NNetify

SD-WAN / SASE technology vendor

Palo Alto Networks

Official sources describe Prisma SASE as converging cloud security, SD-WAN and digital experience management.

Contact Palo Alto Networks via Netify ↗www.paloaltonetworks.com ↗Palo Alto Networks alternativesLast verified 2026-07-29

Netify profile

Palo Alto Networks in depth

Platform and architecture

Palo Alto Networks delivers SASE as Prisma SASE: Prisma SD-WAN (formerly CloudGenix) ION appliances at the edge and Prisma Access providing cloud-delivered security from compute in 100+ locations on Google Cloud and AWS. Prisma SD-WAN is application-defined, using app-level SLAs rather than tunnel-centric routing, with Strata Cloud Manager unifying management. AIOps for SASE provides predictive monitoring across the stack.

Security and SASE capability

Security depth is the headline: ZTNA 2.0 with continuous inspection, SWG, CASB, DLP and FWaaS inherit two decades of Palo Alto firewall and threat research, with Precision AI applied across detection. Policy follows the user across branch, remote and data centre via one security model. For security-led procurement, capability per feature is consistently at the top of the market.

Service, support and channel

Direct enterprise sales plus a strong partner bench; managed Prisma SASE is available through global carriers including Orange, Verizon and NTT and UK security MSPs. Professional services and Unit 42 incident expertise back deployment. Operating the platform DIY suits mature security teams; many UK mid-market buyers take it via an MSP wrapper.

Commercials and the Netify verdict

Licensing is per user for Prisma Access plus appliance subscriptions for Prisma SD-WAN, quote based and at premium positioning. The Netify verdict: shortlist Palo Alto when security architecture leads the decision, when ZTNA depth and DLP capability carry board weight, or when consolidating onto an existing Strata or Cortex estate. Budget-led, network-first projects often find better value elsewhere.

Evaluate Palo Alto Networks properly

An AI can summarise Palo Alto Networks. It cannot gather structured, evidence-backed responses from Palo Alto Networks and its closest competitors. Describe your requirement once at netify.co.uk and Palo Alto Networks arrives pinned for an evidence-graded evaluation: the market takes position around your words, one signature publishes an anonymous notice free, and matched vendors respond side by side with pricing private to you.

AI assistants can score Palo Alto Networks against a requirements list directly with the score_vendor_fit tool on the Netify connector, and build the same position with workspace_ingest.

Questions

Palo Alto Networks: common buyer questions

What makes Prisma SD-WAN different from tunnel-based SD-WAN?

ION appliances make forwarding decisions per application against app-level SLAs rather than per tunnel, which simplifies policy for SaaS-heavy estates and feeds clean telemetry into AIOps. The trade-off is a smaller routing feature set than router-heritage rivals, so validate complex topologies.

Is Prisma Access a true ZTNA solution?

Yes. ZTNA 2.0 applies continuous trust verification and deep inspection after connection, not just at connect time, covering private apps, SaaS and web from one policy. It is among the strongest ZTNA implementations on the market.

Can Prisma SASE be consumed as a managed service?

Yes, through global providers such as Orange Business, Verizon and NTT, and through UK security MSPs. Managed routes suit buyers who want Palo Alto capability without operating Strata Cloud Manager in-house.

Key differentiators

  • Prisma SASE converges SD-WAN, cloud-delivered security, and digital experience management (ADEM) under a single platform identity.
  • Strong threat intelligence and security capability inheritance from the wider Palo Alto Networks portfolio.
  • Often selected by buyers consolidating from multiple security vendors onto a single SASE platform.

Best fit for

  • Enterprises with mature security operations that want SASE built around a leading security platform rather than a security layer on top of an SD-WAN platform.
  • Buyers consolidating CASB, SWG, ZTNA and FWaaS onto one vendor for unified policy.
  • Organisations with global SaaS-heavy traffic patterns that benefit from Prisma Access PoP coverage.

Watch-outs

  • Premium pricing relative to firewall-led SD-WAN vendors; commercial model requires careful scoping by users, bandwidth, locations and term.
  • Managed delivery is via partners (Orange Business, NTT, others); first-party managed service is not the primary model.
  • Private global backbone is not vendor-owned; cloud transport uses internet and Prisma Access PoPs.

40 features, 6 categories

Capability matrix

Each capability is graded against public source evidence. Hover any status grade for a definition. Where evidence is limited, the grade reflects that uncertainty rather than assuming the capability is present.

Service delivery and operating model

#CapabilityStatusDefinition
F01Fully managed serviceManaged-service dependentProvider designs, deploys, monitors, changes, supports and reports on the service.
F02DIY / self-managed modelYesCustomer operates SD-WAN controller, policies, updates and incident response.
F03Co-managed serviceManaged-service dependentProvider runs platform/support while customer retains selected policy or change rights.
F04Multi-tenant MSP / white-label supportPartialTenant isolation, delegated administration, branded portals, templates and service-provider scale.
F05Professional services and migration supportPartner / integratedDiscovery, design, pilot, staging, migration runbooks, rollback and training.
F06Last-mile circuit managementPartner / integratedSourcing, monitoring and support for broadband, DIA, LTE/5G, MPLS and cross-connects.
F07Lifecycle managementPartialHardware replacement, firmware upgrades, patching, renewals and EoL planning.
F08Flexible commercial modelYesPer-site, per-bandwidth, per-user, per-device, consumption, NaaS or bundled pricing.

Network architecture and transport

#CapabilityStatusDefinition
F09Encrypted overlay fabricYesSecure tunnels across broadband, DIA, MPLS, LTE/5G, satellite or private WAN.
F10Dynamic path selectionYesReal-time routing based on latency, jitter, packet loss, brownouts, MOS and policy.
F11Active-active link utilisationYesUse multiple links concurrently rather than passive backup only.
F12Application-aware routingYesIdentification and routing for SaaS, UCaaS, ERP and custom applications.
F13QoS and traffic shapingYesPer-application and per-class prioritisation, reservation and policing.
F14Packet loss remediationYesFEC, packet duplication, jitter buffering, TCP optimisation and WAN optimisation.
F15Local internet breakoutYesSecure direct internet access from branch sites.
F16MPLS coexistence and migrationYesHybrid MPLS/internet/cellular during transition.
F17Cellular and 5G supportYesIntegrated/external modem, SIM management, signal monitoring and failover.
F18Cloud on-rampYesAutomated/simplified connectivity to AWS, Azure, Google Cloud, Oracle, Equinix, Megaport and SaaS.

Gateway, PoP and backbone design

#CapabilityStatusDefinition
F19Public cloud gatewaysYesVendor-operated gateways/PoPs for SaaS optimisation, remote access or security enforcement.
F20Private PoPs / dedicated PoPsYesCustomer-hosted, dedicated or sovereign PoP options.
F21Private global backbonePartner / integratedVendor-owned or controlled backbone between PoPs.
F22Regional breakout and data residencyYesPin traffic to countries, regions or approved inspection locations.
F23Multi-cloud transit fabricYesBranch-to-cloud, cloud-to-cloud and user-to-cloud connectivity under common policy.
F24Flexible edge form factorsYesPhysical, virtual, cloud marketplace, container or uCPE.
F25High availability designYesDual appliances, dual circuits, dual power, HA clustering and gateway redundancy.
F26SLA-backed service fabricYesSLA for uptime, response, change handling and possibly latency/jitter/loss.

Security and SASE capability

#CapabilityStatusDefinition
F27Integrated next-generation firewallYesStateful firewall, app control, IPS/IDS, malware inspection and URL filtering.
F28Full SASE platformYesSD-WAN plus SWG, CASB, ZTNA, FWaaS, DLP, RBI, DNS security and threat prevention.
F29SSE ecosystem integrationYesInteroperation with Zscaler, Netskope, Palo Alto Prisma Access, Cisco Secure Access, Cloudflare etc.
F30Zero Trust Network AccessYesIdentity and posture-based access to private applications.
F31Secure web gatewayYesURL filtering, SSL inspection, malware scanning and acceptable-use controls.
F32CASB capabilityYesSaaS discovery, sanctioned/unsanctioned app control and SaaS policy enforcement.
F33Data loss preventionYesData classification, inspection, blocking, alerting and exception workflow.
F34Remote user accessYesClient or clientless access for remote workers, contractors and mobile users.
F35SOC/SIEM/SOAR integrationYesSyslog, APIs, event export, threat intelligence and workflow integration.

Operations, assurance and automation

#CapabilityStatusDefinition
F36Centralised orchestrationYesTemplates, intent-based policy, zero-touch provisioning and configuration compliance.
F37Customer portal and RBACYesReal-time status, role-based access, reporting, tickets and change requests.
F38Observability and digital experience monitoringYesApp experience, user experience, device health, SaaS telemetry and path analytics.
F39APIs and automationYesREST APIs, Terraform, webhooks, event streaming and ITSM integration.
F40Managed service assuranceUnknown24/7 NOC/SOC, proactive monitoring, incident ownership, RCA, service reviews and change governance.

Commercial

Cost model and pricing visibility

Public pricing visibility

Quote-based. No complete public enterprise price was found in reviewed sources.

Cost model

Quote-based subscriptions; appliance/ION and Prisma Access/SASE licensing typically priced by users, bandwidth, locations and term.

Evidence

Sources and exclusions

39 facts about Palo Alto Networks were re-verified on 2026-07-29 against named sources, each carrying a sentence quoted from the source and confirmed present on that page. 51 sources were used. 7 more were read and rejected, and are listed below with the reason.

Sourced facts for Palo Alto Networks, each with its grade, the source it rests on and the sentence quoted from that source.
FactFindingEvidenceQuoted from the source
Fully managed serviceManaged-service dependent[3] [6] [13]"With Prisma Access, Palo Alto Networks deploys and manages the security infrastructure globally to secure your remote networks and mobile users."
Co-managed serviceManaged-service dependent[13] [6]"The MSP provides delegated access to the customer to co-manage the policies and their specific services."
Multi-tenant MSP / white-label supportPartial[6] [14]"MSPs can securely delegate responsibilities while ensuring only authorized users can read or modify critical security configurations."
Lifecycle managementPartial[10] [19]"Palo Alto Networks manages sizing, content versioning, monitoring, upgrades, and security subscriptions."
Cellular and 5G supportYes[8]"The cellular ION devices have integrated 4G or 5G cellular modem for primary or backup WAN connectivity."
Public cloud gatewaysYes[3] [4] [11]"With Prisma Access, Palo Alto Networks deploys and manages the security infrastructure globally to secure your remote networks and mobile users."
Private PoPs / dedicated PoPsYes[10] [12]"SASE Private Location enables you to deploy Prisma Access services within your own infrastructure."
Private global backbonePartner / integrated[11] [9]"Prisma SASE leverages the infrastructure of major hyperscale providers such as Google Cloud Platform (GCP) and Amazon Web Services (AWS)."
SLA-backed service fabricYes[5] [2]"If, during any calendar month, the Service availability falls below 99.999%, Customer can submit a claim for credit"
Integrated next-generation firewallYes[3]"Threat prevention, malware prevention, URL filtering, SSL decryption, and application-based policy capabilities are built-in to provide you with the same level of security no matter where your users are or what resources they are accessing."
Data loss preventionYes[15] [1]"Discover sensitive data wherever it resides and travels."
Managed service assuranceNot found[6] [13] [19]Not found in public sources reviewed. I looked at the Managed SASE page (source 6), the Managed Prisma SASE blog (source 13), the Support Policies page (source 19) and the Prisma Access administration documentation (source 3). Palo Alto Networks operates the cloud platform and backs it with a 99.999% availability SLA, and the MSP blog refers to operational lifecycle management that includes monitoring and reporting, but no Palo Alto-operated 24/7 NOC and SOC owning customer incidents through to root cause analysis with structured service reviews and change governance is documented for Prisma SASE. On the material reviewed that wrap appears to sit with MSP partners, but no quotable sentence stating it was found, so this is recorded as unknown rather than graded.
delivery modeltechnology_vendor[3] [6] [13]"With Prisma Access, Palo Alto Networks deploys and manages the security infrastructure globally to secure your remote networks and mobile users."
underlay ownershipcustomer_supplied_only[10] [11] [9]"You provide the hypervisor, ISP links, and public IP address infrastructure."
sse layer ownershipnative[3] [15]"Threat prevention, malware prevention, URL filtering, SSL decryption, and application-based policy capabilities are built-in to provide you with the same level of security no matter where your users are or what resources they are accessing."
regulatory documentationdocumented[16]"The Federal Risk and Authorization Management Program (FedRAMP) is a U.S. Federal Government-wide program that provides a standardized approach to the security assessment, authorization, and continuous monitoring of cloud products and services."
pop count100+[4]"Prisma Access provides over 100 locations worldwide"
sla availability pct99.999[5] [2] [11]"If, during any calendar month, the Service availability falls below 99.999%, Customer can submit a claim for credit"
sectors.healthcareYes[26] [32] [24]"Healthcare providers work with Palo Alto Networks to help ensure care from anywhere is uninterrupted."
sectors.financial servicesYes[27] [32]"Empowering financial institutions to securely deliver a modern customer experience."
sectors.retail ecommerceYes[29] [42] [24]"AutoNation reduced telco costs by 25% and gained fast, reliable connectivity across its 350 locations."
sectors.manufacturingYes[28] [24] [23]"If you can bring up a secure remote access solution for 20,000 people in seven days, I think that shows we made the right choice."
sectors.energy utilitiesYes[30] [31] [32]"Electric utilities worldwide count on Palo Alto Networks® to prevent successful cyberattacks, safely modernize OT networks and exceed compliance requirements."
sectors.government public sectorYes[34] [35] [24]"Palo Alto Networks achieves FedRAMP High Authorization across network, cloud and security operations."
sectors.educationYes[35] [33] [41]"Discover how Palo Alto Networks trusted platforms and proven expertise safeguard public sector organizations — federal, K–12, higher education, and state and local government."
sectors.transport logisticsPartial[41]"Transportation"
sectors.professional servicesYes[43] [41]"Prisma Browser delivered true zero trust security to the last mile. It strengthened, complemented, and augmented our SASE strategy for hybrid workforce and workplace."
sectors.hospitality leisureYes[46] [41]"Just three members of our network team deployed 400 Prisma SD-WAN Instant-On Network (ION) devices to locations scattered throughout the country in only 12 months."
regions.uk irelandPartner / integrated[54] [55] [56] [26]"Palo Alto Networks Prisma Access (SASE)"
regions.europeYes[52] [47] [38]"In addition to the data residency controls we provide customers for all of our cloud services, Sovereign Cortex with T Security provides additional sovereign controls for every layer of the environment."
regions.north americaYes[34] [42] [46]"Palo Alto Networks achieves FedRAMP High Authorization across network, cloud and security operations."
regions.asia pacificYes[44] [45] [38]"A lean two-person security team at Zespri completed the implementation in under six months"
regions.middle east africaNot found[38] [36] [37]No service delivery evidence found. Checked the Prisma Access product page, the Prisma SD-WAN page, the Prisma Access and Prisma SASE datasheet pages, the SASE and SASE customer stories pages, the technical documentation index and the press release index, and found no Middle East or Africa point of presence, coverage or availability statement and no named customer in the region. The locations page lists offices in Qatar (Doha), Saudi Arabia (Riyadh), UAE (Dubai) and South Africa (Johannesburg), but the Netify definition explicitly excludes sales offices, so those are recorded as context only and carry no grade.
regions.latin americaNot found[23] [41] [38]Insufficient evidence to grade. Grupo Bimbo, a Mexico headquartered group, is presented on the SASE page as protecting its global connected supply chain across 35 countries and appears on the customers index labelled Manufacturing, which points towards Latin American delivery, but three candidate case study URLs all returned HTTP 404 so no country or coverage statement could be confirmed and no verbatim quote could be captured. The locations page lists Brazil (São Paulo, Rio de Janeiro) and Mexico (Mexico City) offices, which the brief excludes. Recorded as unknown rather than partial because no quotable delivery statement was obtained.
regions.china mainlandPartial[50] [38]"Prisma Access China"
organisation fit.large global enterpriseYes[32] [47] [23]"9 of 10 of the Fortune 10"
organisation fit.mid marketNot found[36] [37] [23] [51]No evidence of explicit mid-market targeting found. Checked the SASE page, Prisma Access page, Prisma SD-WAN page, both datasheet landing pages and the press release index for mid-market, midsize or SMB tiering, a mid-market product edition, or mid-market pricing, and found none. Two managed service and MSP partner page URLs were tried and both returned HTTP 404, so a partner-led mid-market motion could not be checked. Circumstantially the smaller named references sit in this bracket, American Food & Vending at 2,000 employees and Cordis at 2,500 employees, but neither is described by the supplier as a mid-market customer, and inferring a mid-market tier from customer headcount would be exactly the guesswork this exercise replaces.
organisation fit.small businessPartial[51]"flexible and accessible pricing for any small business"
published pricingdocumented[55] [56] [49] [36]"£68.86 a user"

Sources used

  1. [1] Tier 1. Prisma SASE (supplier SASE landing page) Undated. Read 2026-07-29. Supplier's own product landing page. Marketing level; used only for portfolio context, no technical figures published.
  2. [2] Tier 1. Prisma Access (product page) Undated. Read 2026-07-29. Supplier's own product page. States the 99.999% uptime SLA claim; corroborated by the SLA PDF (source 5).
  3. [3] Tier 1. Prisma Access Overview (technical documentation) Undated. Read 2026-07-29. Supplier's own administration documentation. Highest quality tier 1 source here for built-in security functions and who operates the infrastructure.
  4. [4] Tier 1. Prisma Access Locations (technical documentation) Undated. Read 2026-07-29. Supplier's own documentation. Publishes the location count and enumerates compute locations by region. Undated, so the figure is point-in-time.
  5. [5] Tier 1. Prisma Access Service Level Agreement (PDF) Undated. Read 2026-07-29. Supplier's published contractual SLA document. Strongest available evidence for availability and latency commitments and service credits.
  6. [6] Tier 1. Managed SASE (supplier page for MSPs) Undated. Read 2026-07-29. Supplier's own page. Directly evidences that fully managed and co-managed delivery is performed by MSPs using the platform, plus multitenancy and delegated administration.
  7. [7] Tier 1. Professional Services for Secure Access Service Edge Undated. Read 2026-07-29. Supplier's own consulting services page. Evidences design, deployment and operations services; silent on migration runbooks and rollback plans.
  8. [8] Tier 1. Configure Cellular Interfaces (Prisma SD-WAN documentation) Undated. Read 2026-07-29. Supplier's own administration documentation. Specific and technical; strongest source for 4G/5G transport and SIM handling.
  9. [9] Tier 1. Prisma Access Colo-Connect (technical documentation) Undated. Read 2026-07-29. Supplier's own documentation. Shows private connectivity is delivered over Google Cloud interconnect, that is, a third party's transport.
  10. [10] Tier 1. SASE Private Location (technical documentation) Undated. Read 2026-07-29. Supplier's own documentation. Decisive evidence for customer-hosted/dedicated PoP deployment and for the split of lifecycle responsibilities.
  11. [11] Tier 1. The Architecture Behind Prisma SASE and Its 99.999% Uptime (supplier blog) Published 2024-06-18. Read 2026-07-29. Supplier's own dated blog post. Explicit about reliance on GCP and AWS infrastructure, the key evidence against a vendor-owned backbone.
  12. [12] Tier 1. Why Sovereignty Controls in SASE Are the New Standard for the Modern Enterprise (supplier blog) Published 2026-04-22. Read 2026-07-29. Supplier's own dated blog. Corroborates SASE Private Location for data residency; names GDPR and CCPA only.
  13. [13] Tier 1. Fast-Track Enterprise Digital Transformation with Managed Prisma SASE (supplier blog) Published 2022-04-04. Read 2026-07-29. Supplier's own dated blog. Defines the fully managed and co-managed models and attributes both to the MSP rather than to Palo Alto Networks. Four years old, so treat as potentially superseded.
  14. [14] Tier 1. Palo Alto Networks Introduces Industry's Most Complete SASE Solution for MSPs (press release) Published 2022-02-28. Read 2026-07-29. Supplier's own dated press release. Corroborates hierarchical multitenancy and RBAC. Used as corroboration only given its age.
  15. [15] Tier 1. Enterprise DLP (product page) Undated. Read 2026-07-29. Supplier's own product page. Marketing register rather than technical, so workflow detail is thin, but it establishes the capability is first-party technology.
  16. [16] Tier 1. Palo Alto Networks Trust Center - Compliance and Certifications Undated. Read 2026-07-29. Supplier's own trust centre. Names specific frameworks and attestations rather than making a general assurance statement.
  17. [17] Tier 1. Prisma Access Datasheet (resource landing page) Undated. Read 2026-07-29. Supplier landing page only; the substantive datasheet sits behind a download. Returned no usable figures, so it carries no grade.
  18. [18] Tier 1. Prisma SASE for MSPs At a Glance (resource landing page) Undated. Read 2026-07-29. Supplier landing page only; detail sits in a gated PDF. Returned no usable verbatim text, so it carries no grade.
  19. [19] Tier 1. Support Policies Undated. Read 2026-07-29. Supplier's own page but a link index only. Returned no substantive text on RMA, firmware or end-of-life, so it carries no grade.
  20. [20] Tier 1. SASE Private Location (What's New feature listing) Published 2025-11. Read 2026-07-29. Supplier documentation hub page. The fetch returned only navigation chrome with no feature description, so nothing was graded from it; the administration page (source 10) was used instead.
  21. [23] Tier 1. Prisma SASE product page Undated. Read 2026-07-29. Supplier's own SASE landing page. Names customers (Westfield, Zespri, Colgate-Palmolive, Autodesk, Grupo Bimbo, Cordis) but publishes no PoP count, no coverage list, no pricing and no organisation-size language.
  22. [24] Tier 1. Prisma SASE customer stories index Undated. Read 2026-07-29. Supplier's own SASE case study index. Gave story URLs and informal industry labels (Relias Healthcare, AutoNation automotive retail, Ministry of Justice government, RaceTrac retail, Colgate-Palmolive manufacturing, Costa Group agriculture).
  23. [25] Tier 1. Industries index page Undated. Read 2026-07-29. Supplier's own index of dedicated industry pages. Establishes which sectors have a dedicated page: financial services, healthcare, ICS/SCADA, manufacturing, oil and gas, public sector, retail, service providers, utilities, federal.
  24. [26] Tier 1. Healthcare industry page Undated. Read 2026-07-29. Dedicated supplier healthcare page with four named healthcare customers (Nuffield Health, BayCare Health System, AZ Vesalius, Southern Nevada Health District). Strong sector evidence, though vendor-authored.
  25. [27] Tier 1. Financial services industry page Undated. Read 2026-07-29. Dedicated supplier page with one named customer (Better) and an attributed CISO quote.
  26. [28] Tier 1. Manufacturing industry page Undated. Read 2026-07-29. Dedicated supplier page with named customer Flex and an attributed CISO quote.
  27. [29] Tier 1. Retail industry page Undated. Read 2026-07-29. Dedicated supplier page with two named retail customers carrying quantified outcomes (AutoNation, Aaron's).
  28. [30] Tier 1. Electric utilities industry page Undated. Read 2026-07-29. Dedicated supplier page. Sector claim is present but no individual utility is named on the page, so evidence rests on the dedicated page rather than a named reference.
  29. [31] Tier 1. Oil and gas industry page Undated. Read 2026-07-29. Dedicated supplier page. No named oil and gas customer on the page; supports the energy grade alongside the utilities page.
  30. [32] Tier 1. About us / company page Undated. Read 2026-07-29. Supplier's own corporate stat block. Unaudited marketing figures, but the organisation-size and sector penetration claims are explicit and attributable.
  31. [33] Tier 1. Education industry page Undated. Read 2026-07-29. Dedicated supplier education page exists with headline 'Securely Connecting Students' but names no education customer in the retrieved content.
  32. [34] Tier 1. Federal government industry page Undated. Read 2026-07-29. Dedicated supplier page carrying named accreditations (FedRAMP High, DoD IL5, DoDIN APL, CSfC). Accreditation claims are verifiable against US government registers, so this is the strongest public sector evidence found.
  33. [35] Tier 1. Public sector industry page Undated. Read 2026-07-29. Dedicated supplier page naming Vallejo Flood and Wastewater District and explicitly scoping federal, K-12, higher education and state and local government.
  34. [36] Tier 1. Prisma Access product page Undated. Read 2026-07-29. Supplier product page. Checked specifically for point of presence counts, country lists and pricing; none present. Only an uptime SLA claim and 'massive hyperscale backbone' language.
  35. [37] Tier 1. Prisma SD-WAN page Undated. Read 2026-07-29. Supplier product page. Checked for coverage, locations, organisation size and pricing; none present. Only customer deployment scale (Beam Suntory, 74 locations).
  36. [38] Tier 1. Company locations page Undated. Read 2026-07-29. Supplier's office list covering 40 plus countries including Qatar, Saudi Arabia, UAE, South Africa, Brazil, Mexico and mainland China. Used only as context: the Netify definition excludes sales offices from region grading, so this cannot carry a region grade on its own.
  37. [40] Tier 1. Press release index Published 2026-06-24. Read 2026-07-29. Supplier press index, 793 releases, most recent 24 June 2026. Used to locate dated releases; dated and attributable.
  38. [41] Tier 1. Customer stories index Undated. Read 2026-07-29. Supplier customer index. Industry filter facets are enumerable (including Transportation, Hospitality, Education, Professional & Legal Services) but the card list is JavaScript paginated and only five cards rendered, so most per-sector customers could not be retrieved.
  39. [42] Tier 1. Westfield Prisma SASE case study Undated. Read 2026-07-29. Named supplier case study, industry Retail, United States, 19 malls.
  40. [43] Tier 1. Wipro case study Undated. Read 2026-07-29. Named supplier case study, industry labelled 'IT and Consulting', region Global. Deployment is Prisma Browser within a stated SASE strategy.
  41. [44] Tier 1. Zespri Prisma SASE case study Undated. Read 2026-07-29. Named supplier SASE case study, New Zealand, Agriculture. Direct evidence of Asia Pacific SASE delivery.
  42. [45] Tier 1. Village Roadshow Prisma SASE case study Undated. Read 2026-07-29. Named supplier SASE case study, Australia, Media & Entertainment. Corroborates Asia Pacific delivery.
  43. [46] Tier 1. American Food & Vending Prisma SASE case study Undated. Read 2026-07-29. Named supplier SASE case study, industry labelled Hospitality, United States, 2,000 employees, 400 Prisma SD-WAN ION devices. The only hospitality-sector SASE reference located.
  44. [47] Tier 1. VINCI case study Undated. Read 2026-07-29. Named supplier case study, France headquartered, Construction/Concessions/Energy, 200,000 endpoints. Deployment is Cortex XDR not SASE, so used only as weak European delivery context.
  45. [49] Tier 1. Prisma SASE datasheet landing page Undated. Read 2026-07-29. Supplier page. Contains no coverage or pricing data, but does carry explicit positioning language used for the price tier assessment.
  46. [50] Tier 1. Prisma Access technical documentation home Undated. Read 2026-07-29. Supplier technical documentation index. Confirms a dedicated 'Prisma Access China' documentation topic exists, but the topic page itself could not be opened (see rejected entry 35), so no licensing or partner detail was confirmed.
  47. [51] Tier 1. Press release: Palo Alto Networks Introduces the Most Secure Workspace for Small Business Published 2026-03-23. Read 2026-07-29. Dated supplier press release. Explicit, unambiguous small business targeting with stated pricing intent and US availability. Product is Prisma Browser for Business, not the SASE or SD-WAN portfolio.
  48. [52] Tier 1. Press release: Palo Alto Networks and Deutsche Telekom Bring AI-Driven Security with Advanced Sovereignty Controls for European Regulated Industries Published 2026-06-09. Read 2026-07-29. Dated supplier press release, datelined Amsterdam and Munich. Strongest European service-delivery evidence found: states data residency controls across all cloud services plus Europe-based support personnel and European governing law.
  49. [54] Tier 2. UK Government Digital Marketplace G-Cloud search results for Prisma Access Undated. Read 2026-07-29. UK Government procurement register operated by Crown Commercial Service. Independently accountable. Shows 25 plus live listings of Palo Alto Prisma Access from UK resellers, evidencing UK availability through partners rather than direct supplier delivery.
  50. [55] Tier 2. G-Cloud listing: Palo Alto Networks Prisma Access (SASE), Khipu Networks Limited Undated. Read 2026-07-29. UK Government register entry with a mandatory published price. Reseller-set price, so it reflects UK channel pricing rather than the supplier's own list price.
  51. [56] Tier 2. G-Cloud listing: Palo Alto Prisma Access, Softcat PLC Undated. Read 2026-07-29. UK Government register entry with a mandatory published price. Unit basis is stated only as 'a unit', which is less precise than the Khipu per-user figure, and the two prices disagree.

Sources found and not used

These were read and rejected as evidence. They are listed so the record can be audited rather than taken on trust, and because what a comparison refuses to rely on says as much as what it cites.

  1. [21] Prisma Access for MSPs - LIVEcommunity. https://live.paloaltonetworks.com/t5/prisma-access-for-msps-and/ct-p/Prisma_Access_for_MSPs Not used as evidence: user community forum with undated, user-generated posts and no editorial accountability.
  2. [22] Prisma Access listing on AWS Marketplace. https://aws.amazon.com/marketplace/pp/prodview-krvl6a6upwzzs Not used as evidence: third-party marketplace listing, undated and reproduced from vendor-supplied copy.
  3. [39] Company newsroom landing page. https://www.paloaltonetworks.com/company/newsroom Not used as evidence: the landing page renders only a single featured item and contained no regional or coverage announcements. Superseded by the full press index.
  4. [48] Prisma Access datasheet landing page. https://www.paloaltonetworks.com/resources/datasheets/prisma-access Not used as evidence: the landing page is a gated download wrapper and contained no location, country or point of presence statement in the retrievable HTML.
  5. [53] Palo Alto Networks UK homepage. https://www.paloaltonetworks.co.uk/ Not used as evidence: the UK domain serves identical global content with no UK-specific service delivery, data residency, customer or framework statement. A country domain is not delivery evidence.
  6. [57] Prisma Access administration overview documentation. https://docs.paloaltonetworks.com/prisma-access/administration/prisma-access-overview Not used as evidence: contains no region or location list. Recorded because eight further candidate URLs for the Prisma Access locations table and the Prisma Access China topic all returned HTTP 404, so no vendor-published point of presence list could be retrieved in this task.
  7. [58] AWS Marketplace product page attempt. https://aws.amazon.com/marketplace/pp/prodview-fdvxbxlmxnvfy Not used as evidence: the URL resolved to the AWS Marketplace homepage, not a Palo Alto SASE listing, and returned no pricing.

Claims that disagree

Where two sources conflict, both are recorded rather than one being chosen quietly. Confirm these directly with the vendor.

  • pop count. [4] Prisma Access provides over 100 locations worldwide [4] The same documentation page enumerates only roughly 70 distinct entries in its compute locations table and prints no consolidated total, so the enumerated detail does not visibly reconcile to the headline over 100 figure unless the specialty location lists are counted as well
  • f21 private global backbone. [2] The Prisma Access product page markets the service as leveraging its massive hyperscale backbone to avoid outages, wording that reads as though the backbone is the vendor's own [11] Prisma SASE leverages the infrastructure of major hyperscale providers such as Google Cloud Platform (GCP) and Amazon Web Services (AWS).
  • f01 fully managed service. [3] Prisma Access administration documentation states that Palo Alto Networks deploys and manages the security infrastructure globally, which reads as vendor-operated end to end [13] Managed SASE material attributes fully managed and co-managed customer service delivery to MSPs, with the MSP responsible for all aspects of the tenant service lifecycle including security policy configuration and operations

Verification notes

Re-verified 2026-07-29 against named primary sources. Every graded fact carries a source, a tier and a verbatim quote confirmed present on the cited page by an independent check. Industry, region, organisation-size and pricing evidence was sourced on the same basis. Facts that could not be sourced are published as unknown with the reason. The value_tier field is a Netify assessment of relative cost position, not a supplier claim: most of this market publishes no price. Sources found and rejected are listed at tier 4.

Where next

Continue your Palo Alto Networks evaluation

AI advisor · Continue from this page · Palo Alto Networks · evaluated 29 Jul 2026

Describe what you need

Your first sentence is drafted from this page. Edit it, or replace it with your own words: sites, regions, what must not go down.

Drafted from this page. Everything you type stays yours to edit before anything is published.

Palo Alto Networks arrives pinned; the evaluated market takes position around your words. Nothing runs until you go, and nothing publishes without your signature.

Opens your procurement on Netify

Working with an assistant? Connect netify.co.uk/sase/api/mcp/ and use workspace_ingest with this page as context.

Ranked shortlists featuring Palo Alto Networks

Best SD-WAN and SASE providers for Professional services · #2Best SD-WAN and SASE providers for small business · #2Best SD-WAN and SASE providers for global expansion · #2Best SD-WAN and SASE providers for Retail and e-commerce · #3Best SD-WAN and SASE providers for Manufacturing · #3Best SD-WAN and SASE providers for Energy and utilities · #3Best SD-WAN and SASE providers for Government and public sector · #3Best SD-WAN and SASE providers for Education · #3Best SD-WAN and SASE providers for Hospitality and leisure · #3Best SD-WAN and SASE providers for mpls migration · #3Best SD-WAN and SASE providers for Healthcare · #4Best SD-WAN and SASE providers for Financial services · #4Best SD-WAN and SASE providers for large global enterprise · #4Best SD-WAN and SASE providers for rapid deployment · #4Best SD-WAN and SASE providers for remote and hybrid workforce · #4Best SD-WAN and SASE providers for security consolidation · #4Best SD-WAN and SASE providers for Transport and logistics · #5Best SD-WAN and SASE providers for cost saving · #7Best SD-WAN and SASE providers for the UK public sector · #10
Score Palo Alto Networks against your requirementsBack to the evaluated directory