>
    Strata Copilot
    Switch a Site to Control Mode
    Focus
    Download PDF
    Focus
    1. Home
    2. Prisma SD-WAN
    3. Prisma SD-WAN Administrator’s Guide
    4. Prisma SD-WAN Sites and Devices
    5. Switch a Site to Control Mode
    Download PDF
    Prisma SD-WAN

    Switch a Site to Control Mode

    Table of Contents

    Switch a Site to Control Mode

    Let us learn to switch a branch or data center site to control mode.
    Where Can I Use This?What Do I Need?
    • Prisma SD-WAN (Managed by Strata Cloud Manager)
    • Prisma SD-WAN
    Switch sites to the Control mode to push network and security policies, prioritize applications, control application paths, enable active-active WANs, and facilitate automatic zero-touch VPNs that connect all SD-WAN branches. Activate the data center after the branch is activated so that the VPNs are enabled between a branch and a data center, and can provide secure paths to reach applications hosted in the data center.
    1. Switch the Branch to Control Mode.
      1. Select ConfigurationPrisma SD-WANBranch Sites and select a site and from the ellipsis menu, select Switch to Control Mode.
      2. Select OK to confirm switching to the Control mode.
        Wait 3-5 minutes to view network and application analytics. The system uses all paths and populates all application charts.
        Alternatively, you can select Branch Sites, select a site and then in the Branch Site Details section, click Edit Site and select Control from the Mode menu.
    2. Switch the Data Center to Control Mode.
      1. Select ConfigurationPrisma SD-WANData Centers and select a site and from the ellipsis menu, select Switch to Control Mode.
        As soon as the branch and the data center are activated, an automatic VPN will be established through zero-touch configuration between the branch site and the data center over any configured internet paths and over any private WAN paths providing both the branch and data center sites connect to the same WAN network.
        No administrator action is required. The VPN path is visible on the map view of your sites.
        Configure a Secure Fabric Link Overlay between two branch sites to enable or disable as needed.

    © 2026 Palo Alto Networks, Inc. All rights reserved.