Overview:
The Prisma SD-WAN Instant-On Network (ION) models of hardware and software devices enable the integration of a diverse set of wide area network (WAN) connection types, improve application performance and visibility, enhance security and compliance, and reduce the overall cost and complexity of your WAN. Built with the intent to reduce remote infrastructure, Prisma SD-WAN enables the cloud-delivered branch.
Enterprises have traditionally deployed multiprotocol label switching (MPLS) networks, using hardware routers, to connect branch offices to centralized data centers. With cloud adoption on the rise, end user applications like videoconferencing and office productivity solutions are increasingly delivered as cloud services. Legacy WAN architectures have debilitating limitations when organizations attempt to migrate to the cloud or utilize commodity internet connections in their branch offices. For SD-WAN, you need a networking solution that:
- Steers traffic and defines networking and security policies from an application-centric perspective, rather than a packet-based one.
- Minimizes manual operations and enables agile DevOps deployments via API integrations.
- Supports the cloud-delivered branch architecture by enabling all branch infrastructure, such as networking and security, to be delivered from the cloud.
Software Subscriptions
Prisma SD-WAN is licensed as a branch by bandwidth, or with unlimited bandwidth for data center deployments. A software subscription must be selected for each ION device deployed. Options for software subscriptions include 25 Mbps, 50 Mbps, 150 Mbps, 250 Mbps, 500 Mbps, 1 Gbps, 2.5 Gbps, and data center.
Features and Benefits:
Benefits
Prisma SD-WAN ION devices offer:
- Zero-touch provisioning and deployment: Gain the advantage of automatic configuration and device claiming.
- Instant visibility into application performance: Understand how applications are performing and identify the root cause of app performance issues.
- Cloud and SaaS application deployment confidence: Meet the performance and availability demands required, including remote office WAN high availability, bandwidth, consistent latency, and dynamic path selection.
Features
Alongside these benefits, take advantage of:
- Deep SD-WAN analysis: Prisma SD-WAN provides unparalleled, actionable insights into the health and performance of your WAN application and links to help with network planning, problem resolution, and analytics. With instant visibility into application performance, you can better understand your network health and usage to determine more effective policy decisions on your network.
- Network DVR license: With this optional license, you can retain and access up to 90 days of statistics, policy, configuration, alarms, and alerts. Network DVR is licensed per ION device.
- WAN reporting license: With this optional license, you have access to auto-generated and downloadable reports giving network operators insight across various dimensions of their entire Prisma SD-WAN fabric; for example, utilization trends and hotspots to help customers determine if you need to do circuit upgrades or simply adjust your policies.
- Zone-based firewall license: Prisma SD-WAN ION devices include an application-based, zone-based firewall (ZBFW) configured using the same top-down, applicationcentric policies used for performance and path selection, ensuring compliance across different network circuits and interfaces. Our ZBFW is a lightweight security solution used for securing the WAN perimeter and segmenting traffic within a branch site. Further, ION devices can be configured to use on-premises security devices or external, hosted security services to provide further security for remote offices.
- Prisma SD-WAN CloudBlades: The CloudBlades platform enables API-based integration of the branch CPE and provides a centralized platform for programming as well as an app-flow engine at the CPE, access to Prisma SD-WAN telemetry, and secure authenticated API access to Prisma SD-WAN CPE and systems. As a result, businesses can easily enable the cloud-delivered branch and simplify management and operations.
- High availability (HA): ION devices feature the industry’s only HA deployment model that can survive a device failure and still preserve 100% of WAN capacity at a branch site.
At a Glance:
The Era of Network Transformation
It’s no secret that organizations worldwide are undergoing a network transformation. Cloud migration, the need for infrastructure automation, and the availability of cost-effective and high-performance broadband are all fueling this change. With these three fundamental shifts, traditional wide area network (WAN) architectures that rely on multiprotocol label switching (MPLS) networks to connect branch offices to data centers have been rendered ineffective. This has seen the rise of the software-defined wide area network (SD-WAN), which promises to enable organizations to seamlessly embrace the benefits of network transformation and remove any limitations from legacy WAN architectures.
Legacy SD-WAN Solutions Fall Short
Although SD-WAN offers numerous benefits for organizations, legacy SD-WAN approaches bring many challenges. For instance, many rely on force-fitting the traditional packet-based routing model into the cloud-ready enterprise. While this approach technically works, it’s far from optimal and cannot provide the return on investment (ROI) that SD-WAN has to offer. With Layer 3 packet-based policies, organizations are limited in creating application-based networking policies and lack application visibility, making it difficult for networking teams to deliver on application SLAs.
In addition, legacy SD-WAN solutions lack scalability and require constant manual intervention for Day 2 operations. This creates substantial administrative overhead for networking and operation teams, which can increase complexity and costs. To top it all off, legacy solutions require organizations to “bolt on” essential branch services, such as security and visibility. With multiple point products to deploy and manage, organizations struggle to maintain network and security operations while trying to keep costs low.
With all this in mind, it’s easy to see why a new generation of SD-WAN is needed.
The Next Generation of SD-WAN from Palo Alto Networks
Palo Alto Networks takes a fundamentally different approach with Prisma® SD-WAN, the industry’s first and only next-generation SD-WAN solution. Only Palo Alto Networks can provide SD-WAN with an ROI of up to 243%,1 simplify network operations by using machine learning to eliminate up to 99% of network trouble tickets, and improve the end user experience with a tenfold increase in WAN bandwidth at a lower cost than legacy architectures.
Highlights
Prisma SD-WAN provides three key architectural benefits:
- Application-defined: Gain deep application visibility with Layer 7 intelligence for network policy creation and traffic engineering. This can significantly improve the end user experience while enabling network teams to deliver SLAs for all applications.
- Autonomous: Automate operations and problem avoidance using machine learning and data science methodologies. This enables agile DevOps approaches for deployment by leveraging APIs to simplify network operations.
- Cloud-delivered: Enable delivery of all branch services to from the cloud, including networking and security. This can simplify WAN management while increasing ROI.
Lightweight Prisma SD-WAN ION branch appliance
Technical Specifications:
Prisma SD-WAN ION devices come in both hardware and software form factors to meet the needs of any location and deployment scenario. All ION devices are built with FIPS 140-2 as a security baseline. Encryption keys are specific to each customer and device, and they are rotated frequently, ensuring compliance mandates are met.
Software Models for Remote Offices
|
ION 3102V |
ION 3104V |
ION 3108V |
| Hypervisors |
ESXi 5.x+, HyperV, KVM |
ESXi 5.x+, HyperV, KVM |
ESXi 5.x+, HyperV, KVM |
| Throughput |
Up to 100 Mbps |
Up to 200 Mbps |
Up to 350 Mbps |
| vCPU |
2 |
4 |
8 |
| RAM (GB) |
8 |
8 |
8 |
| Disk (GB) |
40 |
40 |
40 |
Software Models for Data Centers
|
ION 7108V |
| Hypervisors |
ESXi 5.x+, HyperV, KVM |
| Throughput |
Up to 1000 Mbps |
| vCPU |
8 |
| RAM (GB) |
32 |
| Disk (GB) |
100 |
