ION Hardware — Small Branch to Data Centre
Lightweight cloud-managed SD-WAN for small branches and remote offices. 5G cellular variant for primary or backup WAN. AIOps, ADEM, ZTP.
- ✓5G integrated — ION 1200-C-5G
- ✓Cloud-managed via Strata Cloud Manager
- ✓Zero Touch Provisioning
- ✓AIOps + ADEM built-in
- ✓Prisma SASE node
- ✓CloudBlade integrations
Enterprise branch SD-WAN. 10 ports (8 GE + 2 SFP), PoE 90W, fanless, 5G hardened variant (ION 3200H-C5G). Redundant PSU.
- ✓10 ports: 8x GE + 2x SFP combo
- ✓PoE 90W — powers APs and phones
- ✓Fanless, silent operation
- ✓5G hardened: ION 3200H-C5G-WW
- ✓-40°C to 70°C operating range
- ✓Redundant power supply
High-throughput 1U SD-WAN for large branches and data centres. 4Gbps encrypted, 4x 10G SFP+, 2.5G PoE++, dual hot-swap PSU.
- ✓4Gbps encrypted throughput
- ✓4x 10GbE SFP+ ports
- ✓2.5G PoE++ (4 ports, 90W)
- ✓Dual hot-swap AC PSU (450W)
- ✓32GB RAM + 240GB NVMe SSD
- ✓Hub site SD-WAN capable
Cloud-Native SD-WAN — From ZTP to ADEM
Ship ION Devices to Branch
Palo Alto Prisma SD-WAN ION appliances are cloud-managed — pre-register each device's serial number in Strata Cloud Manager before shipping. Branch staff receive the device, connect it to power and the WAN, and it auto-configures on first boot via Zero Touch Provisioning.
ZTP works by the ION device reaching out to the Palo Alto Strata Cloud Manager platform over any available internet connection. The platform authenticates the device by serial number, pushes the correct configuration template, and completes all SD-WAN setup without any on-site CLI or GUI intervention.
Manage via Strata Cloud Manager
All ION devices across all branches appear in the Palo Alto Strata Cloud Manager — a cloud-native management platform that provides unified SD-WAN policy, health monitoring, real-time telemetry, and analytics without any on-premise management infrastructure to maintain.
Strata Cloud Manager is genuinely cloud-native — not a legacy on-premise controller ported to the cloud. It scales elastically, always runs the latest software version, and provides global operations visibility from any browser without VPN access to a management network.
Define Application-Aware SD-WAN Policy
Create SD-WAN policies in Strata Cloud Manager: define WAN link SLA targets, configure application steering rules for thousands of recognised applications, and set load-balancing and failover behaviour. Policies deploy to all branch ION devices simultaneously.
Prisma SD-WAN identifies applications at Layer 7 and applies per-application path selection — steering latency-sensitive applications (voice, video conferencing) to low-latency links and bulk traffic to higher-bandwidth paths, automatically and in real time.
AIOps — AI-Driven Operations
Prisma SD-WAN's AIOps engine continuously analyses WAN telemetry from all ION devices — detecting anomalies, identifying root causes, predicting degradation before it impacts users, and recommending or automatically applying remediation. Operational insights instead of raw alerts.
AIOps reduces mean time to resolution (MTTR) by correlating events across the WAN fabric: a branch with packet loss on the primary WAN link, degraded application SLA, and increased retransmit rate are correlated into a single insight rather than three separate unrelated alerts.
ADEM — Application Experience Management
Autonomous Digital Experience Management (ADEM) provides end-to-end visibility from the user's endpoint device through the WAN to the application — tracking actual user experience metrics for SaaS applications, cloud workloads, and on-premise applications via active synthetic probes.
When a user reports "Teams is slow," ADEM identifies whether the issue is: the user's device, the LAN, the WAN link, the ISP, the internet path, the Microsoft cloud, or the Teams application servers. This level of end-to-end visibility would previously require three separate monitoring tools.
Integrate Prisma SASE Security
ION appliances are the hardware branch node in Palo Alto's Prisma SASE architecture. Connect to Prisma Access (cloud-delivered ZTNA, SWG, CASB, FWaaS) to create a complete SASE solution — SD-WAN transport and cloud security managed from the same Strata Cloud Manager.
CloudBlade integrations enable the ION appliance to send branch traffic to third-party security services (Zscaler, Netskope, Symantec) as service inserts in the SD-WAN path — without requiring separate appliances at the branch for each security function.
ION 3200 — Enterprise Branch with PoE & 5G
The ION 3200 delivers 10-port enterprise branch SD-WAN with PoE capability — eliminating the need for a separate PoE switch. Fanless, silent operation. Available as the ION 3200H-C5G-WW hardened 5G variant for industrial and transportation deployments down to -40°C.
AI-Driven. Cloud-Native. SASE-Ready.
AIOps — Intelligence, Not Just Alerts
Prisma SD-WAN's AIOps correlates events across the WAN fabric into actionable insights — root cause analysis, anomaly detection, and proactive remediation recommendations before issues become outages.
ADEM — True End-to-End Visibility
From endpoint device to application server — ADEM tracks actual user experience across the WAN, internet, and cloud. Identify whether slowness is the WAN, ISP, CDN, or application in seconds, not hours.
Prisma SASE — SD-WAN + Security
ION appliances are the hardware foundation of Prisma SASE. Combine Prisma SD-WAN with Prisma Access (ZTNA, SWG, CASB, FWaaS) for a complete SASE architecture managed from a single Strata Cloud Manager.
5G Leadership
Multiple ION models include integrated 5G: ION 1200-C-5G for standard branches; ION 3200H-C5G for hardened/industrial deployments. 5G as primary WAN or backup — managed alongside fixed WAN links in SD-WAN policy.
Cloud-Native Management
Strata Cloud Manager is genuinely cloud-native — not an on-premise controller with a cloud wrapper. Always up to date, elastically scalable, globally accessible, and requiring zero on-premise management infrastructure.
CloudBlade Ecosystem
Pre-built integrations with Zscaler, Netskope, and other security vendors through the CloudBlade framework — insert third-party security services into the SD-WAN path without additional hardware at the branch.
Cloud-Native SD-WAN for the AI Era
Servnet is an authorised Palo Alto Networks UK reseller supplying Prisma SD-WAN ION appliances and Strata Cloud Manager licences.
Compare Prisma SD-WAN with other vendors
Servnet is vendor-neutral. Explore alternative and complementary platforms in the same category.