Palo Alto Networks Prisma SASE

MSPs can securely delegate responsibilities while ensuring only authorized users can read or modify critical security configurations. Hierarchical multitenancy and granular role-based delegated administration are evidenced on the Managed SASE page (source 6) and the 2022 MSP press release (source 14), which describes a cloud-based management portal with hierarchical multitenancy using granular role-based access control. Graded partial rather than yes because no evidence of branded or white-label portals and service templates carrying the MSP's own brand was found on the pages reviewed; the Prisma SASE for MSPs datasheet (source 18) is gated and returned no usable text.

Palo Alto Networks manages sizing, content versioning, monitoring, upgrades, and security subscriptions. For the cloud service and for SASE Private Location, Palo Alto Networks handles sizing, content versioning, upgrades and security subscriptions as part of the service. Graded partial because hardware replacement and RMA, ION appliance firmware handling, renewals and end-of-life planning were not evidenced: the Support Policies page (source 19) is a link index that returned no substantive text, and no RMA or end-of-life policy document was read in this task.

With Prisma Access, Palo Alto Networks deploys and manages the security infrastructure globally to secure your remote networks and mobile users. The PoPs are Palo Alto Networks' own service, sold under its own brand and covered by its own SLA, so this is yes rather than partner_integrated. Recorded for transparency: the compute those PoPs run on is rented from GCP and AWS (source 11), which is a hosting arrangement rather than reselling another vendor's SASE gateway service.

SASE Private Location enables you to deploy Prisma Access services within your own infrastructure. SASE Private Location is a customer-hosted deployment of Prisma Access services on the customer's own hypervisor and ISP links, with Palo Alto Networks retaining backend management. Corroborated by the sovereignty blog (source 12), which states that for organisations with the most stringent data residency requirements Palo Alto offers SASE Private Location. Colo-Connect (source 9) is a different thing: private connectivity into the shared cloud, not a dedicated PoP.

Prisma SASE leverages the infrastructure of major hyperscale providers such as Google Cloud Platform (GCP) and Amazon Web Services (AWS). Inter-region transport rides the backbones of Google Cloud and AWS rather than a network owned or controlled by Palo Alto Networks. The same post adds that Prisma SASE benefits from private peering connections between tier 1 cloud providers and other public cloud platforms, SaaS networks and ISPs, which again describes third-party peering. Colo-Connect (source 9) uses GCP interconnect technology, reinforcing the same conclusion. No evidence of Palo Alto-owned fibre, wavelengths or core routing was found.

If, during any calendar month, the Service availability falls below 99.999%, Customer can submit a claim for credit The published SLA is contractual with service credits and covers three separate measures: service availability at 99.999%, a Monthly Security Processing Latency Percentage at 99.99% and a Monthly SaaS Application Latency Percentage at 99.99%, with credits scaling to 100% where availability falls below 98%. That goes beyond best-effort targets. Support response times and change handling commitments were not evidenced in the SLA text reviewed.