>
    Strata Copilot
    Add Stacked Security Policy Sets
    Focus
    Download PDF
    Focus
    1. Home
    2. Prisma SD-WAN
    3. Prisma SD-WAN Administrator’s Guide
    4. Prisma SD-WAN Stacked Security Policies
    5. Add Stacked Security Policy Sets
    Download PDF
    Prisma SD-WAN

    Add Stacked Security Policy Sets

    Table of Contents

    Add Stacked Security Policy Sets

    Learn how to add stacked security policy sets.
    Where Can I Use This?What Do I Need?
    • Prisma SD-WAN (Managed by Strata Cloud Manager)
    • Prisma SD-WAN
    The system includes one default policy set in every advanced stack. Use this policy set to enforce baseline security behavior.
    There are two types of policy sets—Normal Policy Set and Default Policy Set. The Default Policy Set will have only the implicit policy rules i.e. Intra-Zone, Self-Zone and Catch-All Deny. The normal policy set will not have any implicit policy rules, that is, Intra-Zone, Self-Zone and Catch-All Deny.
    You can create Security Policy Sets only through the Advanced view on the Security screen.
    1. Select ConfigurationPrisma SD-WANPoliciesSecuritySecurity StacksAdvancedSecurity SetsAdd Set.
    2. On the Add Security Policy Set screen, enter a Name for the Security policy set, and enter an optional description and tags.
    3. (Optional) Select the Clone From a Policy Set check box to clone a policy set and select a policy set to clone from the Choose a Policy Set.
    4. (Optional) Select the Clone From an Original Policy Set check box to clone a policy set created under Security Policies (Original) and select a policy set to clone from the Choose an Original Policy Set.
    5. Click Done to submit your changes.

    Add a Security Policy Set to a Security Stack

    After creating security policy sets, you need to add these policy sets to a security stack. Note that you can add security policy sets to Security stacks only via the Advanced view on the Security screen.
    1. Select ConfigurationPrisma SD-WANPoliciesSecurity Security StacksAdvanced.
    2. Select a security stack for adding a security policy set.
    3. Select a policy set from the Policy Set list, and then Save.
      You can assign up to 4 policy sets to an advanced security stack.
      You can convert a simple security stack to an advanced security stack by assigning more than one policy set to the simple security stack.

    © 2026 Palo Alto Networks, Inc. All rights reserved.