Performance of Prisma Access and SSL

Showing results for 
Show  only  | Search instead for 
Did you mean: 

Performance of Prisma Access and SSL

L0 Member

Hello, everyone! My organisation plans to test Prisma and Zscaler in the coming year for 30 offices in the United States, Europe, Japan, and India, totaling about 50k users. I've used Zscaler before, but not Prisma, and I'm aware that both have advanced much in the last two years. Most of our locations have gigabit bandwidth, however the majority are currently remote. Currently, customers are using VPN in full tunnel mode, so anything will be an improvement.


L6 Presenter




What is your question as it is not clear.



You can check the option to use PAC file proxy mode and to test if this or full VPN mode is better:



Secure Mobile Users With an Explicit Proxy (




With Prisma VPN mode better use IPSEC as it better performance than just SSL:


Hub - Palo Alto Networks



I think the Zscaler agent uses proxy mode (to send only http/https traffic to Zscaler) or a gre like (not gre but similar) tunnel that sends all the traffic to Zscaler similar to Prisma proxy or VPN mode.

  • 1 replies
  • 62 Subscriptions
Like what you see?

Show your appreciation!

Click Like if a post is helpful to you or if you just want to show your support.

Click Accept as Solution to acknowledge that the answer to your question has been provided.

The button appears next to the replies on topics you’ve started. The member who gave the solution and all future visitors to this topic will appreciate it!

These simple actions take just seconds of your time, but go a long way in showing appreciation for community members and the LIVEcommunity as a whole!

The LIVEcommunity thanks you for your participation!