topic Performance of Prisma Access and SSL in Prisma Access Discussions

Performance of Prisma Access and SSL

bisky18 — Tue, 11 Jan 2022 05:46:30 GMT

Hello, everyone! My organisation plans to test Prisma and Zscaler in the coming year for 30 offices in the United States, Europe, Japan, and India, totaling about 50k users. I've used Zscaler before, but not Prisma, and I'm aware that both have advanced much in the last two years. Most of our locations have gigabit bandwidth, however the majority are currently remote. Currently, customers are using VPN in full tunnel mode, so anything will be an improvement.

Re: Performance of Prisma Access and SSL

nikoolayy1 — Wed, 12 Jan 2022 11:24:23 GMT

Hello,

What is your question as it is not clear.

You can check the option to use PAC file proxy mode and to test if this or full VPN mode is better:

Secure Mobile Users With an Explicit Proxy (paloaltonetworks.com)

With Prisma VPN mode better use IPSEC as it better performance than just SSL:

Hub - Palo Alto Networks

I think the Zscaler agent uses proxy mode (to send only http/https traffic to Zscaler) or a gre like (not gre but similar) tunnel that sends all the traffic to Zscaler similar to Prisma proxy or VPN mode.