New Features - Prisma SD-WAN - February 2026

Prisma SD-WAN now provides alerts when ION devices run End-of-Life (EoL) software versions. These notifications help you maintain a secure and supported network environment by identifying outdated software. You can view visual indicators on the Prisma SD-WAN Devices page and in Device distribution by software version charts. These notifications provide immediate context to help you quickly identify devices that need attention.

To plan upgrades for optimal performance, use the direct links provided in the alerts to access the Release Guidance and End-of-Life Summary .

Key Benefits of these notifications are:

• Maintain Security: Identify devices running unsupported software to strengthen your system security.
• Simplify Monitoring: Use centralized visual indicators to track software status across your network.
• Streamline Upgrades: Access critical documentation directly from the management interface to reduce troubleshooting time.

The Site Protection Profile (SPP) for ION devices mitigates risks associated with unchecked network flow generation. This feature allows you to actively measure and throttle the number of active flows per source IP address to prevent a single entity from degrading network performance.

The key Site Protection Profiles capabilities are:

• Broad Support: Implement SPP on all hardware and virtual ION devices.
• Automated Incidents: The system generates a FLOW_LIMIT_PER_SOURCE_EXCEEDED incident when flow counts exceed your defined threshold (1% to 100%).
• Smart Exemptions: Multicast traffic, scan-app flows, and self-generated ION device traffic are exempt from throttling to ensure core connectivity.
• Centralized Management: Configure and deploy profiles using Strata™ Cloud Manager.

Prisma SD-WAN features a Site Snapshot yaml-based tool for managing Prisma SD-WAN site configurations. This feature allows administrators to export existing site settings into a comprehensive file, which can then be used to update the existing site or seamlessly deploy new ones. By simplifying configuration replication, Site Snapshot ensures consistency and significantly boosts operational efficiency, which can be leveraged in both the web interface and API.

You can deploy a new site or redeploy an existing site's configuration by using a yaml file. This automates site creation and configuration, ensuring consistency based on a predefined yaml specification. The system extracts the site's name from the yaml file to manage deployment jobs. To change any parameters in a snapshot, download the file and modify it locally on your computer before re-importing it to the controller. This allows you to make precise adjustments to site parameters because all values are hardcoded.