Deployment Modes

Lean about the deployment modes of Prisma SD-WAN, Analytics, Control, and Disabled mode.
Deploy Prisma SD-WAN in one of the three modes—Analytics, Control, or Disabled.
  • In the Analytics mode, the branch ION device sits in-path, between a branch router and a LAN switch. It monitors traffic but does not apply policies or make path selection decisions for applications. You don’t require a data center site in this mode. When the branch is in Analytics mode, there won't be any VPN connections to the data center site.
  • In the Control mode, the branch ION device sits in-path between a branch router and a LAN switch or replaces the router at a branch. It forwards traffic, selects the best path available, and applies security and Quality of Service (QoS) policies. You require an ION 7000 or ION 9000 in the data center if the intent is to enable a native Prisma SD-WAN virtual private network (VPN) between a branch and a data center.
  • In the Disabled mode, the branch ION device sits in-path and acts as a link between a branch router and a LAN switch. It does not monitor traffic, no policies are applied, and no path selection decisions for applications are applicable.

Recommended For You