Lean about the deployment modes of Prisma SD-WAN, Analytics,
Control, and Disabled mode.
Deploy Prisma SD-WAN in one of the three
modes—Analytics, Control, or Disabled.
In the Analytics mode, the branch ION device sits in-path,
between a branch router and a LAN switch. It monitors traffic but
does not apply policies or make path selection decisions for applications.
You don’t require a data center site in this mode. When the branch
is in Analytics mode, there won't be any VPN connections to the
data center site.
In the Control mode, the branch ION device sits in-path between
a branch router and a LAN switch or replaces the router at a branch.
It forwards traffic, selects the best path available, and applies
security and Quality of Service (QoS) policies. You require an ION
7000 or ION 9000 in the data center if the intent is to enable a
native Prisma SD-WAN virtual private network (VPN) between a branch
and a data center.
In the Disabled mode, the branch ION device sits in-path and
acts as a link between a branch router and a LAN switch. It does
not monitor traffic, no policies are applied, and no path selection
decisions for applications are applicable.