topic Re: PANOS SDWAN VS CLOUDGENIX in General Topics

PANOS SDWAN VS CLOUDGENIX

FWPalolearner — Tue, 02 Nov 2021 02:49:21 GMT

Hello ,

I have a query .

When PANOS can do all SDWAN FUNCTIONS, WHAT IS THE ADVANTAGE OF CLOUGENIX ION .

.EVEN FOR BRANCHES ,PANOS SMALL BRANCH MODEL CAN PARTICIPATE IN SASE OR SDWAN , SO WHAT IS CLOUDGENIX USP ?

Re: PANOS SDWAN VS CLOUDGENIX

PavelK — Tue, 02 Nov 2021 03:22:20 GMT

Thank you for the post @FWPalolearner

CloudGenix ION appliance (Prisma SD-WAN) provides certain benefits over PAN-OS SD-WAN. On the top of my head I can come up with a few points:

- Advanced traffic steering / traffic policies

- Seamless integration with Prisma Access

- Complete management of all IOS appliances from Prisma SD-WAN portal

- Easy plug & play initial setup of ION appliance

- Detailed visualization of traffic

Kind Regards

Pavel

Re: PANOS SDWAN VS CLOUDGENIX

TomYoung — Tue, 02 Nov 2021 04:48:12 GMT

Hi @FWPalolearner ,

The answer by @PavelK is excellent. I would like to add a few pros and cons that I believe are accurate:

PAN-OS SD-WAN has more security features because of the NGFW.
Prisma SD-WAN scales better because of the automated setup.
Prisma SD-WAN is more complex.
Prisma SD-WAN integrates with other vendors. This page looks cool -> https://docs.paloaltonetworks.com/prisma/prisma-access/prisma-access-panorama-integration/secure-sdwans-with-prisma-access.html.
Prisma SD-WAN integrates with Prisma Access.

Thanks,

Tom

Re: PANOS SDWAN VS CLOUDGENIX

LAYER_8 — Fri, 05 Nov 2021 15:36:45 GMT

To add even more color:

Prisma SDWAN is cloud managed, so you are able to globally manage policies and setup natively.

It is autonomous, so when you configure a policy on how to steer traffic, no other intervention is required (set and forget, it's nice!)

The 3rd party tie ins are nice, what if you wanted to automatically import link down information and open a ticket in servicenow? All supported

Re: PANOS SDWAN VS CLOUDGENIX

FWPalolearner — Sat, 06 Nov 2021 07:32:20 GMT

Thanks all for your inputs . the point i am trying to understand is - A customer has 100 PAN FWs all accross the globe . and they want to use same hardware for SDWAN ; They are currently evaluating Fortinet FWs also which provides FW+SDWAN functionality . Why would a customer go for ION if they have PAN FW already .?

FORTIOS provides detailed visualization and advanced traffic steering . So you mean PANOS lackks in it ?

Even PAN can be managed from Cloud Panorama ?

Do you mean managing PAN ( orchestration) via cloud Panorama has limitation from SD WAN perspective ?

Re: PANOS SDWAN VS CLOUDGENIX

TomYoung — Sat, 06 Nov 2021 13:06:29 GMT

Hi @FWPalolearner ,

I definitely would not go ION if they have PAN already. PAN-OS SD-WAN is full featured, The operational simplicity of using the same device for both is significant. PAN-OS SD-WAN is the right choice for SD-WAN between PANW NGFW. Prisma SD-WAN has advantages for other environments.
PAN-OS SD-WAN has detailed visualization and advanced traffic steering. Prisma SD-WAN adds more features, but I do not know the details.
Yes, PAN-OS SD-WAN has to be managed from Panorama. So, there is centralized management and monitoring.
I don't know of any SD-WAN limitations of PAN-OS SD-WAN managed by Panorama. I think the point was that Prisma SD-WAN has more features.

For this opportunity, I really would engage a PANW SE.

Thanks,

Tom

Re: PANOS SDWAN VS CLOUDGENIX

FWPalolearner — Sat, 06 Nov 2021 13:37:05 GMT

@TomYoung Thanks Tom . This is clear .

Re: PANOS SDWAN VS CLOUDGENIX

ashah1 — Thu, 23 Jan 2025 22:22:34 GMT

To provide an update - With Strata Cloud Manager - SCM - This is not completely accurate anymore.
>>>>>>

CloudGenix ION appliance (Prisma SD-WAN) provides certain benefits over PAN-OS SD-WAN. On the top of my head I can come up with a few points:

- Advanced traffic steering / traffic policies. ---

- Seamless integration with Prisma Access ----

- Complete management of all IOS appliances from Prisma SD-WAN portal

- Easy plug & play initial setup of ION appliance

- Detailed visualization of traffic

Update -

PAN-OS SD-WAN (now called Advanced SD-WAN) can do

Advanced traffic steering / traffic policies.

- Seamless integration with Prisma Access with Prisma Access Hub Onboarding.

- Complete management of all PAN-OS appliances from Strata Cloud Manager portal (if Cloud is preferred) otherwise through On-premise Panorama if On-premise security is a MUST to meet regulatory and compliance reasons.

- Detailed visualization of traffic

As TomYoung explained, the two most IMP thing to consider is 1. If an existing PAN-OS NGFW customer (likely competing with Fortinet) than Advanced-SD-WAN make better sense and 2. On-Premise Security - SSL decryption, Layer 7 inspection and control (basically NGFW features) is needed on the same box. Of course, if Cloud or SASE is the driving factor behind the project than Prisma SD-WAN would likely make more sense.

Hope this helps.