As more internet services move to the cloud, PAN-OS Secure SD-WAN now offers security in the cloud using Prisma Access, in addition to security on-premises using PAN-OS firewalls. The SD-WAN hub-and-spoke topology now supports a Prisma Access hub. You can secure your internet traffic for specific applications at the branch location or in the cloud with Prisma Access and have this traffic fail over to any other VPN tunnel if necessary.

SD-WAN now allows you to combine multiple ISP services into an Aggregated Ethernet (AE) interface for link redundancy. The AE interface supports subinterfaces that you tag for different ISP services using Layer 3 VLAN tags to achieve end-to-end traffic segmentation.