Prisma SASE review
A broad cloud SASE platform for enterprises that need access, security, and branch connectivity together.
Reviewed by iTechGuides Editors · Editorial team · Updated Oct 2026
Prisma SASE is Palo Alto Networks’ cloud-delivered secure access service edge platform for enterprises and distributed organizations. It combines Prisma Access and Prisma SD-WAN to protect users, private applications, data, devices, and branch locations. The platform is suited to organizations that want zero trust access, web security, cloud application controls, data loss prevention, and branch connectivity within one SASE offering. Endpoint connectivity is provided through GlobalProtect or Prisma Agent across Windows, macOS, iOS, Android, Linux, and Chrome OS environments.
Its main strength is breadth. Prisma SASE includes zero trust access to private applications, a secure web gateway with URL filtering, DNS security, threat prevention, and malware analysis, plus CASB controls delivered inline and through APIs. It also includes enterprise DLP, firewall as a service, remote browser isolation, SD-WAN, secure branch connectivity, centralized cloud management, and endpoint posture and host information profile reporting. This makes it a strong fit for cloud-first enterprises managing distributed users, applications, and locations. Organizations that need only private application access or web filtering may find this wider platform scope unnecessary.
Pricing follows a contact-sales model, with licensing described by edition and deployment needs rather than a public price list. Prisma SASE is delivered through the cloud and supports web, desktop, mobile, and API access. Palo Alto Networks is phasing out legacy Panorama multi-tenancy for new deployments while continuing support for existing deployments. Choose Prisma SASE when broad SASE coverage and branch integration are priorities; consider a narrower product when the requirement is limited to one security function or a simpler deployment model.
Prisma SASE pros and cons
- Where it wins
- Combines ZTNA, SWG, CASB, DLP, firewall, and browser isolation
- Adds SD-WAN and secure connectivity for distributed branches
- Supports centralized management and endpoint posture reporting
- Where it doesn't
- Pricing requires contacting sales
- The broad feature set may exceed narrower access-security needs
- New Panorama multi-tenancy deployments are being phased out
Prisma SASE fact sheet, pricing and score →
Advertiser disclosure: iTechGuides is reader-supported. Vendors can pay for top positions in our rankings and for a place on other products' pages, and we may earn a commission when you click some links. Bought places stand at the number bought; this page and our disclosure say so. Paying vendors may get a fuller, more detailed review from our editors, and that review can change their score. How we rank.
Last updated · How we research and update