Overview
The Prisma® SD-WAN Instant-On Network (ION) models of hardware and software devices enable the integration of a diverse set of wide area network (WAN) connection types, improve application performance and visibility, enhance security and compliance, and reduce the overall cost and complexity of your WAN. Built with the intent to transform branch infrastructure, Prisma SASE powers the branch of the future with next generation SD-WAN.
Highlights
- Extend Prisma SD-WAN between remote offices, data centers, and AWS cloud
- End-to-end application performance for exceptional user experience
- Improved security outcomes with integrated security
Details
Sold by
Categories
Delivery method
Delivery option
Prisma SD-WAN Greenfield Deployment
Prisma SD-WAN Brownfield Deployment
Prisma SD-WAN HA Greenfield Deployment
Latest version
Operating system
OtherLinux v6.5.1
Features and programs
Financing for AWS Marketplace purchases
AWS Marketplace now accepts line of credit payments through the PNC Vendor Finance program. This program is available to select AWS customers in the US, excluding NV, NC, ND, TN, & VT.
Pricing
Pricing and entitlements for this product are managed through an external billing relationship between you and the vendor. You activate the product by supplying a license purchased outside of AWS Marketplace, while AWS provides the infrastructure required to launch the product. AWS Subscriptions have no end date and may be canceled any time. However, the cancellation won't affect the status of the external license.
Additional AWS infrastructure costs may apply. Use the AWS Pricing Calculator to estimate your infrastructure costs.
Vendor refund policy
Refunds provided in accordance with customer license and sales agreement
Legal
Vendor terms and conditions
Upon subscribing to this product, you must acknowledge and agree to the terms and conditions outlined in the vendor's End User License Agreement (EULA) .
Content disclaimer
Vendors are responsible for their product descriptions and other product content. AWS does not warrant that vendors' product descriptions or other product content are accurate, complete, reliable, current, or error-free.
Delivery details
Prisma SD-WAN Greenfield Deployment
"""The Prisma SD-WAN greenfield CloudFormation template will deploy and configure the following:
- A new VPC
- 1 private and 1 public subnet
- An Internet Gateway
- Route tables associated with each subnet
- The public subnet has a default route to the new Internet Gateway
- A single elastic IP to be assigned to the Prisma SD-WAN instance interface in the public subnet
- 2 security groups, one for the Prisma SD-WAN interface in the public subnet and one for the Prisma SD-WAN interfaces in the private subnet
- A Prisma SD-WAN EC2 instance with the appropriate associations to the elastic IP, security groups, subnets, and user supplied meta-data to register the ION to the customer's portal"""
CloudFormation Template (CFT)
AWS CloudFormation templates are JSON or YAML-formatted text files that simplify provisioning and management on AWS. The templates describe the service or application architecture you want to deploy, and AWS CloudFormation uses those templates to provision and configure the required services (such as HAQM EC2 instances or HAQM RDS DB instances). The deployed application and associated resources are called a "stack."
Additional details
Usage instructions
To use the Prisma SD-WAN virtual ION v6.5.1 AWS:
- To procure a license please contact your Palo Alto Networks account manager directly, or request via http://www.paloaltonetworks.com/sase/sd-wan#connect
- Obtain a token/secret from http://stratacloudmanager.paloaltonetworks.com (Settings -> ION License Management)
- Launch the appropriate AWS CloudFormation Template for your use case
- Brownfield to insert the ION instance into an existing VPC
- Greenfield to create a new VPC with the ION instance deployed
- Greenfield HA to create a new VPC with the 2 ION instance deployed in seperate availability zones
- Once the image boots it will show up in your Prisma SD-WAN tenant in Strata Cloud Manager as online-unclaimed, claim the device and configure per your requirements
- Follow the getting started guide here for more details http://docs.paloaltonetworks.com/content/dam/techdocs/en_US/supporting/prisma-sd-wan/prisma-sd-wan-ion-aws-deployment.pdf
Resources
Vendor resources
Support
Vendor support
Email and telephone support provided in accordance with customer license and sales agreement
AWS infrastructure support
AWS Support is a one-on-one, fast-response support channel that is staffed 24x7x365 with experienced and technical support engineers. The service helps customers of all sizes and technical abilities to successfully utilize the products and features provided by HAQM Web Services.
Similar products
Prisma Cloud (Annual Contract)
By Palo Alto Networks
Prisma Cloud by Palo Alto Networks enhances security across your entire AWS environment for a proactive and unified defense against cloud risks.
Prisma Access ZTNA Connector Virtual Appliance
By Palo Alto Networks
Prisma Access ZTNA Connector Virtual Appliance for AWS Cloud
Premium Customer Success for Prisma Cloud
By Palo Alto Networks
Premium Success plan gives you access to Customer Success experts who will orchestrate and tailor your strategy to ensure you get the most out of your Prisma™ Cloud investment. To acquire rates, please inquire at prismacloudsales@paloaltonetworks.com
Customer reviews
Kevin B.
Stable, and top tier cloud management
Reviewed on Apr 24, 2025
Review provided by G2
What do you like best about the product?
I've worked with these products by Palo Alto in my organization ( +5000 employees) and the thing I enjoyed the most is that in my 3 year experince with it it has sempliefied my daily job and saved many costs in the 3 years. It's a well designed and well built product.
What do you dislike about the product?
VRF features are less implementable compared to Ciscos or Fortinet, this product is also mostly designed for hub-spoke and this gave us quite some limitations and the documentation they provide is not enough.
What problems is the product solving and how is that benefiting you?
The main reason we had to deploy it is cause we as service provider had to manage a large IaaS covering 300 corporate customer and Prisma offered a great centralized and friendly management with security integreted features and some great improvement in our network performance
Leave a comment0 comments
Automotive
Review of Prisma SD-WAN by Palo Alto Networks
Reviewed on Apr 24, 2025
Review provided by G2
What do you like best about the product?
Prisma SD-WAN provides excellent application-aware routing, ensuring that critical applications receive the necessary bandwidth and low latency. This has greatly improved our overall network performance.
What do you dislike about the product?
The initial setup can be somewhat complex and time-consuming, especially for organizations without prior experience with SD-WAN solutions. However, the comprehensive documentation and support from Palo Alto Networks help mitigate this issue.
What problems is the product solving and how is that benefiting you?
Prisma SD-WAN helps solve problems like complex network management, inconsistent application performance, security vulnerabilities, and high costs. It benefits you by making network management easier, improving application performance, enhancing security, and reducing costs. Overall, it simplifies operations and ensures your network runs smoothly and securely.
Dudás G.
From 5 years of using PA
Reviewed on Apr 18, 2025
Review provided by G2
What do you like best about the product?
Ease of Use
Palo Alto SD-WAN excels in its intuitive interface, which simplifies policy management and traffic prioritization. Leveraging my experience with CheckPoint and Stormshield NGFW platforms, I found Palo Alto’s centralized dashboard particularly streamlined for configuring QoS policies and monitoring application performance. The visual topology mapping reduces complexity in troubleshooting, aligning with my work in global WAN environments (MPLS, IPSEC, SSLVPN).
Palo Alto SD-WAN excels in its intuitive interface, which simplifies policy management and traffic prioritization. Leveraging my experience with CheckPoint and Stormshield NGFW platforms, I found Palo Alto’s centralized dashboard particularly streamlined for configuring QoS policies and monitoring application performance. The visual topology mapping reduces complexity in troubleshooting, aligning with my work in global WAN environments (MPLS, IPSEC, SSLVPN).
What do you dislike about the product?
Cost and Licensing Overhead
The platform’s premium pricing model and feature-tiered licensing (e.g., advanced security modules, cloud integrations) may strain budgets for small-to-medium enterprises. This contrasts with open-source or cost-flexible solutions like pfSense or Fortinet, which you’ve likely encountered in past roles at smaller firms.
The platform’s premium pricing model and feature-tiered licensing (e.g., advanced security modules, cloud integrations) may strain budgets for small-to-medium enterprises. This contrasts with open-source or cost-flexible solutions like pfSense or Fortinet, which you’ve likely encountered in past roles at smaller firms.
What problems is the product solving and how is that benefiting you?
Deploying Prisma SD‑WAN at the Hungarian State Treasury has given me a single, cohesive platform to manage thousands of encrypted tunnels, enforce uniform security postures, and deliver predictable performance to all branches—without the typical silos, manual overhead, or visibility gaps of legacy WAN architectures.
Sonila G.
Very helpful for daily tasks
Reviewed on Apr 17, 2025
Review provided by G2
What do you like best about the product?
Clear dashboard . It gives strong insights into network activity, which really helps with troubleshooting. Details like threat detection and URL filtering are good, and WildFire adds an additional layer of safety through catching threats before.
What do you dislike about the product?
Everything is fine for now.
There is nothing I dislike.
The price is ok, no high prices and comparing to other tools, I find it the best. Very easy to use.
There is nothing I dislike.
The price is ok, no high prices and comparing to other tools, I find it the best. Very easy to use.
What problems is the product solving and how is that benefiting you?
Protect the network with the cloud network security.
Allows us to stop the latest and most sophisticated web-based threats.
We benefit from deep visibility and command of all applications with controls and contextual policies to protect our sensitive data.
Allows us to stop the latest and most sophisticated web-based threats.
We benefit from deep visibility and command of all applications with controls and contextual policies to protect our sensitive data.
Łukasz W.
SD-WAN makes life easier
Reviewed on Apr 15, 2025
Review provided by G2
What do you like best about the product?
What I really like is how much simpler it makes network management, especially across multiple sites. The interface is clean and easy to work with, and being able to monitor traffic and performance in real-time has been a huge plus. It handles routing decisions smartly based on app performance, which saves a lot of time and troubleshooting.
What do you dislike about the product?
We also ran into a few hiccups integrating it with some of our older systems. Another small gripe is that some features you might expect to be included require extra licensing, which adds up. Support has been okay, but there were a few times we had to wait longer than we’d like for responses.
What problems is the product solving and how is that benefiting you?
One of the main things Prisma SD-WAN helped us with was simplifying how we connect all our branch locations. Before, managing that was a bit of a mess and took a lot of time. Now we can see everything in one place and don’t have to rely on MPLS like we used to.