---
title: "ANAP security guide"
canonical: "https://docs.aryaka.com/space/KNOW/1299710005/ANAP%20security%20guide"
format: markdown
---
Aryaka provides an ANAP—an SD-WAN-capable edge device that is deployed at locations to facilitate connecting the customer site to Aryaka’s global network. Because the device is installed at the customer site, security measures are implemented to ensure that the device is secure and that only authorized personnel can access the ANAP. This document describes the security protocols implemented around ANAP access. ANAP security rules The ANAP device supports remote device management using SSH. It uses port 2222 for inline and edge  routed modes and port 22 in all other modes. The access is restricted to the following set of IP addresses: Aryaka management POP IPs Aryaka IPSec tunnel end point IPs Customer site’s known local LAN subnets The SSH access is restricted to only directly connected hosts on the management interface. Additionally, access is also provided to trusted partner IP address if the customer relationship to Aryaka uses a managed services partner. Access by Aryaka Customer Support Aryaka Customer Support accesses the ANAP from the Aryaka POPs using a two-step authentication process. The Aryaka POPs are accessed securely using usernames, private keys, and passwords. After logging in to the POP, the Aryaka support engineer uses another set of credentials (username and private key) to access the customer ANAP. Access by customer users Customer users do not have account access to the ANAP. Access by Aryaka partner users If a customer's relationship with Aryaka is managed by a trusted partner, the partner user can request access for the ANAP to help with site installation and configuration. Partner users then can access the ANAP using username and private key only from configured and trusted IP addresses. ANAP console access The ANAP UI console can be accessed using root username and password. This requires onsite customer personnel. This access is restricted to Aryaka Customer Support personnel and can only be used in collaboration with the customer. In this topic Related topics ANAPs ANAP insertion iopology