Palo Alto SD-WAN vs Prisma SD-WAN

[Amin2]

Hi could someone explain the difference between these 2 offerings from PA?

[Remo]

Hi @Amin2 

Generally Prisma means a cloudservice by Paloalto. So in this case here Prisma SD-WAN is the SD-WAN technology (formerly Cloudgenix which was aquired by Paloaltonetworks) based on ION devices. These devices are configured with a cloudservice from Paloalto. To these devices you can connect various WAN links like MPLS, LTE and so on. By policies configured in the cloud the best path will be chosen for specific traffic to be sent to your main datacenter where you need an ION-7000 or ION-9000. These ION devices are only for the SD-WAN part. They also analyze traffic to forward it to the right configured path but these are not actual firewalls. Paloalto SD-WAN is SD-WAN for Paloalto firewalls. So in addition to the best in class network security that you get with a Paloaltonetworks firewall, this subscription also enables the SD-WAN technology where you can add different WAN links to the firewall and configure them to be used all at the same time for different types of traffic including the dynamic setup of VPN tunnels (like with the ION devices) between your locations. The configuration of the Paloalto SD-WAN is not done locally on the firewalls or with panorama and not with the cloudservice.

[4cls]

ION had BGP filtering, and needs a headend like an ION 7k. It's more like DMVPN Mesh.   

[G.Thomas500655]

SD-WAN is not done locally on the firewalls or with panorama and not with the cloudservice.