Prisma SD-WAN

What Prisma SD-WAN does

Prisma SD-WAN is the software-defined wide area networking product line of Palo Alto Networks, Inc. (NASDAQ: PANW; headquartered in Santa Clara, California, USA). It delivers AI-powered SD-WAN as the networking foundation of the broader Prisma SASE platform, enabling Zero Trust branch transformation for distributed enterprises, governments, and managed service providers. The product runs on physical and virtual ION devices (e.g., ION 5200, ION 9200), is managed through Strata Cloud Manager or Panorama, and integrates natively with Prisma Access for cloud-delivered security.

The technical architecture centers on Precision AI applied to SD-WAN telemetry: SD-WAN fabric tunnels with IPSec/GRE over private WAN underlay, multicast routing, cellular software bypass, 5G service-provider integration, and a CloudBlades integration fabric (including an Azure vWAN CloudBlade). AI-driven operations include ADEM for digital experience monitoring, an agentic Troubleshooting Agent that autonomously diagnoses and remediates issues, a natural-language Copilot, and predictive analytics for network optimization. The product meets FedRAMP High and Moderate, DoD IL5 Provisional Authorization, and FIPS 140-2 standards, supporting regulated and federal deployments.

Commercially, Prisma SD-WAN is sold as a subscription (software and capability licenses) bundled into Prisma SASE deals, with ION hardware sold through authorized resellers (e.g., CDW) and managed services delivered by a global channel of MSPs and GSIs: Orange Business, Accenture, NTT, British Telecom, Wipro, IIJ, and Digital China Cloud. Customers include Autodesk, Colgate-Palmolive, Grupo Bimbo, Westfield, Zespri, Cordis, Encova, Webster Bank, the UK Ministry of Justice (130,000 devices), Vermont Judiciary, and PDS Health (900+ dental practices). The product is recognized as a Gartner Magic Quadrant Leader for SD-WAN in 2025 and part of the 3x Leader SASE Platforms recognition. Prisma SD-WAN is not a standalone entity; it is a sub-brand within Palo Alto Networks and does not disclose independent financials or pursue its own funding rounds.

Name

Prisma SD-WAN

Legal name

Palo Alto Networks, Inc.

Website

https://paloaltonetworks.com

Company type

Public

Founded year

2005

Operating status

Operating

Headcount range

5,001–10,000 employees

Short description

Prisma SD-WAN is the AI-powered software-defined wide area networking product line of Palo Alto Networks, delivered on ION hardware and integrated into the Prisma SASE platform to provide Zero Trust branch connectivity, managed through Strata Cloud Manager and sold to distributed enterprises, governments, and global MSPs.

Ownership category

akta.pro rank

Product category

Software-Defined Wide Area Networking (SD-WAN)

NAICS

Wired and Wireless Telecommunications (except Satellite) (5171)

SIC

Communications Services, Nec (4899)

akta.pro primary industry

Secure Access Service Edge (SASE) & Secure SD-WAN (HDAIAFAH)

akta.pro secondary industries

SD-WAN Services (Managed & Co-Managed) (HDAIAFAB), Secure SD-WAN & Branch Security (HDADABAL), Software-Defined Interconnect (SDI) / SD-WAN Cloud Gateways (HDABALAF), WAN & SD-WAN Orchestration/Controllers (HDAFAGAH)

Keywords

• Software-defined WAN
• Secure access service edge
• Zero trust networking
• Branch network security
• Managed SASE services

Headquarters

HQ city

Santa Clara

HQ country

United States

HQ region

North America

Offices1 record

Markets served

GTM type

B2B

Offering type

Software

Cost components

Personnel, Technology or R&D, Marketing or Sales, Operations, Infrastructure

Revenue model

1. Prisma SD-WAN Software Licenses and Subscriptions: Prisma SD-WAN is sold as a subscription license, typically bundled with Prisma Access or as part of the broader Prisma SASE platform subscription. Customers pay for ION device licenses and associated security/capability subscriptions on an annual or multi-year basis.
2. ION Hardware Appliances: Physical ION devices (e.g., ION 9200, ION 5200) are sold as hardware units, providing application acceleration and SD-WAN edge connectivity at branch locations.
3. Managed SASE Services via MSP Partners: MSP and channel partners (Orange Business, Accenture, NTT, BT, Wipro, IIJ) resell and manage Prisma SD-WAN deployments, providing recurring managed service revenue to Palo Alto Networks through license subscriptions and professional services.

Pricing tiers

Go-to-market motion2 records

Distribution channels6 records

Marketing channels9 records

Core offering

Prisma SD-WAN is an AI-powered software-defined WAN solution that enables Zero Trust branch transformation for distributed enterprises. The product combines cloud-native SD-WAN networking with integrated security services (Prisma SASE components) and is delivered via ION hardware appliances or virtual devices managed through Strata Cloud Manager. It is licensed primarily as a subscription bundled with Prisma Access and the broader Prisma SASE platform, with autonomous AIOps capabilities and FedRAMP-authorized government deployment options.

Product overview

Prisma SD-WAN is a core product within Palo Alto Networks' Prisma SASE platform, designed to enable Zero Trust branch transformation. The product operates as a unified SD-WAN solution with AI-powered capabilities, comprising ION hardware and virtual devices as endpoints, managed through Strata Cloud Manager. Key modules include AIOps for automated operations, ADEM for digital experience management, a Troubleshooting Agent for autonomous issue resolution, and Copilot for AI-powered assistance. Prisma SD-WAN integrates natively with Prisma Access and Azure vWAN via CloudBlades, and supports MSP deployments through a dedicated multi-tenant dashboard. The solution is available in various ION device models (ION 5200, ION 9200) with current software releases at ION 6.5 and 6.1.x branches.

Differentiator

Problem solved

Functional benefit

Brands

• Prisma SASE: AI-powered Secure Access Service Edge solution combining networking and security, including Prisma SD-WAN, Prisma Access, and Prisma Browser.
• Prisma Access
• Prisma Browser
• Strata Cloud Manager
• ION Devices

Products and services

• Prisma SD-WAN AI-powered software-defined WAN solution that enables Zero Trust branch transformation for distributed enterprises, integrating SD-WAN networking with cloud-delivered security as part of the Prisma SASE platform. Delivered to enterprise customers and government agencies.
• Prisma SD-WAN ION Devices Physical and virtual SD-WAN appliances (ION 5200, ION 9200) that serve as branch and data-center endpoints running the Prisma SD-WAN software, providing application acceleration and SD-WAN edge connectivity. Sold separately as hardware units through authorized resellers such as CDW.
• Strata Cloud Manager Cloud-based management platform that centralizes configuration, monitoring, and lifecycle management for ION devices and the SD-WAN fabric, used by enterprise customers and managed service providers to operate Prisma SD-WAN at scale.
• Prisma Access Cloud-delivered security service that integrates natively with Prisma SD-WAN to deliver comprehensive SASE capabilities, including ZTNA, FWaaS, SWG, CASB, and DLP, for secure access to applications and data across branch and remote users.
• Prisma SASE Comprehensive AI-powered SASE platform that unifies networking (including Prisma SD-WAN) and security (Prisma Access, Prisma Browser) for distributed enterprises and government customers, available as a single subscription bundle.

Quantifiable outcome

• 50% reduction in risk of a data breach
• +8 more outcomes

Named customers15 records

Segments3 records

Ideal customer profiles3 records

Technology focussed Yes

API detail

Has API

Yes

API docs

API detail

Core technology

AI maturity

App detail

Integration3 records

AI capability7 records

Feature8 records

Partnerships

Eight partnerships are on record, tiered core, major and regional.

• Orange Business / Orange CyberdefensecoreChannel Partner/ Reseller/ DistributorOrange Business and Orange Cyberdefense deliver managed SASE services with Prisma SASE, including Prisma SD-WAN, using Service Provider Interconnect capability for deeper network integration. Orange offers these services to enterprise customers globally as a managed service.
• AccenturecoreImplementation/ SI/ Consulting PartnerAccenture offers integrated SASE solutions with Prisma SASE to improve cyber resilience for enterprise clients. Accenture's consulting and implementation teams deploy and manage Prisma SD-WAN as part of broader digital transformation engagements.
• NTTcoreChannel Partner/ Reseller/ DistributorNTT enhances managed campus networks with Prisma SASE, integrating Prisma SD-WAN into NTT's managed network services portfolio. NTT Data delivers these services to enterprise customers as part of a broader managed network and security offering.
• British Telecom (BT)coreChannel Partner/ Reseller/ DistributorBritish Telecom partners with Palo Alto Networks to offer managed SASE services leveraging Prisma SD-WAN. BT's enterprise customers can access Prisma SD-WAN capabilities through BT's managed services wrapper.
• WipromajorImplementation/ SI/ Consulting PartnerWipro delivers unified SASE solutions in partnership with Palo Alto Networks, integrating Prisma SD-WAN into Wipro's managed security services for enterprise customers.
• Internet Initiative Japan (IIJ)majorChannel Partner/ Reseller/ DistributorIIJ launched managed Prisma SASE with Service Provider Interconnect, offering Japanese enterprise customers managed SD-WAN and SASE services built on the Prisma SASE platform.
• Azure (Microsoft)coreTechnology or IntegrationPrisma SD-WAN integrates with Microsoft Azure Virtual WAN through the Azure vWAN CloudBlade, enabling customers to use Prisma SD-WAN as the SD-WAN edge for Azure vWAN deployments. This provides seamless connectivity between branch offices and Azure cloud workloads.
• Digital China CloudregionalChannel Partner/ Reseller/ DistributorDigital China Cloud serves as the local operator for Prisma Access China and Prisma Cloud China solutions, providing localized distribution and support for Palo Alto Networks products in China.

Scale indicators8 records

Recent moves6 records

Expansion highlights6 records

Direct peers

• Cato Networks: Cato's cloud-native SASE platform unifies SD-WAN, SSE, and ZTNA in a single global PoP fabric and is consistently cited as a SASE MQ Leader — directly challenging Prisma SD-WAN's converged-branch-plus-SASE positioning, especially with cloud-first enterprises.
• Fortinet: Fortinet Secure SD-WAN, integrated with FortiGate and FortiSASE, directly competes with Prisma SD-WAN by combining SD-WAN, NGFW, and SASE from a single vendor — closely mirroring Palo Alto Networks' integrated security + networking play.
• Aryaka Networks: Aryaka delivers managed SD-WAN and SASE-as-a-service over its private global backbone, competing with Prisma SD-WAN for the same enterprise branch-modernization buyer — particularly mid-market and global organizations buying managed services.
• VMware VeloCloud (Broadcom): VMware SD-WAN by VeloCloud, now part of Broadcom, is one of the most widely deployed SD-WAN platforms globally and competes directly with Prisma SD-WAN for enterprise branch-transformation and hybrid-cloud connectivity deals.
• Versa Networks: Versa Unified SASE combines SD-WAN with integrated security and is repeatedly positioned alongside Prisma SD-WAN in Gartner SASE evaluations, with strong traction among service providers and mid-to-large distributed enterprises.
• HPE Aruba Networking (Silver Peak): HPE Aruba's EdgeConnect SD-WAN (formerly Silver Peak) is a top-tier SD-WAN platform now integrated with HPE's edge and data-center portfolio, directly competing with Prisma SD-WAN for enterprise branch deployments and increasingly for SSE-coupled deals.
• Zscaler: Zscaler's Zero Trust SASE platform (ZIA/ZPA plus ZDX) is a direct cloud-delivered alternative to Prisma SD-WAN + Prisma Access, frequently chosen by enterprises standardizing on SSE-centric SASE rather than appliance-based SD-WAN.
• Cloudflare: Cloudflare Magic WAN and Cloudflare One deliver cloud-native SD-WAN and SASE without branch hardware, directly competing with Prisma SD-WAN — particularly for enterprises simplifying branch architectures and moving to cloud-delivered overlays.
• Cisco Catalyst SD-WAN (Viptela): Cisco's Catalyst SD-WAN (built on the Viptela acquisition) is the largest incumbent SD-WAN by enterprise share and competes head-to-head with Prisma SD-WAN in distributed-enterprise WAN and SASE convergence deals, with overlapping branch, routing, and security feature sets.

Broad incumbents

• Juniper Networks (HPE) Mist WAN Assurance: Juniper's Mist AI-driven WAN Assurance and Session Smart SD-WAN compete with Prisma SD-WAN in AI-led branch networking; as part of HPE, it now sits within a broader networking incumbent portfolio overlapping Prisma's enterprise base.

Market position

Strengths5 records

Weaknesses5 records

Competitive moat6 records

Key risks6 records

Key highlights7 records

Customer concentration

• Xx.com/PrismaSDWAN
• YouTubeyoutube.com/user/paloaltonetworks
• Facebookfacebook.com/PaloAltoNetworks
• LinkedInlinkedin.com/company/prismasdwan

Compliance4 records

Revenue estimate

Valuation estimate

Number of profiles

Funding overview

Funding rounds4 records

Investors5 records

Funding detail is available on the Subscription and Enterprise plan.Contact sales →

M&A

Investments

M&A and investment is available on the Subscription and Enterprise plan.Contact sales →

Frequently asked questions about Prisma SD-WAN