The following figure shows a single Clean Pipe in more detail
for a tenant who wants a clean connection to the internet. The Customer
Edge (CE) router provides WAN connectivity for the tenant. The CE
router connects to a cloud router, and the cloud router provides
connectivity for the Partner Interconnect. The service provider creates
a VLAN attachment for the tenant, and configures
Prisma Access
for
Clean Pipe in Panorama to provide security for the VLAN attachment,
which protects the tenant’s internet-based traffic.