Secure Access Service Edge (SASE)Prisma SD-WAN
Application-aware, cloud-managed SD-WAN — the networking half of SASE.
Palo Alto Networks Prisma SD-WAN delivers application-aware, cloud-managed software-defined WAN with autonomous operations — connecting branches and users with optimal performance and forming the networking foundation of the Prisma SASE platform. Its ION devices provide zero-touch, application-defined connectivity. Faltrox designs, deploys, and operates it as part of a managed SASE architecture.
Overview
What Prisma SD-WAN is
Traditional WAN is application-blind and hard to operate at scale. Prisma SD-WAN takes an application-defined, autonomous approach: it recognises applications, steers each over the best available path, and self-heals — cloud-managed with zero-touch provisioning through its Instant-On Network (ION) devices.
As the networking component of Prisma SASE, it connects branches and users into the SASE fabric and pairs with Prisma Access for cloud-delivered security, giving one platform for networking and security. Application-aware routing, autonomous operations, and rich analytics deliver optimal performance and simpler operations across a distributed enterprise. Faltrox designs the topology, deploys the ION devices, and operates the SD-WAN as part of managed SASE.
Coverage
What it protects
The platforms, threats, and surfaces this product is built to defend.
Distributed Branches
Connects branches with application-aware, cloud-managed SD-WAN.
Application-Aware Routing
Recognises applications and steers each over the best available path.
Autonomous Operations
Self-healing, autonomous operations reduce manual troubleshooting.
SASE Networking
Forms the networking foundation of the Prisma SASE platform with Prisma Access.
Zero-Touch ION Devices
Instant-On Network devices provision with zero touch at each site.
Rich Analytics
Application and network analytics give visibility into performance.
How it works
The mechanism
How the product moves from signal to protected state, step by step.
- 01
Provision
ION devices provision with zero touch when they come online at each branch and join the cloud fabric.
- 02
Recognise
The SD-WAN recognises applications and understands their performance requirements.
- 03
Steer
Application-aware routing steers each application over the best available path in real time.
- 04
Self-Heal
Autonomous operations detect and remediate performance issues, reducing manual troubleshooting.
- 05
Operate
Faltrox designs the topology, deploys the ION devices, and operates the SD-WAN as part of managed SASE.
Capabilities
Key capabilities
Application-Defined Fabric
Recognises applications and steers each over the best available path by performance.
Autonomous Operations
Self-healing, autonomous operations reduce manual troubleshooting and outages.
Zero-Touch ION Devices
Instant-On Network devices provision with zero touch at each site.
Cloud-Managed
Managed from the cloud for consistent operation across a distributed enterprise.
SASE Networking Foundation
The networking component of Prisma SASE, pairing with Prisma Access for security.
Rich Analytics
Application and network analytics give visibility into performance and health.
Optimal Performance
Delivers optimal application performance across the distributed WAN.
Simplified Operations
Application-defined, autonomous approach simplifies WAN operations at scale.
Works with
Part of the platform
Palo Alto Networks products this pairs with, and the Faltrox services that operate it.
Delivery
You buy the outcome, not the console
Managed by Faltrox
Faltrox licenses, deploys, and tunes Palo Alto Networks Prisma SD-WAN for your environment, then runs it as part of a managed service, so you get the protection without staffing another security console.
FAQ
Common questions
01What makes Prisma SD-WAN "application-defined"?
Rather than routing by IP or port, it recognises the actual application and understands its performance requirements, then steers each application over the best available path. That application awareness is what lets it optimise performance for business-critical apps automatically.
02What are ION devices?
Instant-On Network (ION) devices are the SD-WAN appliances at each branch. They provision with zero touch when they come online, so remote sites are brought up without on-site expertise — a key operational advantage for distributed organisations.
03How does it fit into SASE?
Prisma SD-WAN is the networking component of Prisma SASE — it connects branches and users into the fabric, and pairs with Prisma Access (the security service edge) so networking and security are delivered from one platform. Faltrox designs both together.
04What does "autonomous operations" give us?
Self-healing operations that detect and remediate performance issues automatically, reducing the manual troubleshooting that dominates traditional WAN operations — so the network adapts to problems rather than waiting for an engineer.
05How does Faltrox operate it?
We design the SD-WAN topology, deploy the ION devices, integrate it with Prisma Access for security, and operate and monitor the fabric — delivering it as the networking half of a managed SASE architecture.
Start an engagement
Secure what’s next.
Speak with the engineering team to define scope, walk through the methodology, and decide whether Faltrox is the right team to test and run your environment.
Contact us