The Returned Merchandise Authorization (RMA) process allows users to replace failed or malfunctioning ION devices with new or reused, functional ION devices at a branch or a data center site. A device can fail or malfunction for several reasons, such as chip failure, misconfiguration, or daily wear and tear. If the device is unusable due to a malfunction or overall failure, the RMA process can be used to replace it.

When replacing an ION device, you can opt for a replacement with a like-like (same model) or a like-unlike (different model). This flexibility allows you to select a replacement device that best suits your needs. Remember that multiple replacement devices might be available, so choose the one with the device status online.

With this enhancement, we can now replace old model devices (ION 1000, ION 2000, ION 3000, ION 7000, and ION 9000) with new model devices (ION 1200, ION 1200-S, ION 3200, ION 5200, and ION 9200).

The Enable DNS Liveliness in Tunnel feature improves HTTP probe reliability in ION devices by performing DNS lookups directly over the Service Link tunnel instead of relying on WAN interface DNS servers. Previously, ION devices sent DNS requests to all interfaces and used the first response received, which could lead to incorrect probe targeting or failures due to misconfigured or unreachable DNS servers. With this enhancement, DNS resolution occurs over the service tunnel, ensuring more accurate and reliable HTTP probes while eliminating dependency on WAN interface DNS servers.

The Prisma SD-WAN web interface is modified to improve the user experience of interfaces configuration and the usability of interface configurations between old and new platforms. The new user interface introduces a redesigned interface configuration page that utilizes full-screen width and height, implements a tabbed layout for sub interface and PPPoE configurations, and includes various user interface improvements, such as side panels for IP configuration and NAT pools. These changes are designed to enhance usability and provide a more consistent experience across platforms.

Prisma SD-WAN now supports the following features in a FedRAMP Moderate environment.

• Strata Cloud Manager User Interface
• BGPv6 of IPv4 - Core Peering
• Virtual Routing and Forwarding
• L2 Switching for ION 3200
• Used-for-HA Capability on Layer 3 Interfaces
• IPv6 BGP Support

Branch security is essential and implementing Device-ID-based policies play a key role in strengthening our defenses. By integrating these policies with App-ID and User-ID, we create a comprehensive security framework that effectively protects against threats. Earlier, with the PA/SASE license, Prisma SD-WAN customers could get enhanced visibility into OT, IoT, and endpoint devices at their branches. Now, these device IDs can be seamlessly incorporated into security policies, enabling enforcement based on specific device IDs. This advancement delivers unparalleled security and granular control over path selection.