Focus

Prisma SD-WAN Administrator’s Guide

Get Started with Prisma SD-WAN

Table of Contents

Get Started with Prisma SD-WAN

Let us get started with Prisma SD-WAN.

Where Can I Use This?	What Do I Need?
Prisma SD-WAN	Active Prisma SD-WAN license

Prisma SD-WAN is a core component in delivering Secure Access Service Edge (SASE) for the modern enterprise. At the core of the system is the application performance engine. Prisma SD-WAN provides a software-defined, wide area network (SD-WAN) solution that transforms legacy wide area networks (WANs) into a radically simplified, secure, application fabric (AppFabric), virtualizing heterogeneous underlying transports into a unified hybrid WAN.

Prisma SD-WAN controls network application performance based on application-performance service level agreements (SLAs) and business priorities.

We recommend using Google Chrome as your preferred web browser.

Through Instant-On Network (ION) devices, Prisma SD-WAN simplifies how WANs are designed, built, and managed, securely extending data center-class security to the network edge. Prisma SD-WAN leverages the x86 platform with a centralized controller-based model, enabling simple deployments at remote offices and data centers. You can view granular application-driven analytics, build a robust policy, and performance-based traffic management of the WAN.

You can deploy Prisma SD-WAN in one of the three modes—Analytics, Control, or Disabled.

In the Analytics mode, the branch ION device sits in-path, between a branch router and a LAN switch. It monitors traffic but does not apply policies or make path selection decisions for applications. You don’t require a data center site in this mode. When the branch is in Analytics mode, there won't be any VPN connections to the data center site.
In the Control mode, the branch ION device sits in-path between a branch router and a LAN switch or replaces the router at a branch. It forwards traffic, selects the best path available, and applies security and Quality of Service (QoS) policies. You require an ION 3000, ION 7000 or ION 9000 in the data center if the intent is to enable a native Prisma SD-WAN virtual private network (VPN) between a branch and a data center.
In the Disabled mode, the branch ION device sits in-path and acts as a link between a branch router and a LAN switch. It does not monitor traffic, no policies are applied, and no path selection decisions for applications are applicable.

Read on to get started with Prisma SD-WAN:

Prisma SD-WAN Key Elements