Prisma SD-WAN ION 3000
Instant-On Network (ION) Device

Features and Benefits:

Benefits

Prisma SD-WAN ION devices offer:

• Zero-touch provisioning and deployment: Gain the advantage of automatic configuration and device claiming.
• Instant visibility into application performance: Understand how applications are performing and identify the root cause of app performance issues.
• Cloud and SaaS application deployment confidence: Meet the performance and availability demands required, including remote office WAN high availability, bandwidth, consistent latency, and dynamic path selection.

Features

Alongside these benefits, take advantage of:

• Deep SD-WAN analysis: Prisma SD-WAN provides unparalleled, actionable insights into the health and performance of your WAN application and links to help with network planning, problem resolution, and analytics. With instant visibility into application performance, you can better understand your network health and usage to determine more effective policy decisions on your network.
  • Network DVR license: With this optional license, you can retain and access up to 90 days of statistics, policy, configuration, alarms, and alerts. Network DVR is licensed per ION device.
  • WAN reporting license: With this optional license, you have access to auto-generated and downloadable reports giving network operators insight across various dimensions of their entire Prisma SD-WAN fabric; for example, utilization trends and hotspots to help customers determine if you need to do circuit upgrades or simply adjust your policies.
• Zone-based firewall license: Prisma SD-WAN ION devices include an application-based, zone-based firewall (ZBFW) configured using the same top-down, applicationcentric policies used for performance and path selection, ensuring compliance across different network circuits and interfaces. Our ZBFW is a lightweight security solution used for securing the WAN perimeter and segmenting traffic within a branch site. Further, ION devices can be configured to use on-premises security devices or external, hosted security services to provide further security for remote offices.
• Prisma SD-WAN CloudBlades: The CloudBlades platform enables API-based integration of the branch CPE and provides a centralized platform for programming as well as an app-flow engine at the CPE, access to Prisma SD-WAN telemetry, and secure authenticated API access to Prisma SD-WAN CPE and systems. As a result, businesses can easily enable the cloud-delivered branch and simplify management and operations.
• High availability (HA): ION devices feature the industry’s only HA deployment model that can survive a device failure and still preserve 100% of WAN capacity at a branch site.

At a Glance:

The Era of Network Transformation

It’s no secret that organizations worldwide are undergoing a network transformation. Cloud migration, the need for infrastructure automation, and the availability of cost-effective and high-performance broadband are all fueling this change. With these three fundamental shifts, traditional wide area network (WAN) architectures that rely on multiprotocol label switching (MPLS) networks to connect branch offices to data centers have been rendered ineffective. This has seen the rise of the software-defined wide area network (SD-WAN), which promises to enable organizations to seamlessly embrace the benefits of network transformation and remove any limitations from legacy WAN architectures.

Legacy SD-WAN Solutions Fall Short

Although SD-WAN offers numerous benefits for organizations, legacy SD-WAN approaches bring many challenges. For instance, many rely on force-fitting the traditional packet-based routing model into the cloud-ready enterprise. While this approach technically works, it’s far from optimal and cannot provide the return on investment (ROI) that SD-WAN has to offer. With Layer 3 packet-based policies, organizations are limited in creating application-based networking policies and lack application visibility, making it difficult for networking teams to deliver on application SLAs.

In addition, legacy SD-WAN solutions lack scalability and require constant manual intervention for Day 2 operations. This creates substantial administrative overhead for networking and operation teams, which can increase complexity and costs. To top it all off, legacy solutions require organizations to “bolt on” essential branch services, such as security and visibility. With multiple point products to deploy and manage, organizations struggle to maintain network and security operations while trying to keep costs low.

With all this in mind, it’s easy to see why a new generation of SD-WAN is needed.

The Next Generation of SD-WAN from Palo Alto Networks

Palo Alto Networks takes a fundamentally different approach with Prisma® SD-WAN, the industry’s first and only next-generation SD-WAN solution. Only Palo Alto Networks can provide SD-WAN with an ROI of up to 243%,1 simplify network operations by using machine learning to eliminate up to 99% of network trouble tickets, and improve the end user experience with a tenfold increase in WAN bandwidth at a lower cost than legacy architectures.

Highlights

Prisma SD-WAN provides three key architectural benefits:

• Application-defined: Gain deep application visibility with Layer 7 intelligence for network policy creation and traffic engineering. This can significantly improve the end user experience while enabling network teams to deliver SLAs for all applications.
• Autonomous: Automate operations and problem avoidance using machine learning and data science methodologies. This enables agile DevOps approaches for deployment by leveraging APIs to simplify network operations.
• Cloud-delivered: Enable delivery of all branch services to from the cloud, including networking and security. This can simplify WAN management while increasing ROI.

Lightweight Prisma SD-WAN ION branch appliance

Technical Specifications:

Prisma SD-WAN ION devices come in both hardware and software form factors to meet the needs of any location and deployment scenario. All ION devices are built with FIPS 140-2 as a security baseline. Encryption keys are specific to each customer and device, and they are rotated frequently, ensuring compliance mandates are met.

* ION 3000 ports can be configured as discrete ports or as fail-to-wire pairs.
† All IONs have an AUX port, which you can connect at a baud rate of 115200 for out-of-band management.
‡ Encrypted throughput is measured with 1400 byte HTTP packets with all features turned on.

Documentation:

Download the Palo Alto Networks Prisma SD-WAN (ION) Device Specifications Datasheet (PDF).

Download the Palo Alto Networks Prisma SD-WAN At a Glance Datasheet (PDF).