SaaS or cloud-based delivery models for business-critical applications necessitate per-application policy enforcement without adding to remote office infrastructure. Traditional hardware-based approaches are limited from heavy-handed all-or-nothing policies for direct-to-internet versus policy enforcement per-application. Moreover, router-based approaches, being packet-based rather than application-session-based, do not fulfill application session-symmetry requirements, leading to network and security outages.

Prisma Access offers the industry’s most comprehensive secure-access service-edge (SASE), enabling an organization to connect and secure any user, device, or application. Prisma Access is ideally suited for any remote site with one or multiple internet links and provides direct internet access and the option to connect to other enterprise remote sites through Prisma Access.

The integration of Prisma SD-WAN and Prisma Access for Networks enables customers to have a lightweight remote office hardware footprint, while still providing a full suite of application-specific security policies. Prisma Access deployment can be managed by both Panorama and Cloud Management interfaces.

To facilitate this integration, Palo Alto Networks provides Prisma SD-WAN CloudBlades which:

• integrate the Prisma SD-WAN Controller, Remote Prisma SD-WAN IONs, Panorama, and Prisma Access for Networks (Panorama Managed) CloudBlade.
• enable Remote Networks to connect to Prisma Access via an industry-standard IPSec VPN using the Prisma Access for Networks (Cloud Managed) CloudBlade.

Prisma Access allows Panorama to Cloud Management migration where existing customers can use the in-product workflow to migrate their Prisma Access configuration.