>
    Strata Copilot
    Your Prisma SD-WAN License
    Focus
    Download PDF
    Focus
    1. Home
    2. Prisma SD-WAN
    3. Prisma SD-WAN Activation and Onboarding
    4. Your Prisma SD-WAN License
    Download PDF
    Prisma SD-WAN

    Your Prisma SD-WAN License

    Table of Contents

    Your Prisma SD-WAN License

    Learn about the Prisma SD-WAN licenses.
    Where Can I Use This?What Do I Need?
    • Prisma SD-WAN
    • Prisma SD-WAN license
    The Prisma SD-WAN licensing model allows customers to consume the capabilities of Prisma SD-WAN aligned to their business needs in a simple, cost-effective, and flexible manner that delivers the fastest return on investment. The Prisma® SD-WAN Instant-On Network (ION) models of hardware and software devices enable integration of a diverse set of WAN connection types, and cloud-delivered branches, improved application performance and visibility, and help reduce the overall cost and complexity of your WAN.
    Each Prisma SD-WAN ION data center (DC) or branch device requires an accompanying subscription license for operational use. All such subscriptions have a minimum term of one year and a maximum term of five years.
    • Data Center Subscription
      A DC subscription license must be purchased for each ION device (physical or virtual) that will be assigned to a data center site. This license may be used only with ION device models that support data center mode and encompasses the essential feature set tailored for DC sites and bandwidth up to the device throughput as documented in the ION device specifications datasheet.
    • Branch Subscription
      Branch subscriptions encompass the requisite feature set for branch deployments and specify the bandwidth utilization as per the licensed subscription terms. Prisma SD-WAN customers can choose from one of the following licensing models for their branch subscriptions to better align with their deployment needs:
      • Per-device subscription
      • Per-branch site subscription
      • Aggregate bandwidth subscription
      Determining the appropriate licensing model should always be part of the initial opportunity sizing exercise. Customers may use only one type of branch subscription license for all the branch sites in their tenant.

    Branch Subscription Per Device

    A branch subscription license must be purchased for each ION device (physical or virtual) deployed at a branch site. This option is recommended for customers with a single ION device per site in the majority of their branches. Branch subscriptions per device are available in the following tiers:
    • Small (S)—up to 25 Mbps
    • Medium (M)—up to 250 Mbps
    • Large (L)—up to 2,500 Mbps
    Bandwidth tiers represent the maximum bandwidth (ingress + egress) passing through an ION device. For a high availability (HA) pair, each ION device in the pair requires a separate license. A zone-based firewall (ZBFW) add-on is always included in the list price with this license option. The two optional add-on licenses below may be added per physical or virtual device that will be deployed with a device-based branch subscription. Just like the bandwidth subscriptions, these add-on licenses have a minimum term of one year and a maximum term of five years:
    • WAN Clarity Reporting (WCR)—AIOps capabilities and system-generated reports
    • Clarity Network DVR—data retention and visibility beyond the default seven days
    Clarity Network DVR and WAN Clarity Reporting are features, which are enabled at the tenant (customer) level. They must be purchased for every branch device. As such, if an existing customer has previously purchased Clarity Network DVR, they must purchase Clarity Network DVR for all branch devices in a new order. There are no options to selectively have Clarity Network DVR and WAN Clarity Reporting for some branch sites but not others. While the Small/Medium/Large subscription model should cover the majority of use cases, Alternative branch subscriptions per device are also available in the following tiers: 25 Mbps, 50 Mbps, 150 Mbps, 250 Mbps, 500 Mbps, 1 Gbps, and 2.5 Gbps.

    Branch Subscription Per Site

    A branch subscription license is shared by all ION devices (physical and virtual) deployed in a branch site. This option is recommended for customers with a higher number of HA sites or with two or more ION devices per branch site. Branch subscriptions per site are available in the following tiers:
    • Small (S)—up to 25 Mbps across all ION devices in a branch site
    • Medium (M)—up to 250 Mbps across all ION devices in a branch site
    • Large (L)—up to 2,500 Mbps across all ION devices in a branch site
    Bandwidth tiers represent the maximum site circuit bandwidth (ingress + egress) across all ION Devices (LAN to WAN and WAN to LAN) deployed in the same branch site. Per-site licenses include ZBFW, DVR, and WCR in the list price.

    Branch Subscription On Demand (Aggregate Bandwidth)

    With this licensing model, customers have the option to purchase an aggregate bandwidth quantity (in Mbps) that can be shared across all their branch sites, including HA scenarios. Aggregate Bandwidth subscription includes ZBFW, WCR, and DVR. This option is recommended for customers who have an accurate measurement of the bandwidth consumption across their entire deployment. When using this licensing model, the minimum average bandwidth across all branch devices must be at least 10 Mbps per device.

    © 2025 Palo Alto Networks, Inc. All rights reserved.