured here, so we’re not going to imply one.

Arista’s wiki notes the platform “supports many open source applications and commercial add-ons,” but that is not the same as saying the overall product is open-source. We did not find a clear statement that NG Firewall/ETM is open-source end-to-end, so treat it as a commercial platform with some open-source components.

Jurisdiction

Arista Networks is a US-based company; ETM is an Arista product line. For many buyers, that means procurement/compliance considerations align with US vendor relationships—but also that US legal jurisdiction can be relevant. We did not find an ETM-specific “privacy jurisdiction” disclosure beyond it being an Arista offering; if you need hard assurances, you’ll want contract language and vendor documentation tied to your deployment.

Strengths and Limitations

Strengths

• Modular app model lets you tailor the firewall to your environment (filtering, IPS, SSL inspection, VPN, WAN failover, etc.).
• Central management is real: ETM Dashboard supports reporting, templates, backups, licensing, notifications, and SSO remote access to appliances.
• Multiple VPN options are first-party apps in the ecosystem (IPsec, OpenVPN, WireGuard).
• Freemium entry point exists via NG Firewall Free, plus a 30-day trial for the full app library.

Limitations

• Performance claims are hardware- and feature-dependent; Arista doesn’t provide one universal throughput number in the sources reviewed.
• Dashboard feature gating: ETM Dashboard is free, but key centralized features require an appliance subscription.
• Not a privacy VPN: this is a policy enforcement and visibility tool by design (reporting and logging are core features).
• Cloud dependency risk (for dashboard-driven operations): community reports describe dashboard/VPN disruption during an outage.

Who Should Use Arista Edge Threat Management?

Good fit

1. Small-to-mid organizations that need “all-in-one” gateway security (filtering, IPS, VPN, WAN failover, reporting) and want it in one platform rather than multiple appliances.
2. Teams managing multiple sites (branches, schools, distributed environments) that benefit from centralized templates, backups, reporting, and remote access via ETM Dashboard.
3. Admins who want protocol flexibility for remote access and site-to-site and prefer integrated VPN apps (IPsec/OpenVPN/WireGuard) inside the firewall platform.

Not a good fit

1. People shopping for a consumer VPN for anonymity, tracker resistance, or streaming geo-unblocks—ETM is a firewall/UTM platform, not a retail VPN service.
2. Environments that require fully local-only management with zero cloud dependencies for administration workflows; ETM’s differentiator is cloud management, and some features depend on subscriptions.
3. Buyers who need published refund terms before purchasing: Arista promotes trials, but a clear refund policy wasn’t found in the sources reviewed.