Managed service providers (MSPs) have struggled to deliver SASE services cost-effectively at scale because current SD-WAN and secure access solutions for the hybrid workforce lack automation, requiring manual configuration and support for disparate products and API models.
Solving this challenge, Palo Alto Networks introduced innovations for Prisma SASE designed explicitly for MSPs, including a hierarchical multi-tenant cloud management portal and open API framework.
Prisma SASE’s new highly flexible, cloud-based management portal with hierarchical multi tenancy capability uses granular role-based access control (RBAC) – that MSPs have lacked until now — to provide the flexibility to manage multiple customers with different needs while providing control across a customer’s entire SASE services lifecycle.
“MSPs need to deliver consistent, best-in-class secure access solutions for hybrid workforce and SD-WAN services to customers at the lowest possible TCO. Until now, that has been extraordinarily difficult,” said Anand Oswal, senior vice president, Network Security at Palo Alto Networks. “With Prisma SASE for MSPs, we can further deliver on the promise of a secure enterprise with ultimate ease of use, for both our managed service provider partners and their customers, and most importantly help address their unique network security and SD-WAN requirements.”
“AT&T has been helping organisations to modernise their networks and provide 24/7 management of AT&T SASE with Palo Alto Networks deployments to provide secure, anywhere connectivity to the hybrid workforce,” said Danessa Lambdin, VP, AT&T Cybersecurity. “The new Prisma SASE MSP solution will help AT&T to accelerate further and scale SASE deployments as we provide ongoing expertise and support to customers.”
In addition to the new hierarchical multi-tenant cloud management portal, Prisma SASE includes the following new MSP capabilities:
- An API gateway provides an open API framework that enables MSPs to seamlessly integrate with their backend infrastructure and automate day zero and day one workflows, providing the greatest level of flexibility and simplicity.
- Insights into SD-WAN and network security metrics while highlighting critical issues across all managed tenants. This helps MSPs accelerate troubleshooting and meet SLAs for all their customers.
- Identity and access management (IAM) enables MSPs to utilise their identity stores to avoid duplication of users and roles across different systems, thereby significantly strengthening network security and governance.
Flexible service creation allows MSPs to create a catalogue of differentiated offerings and easily assign these new services to their hierarchical customer set, providing a highly customisable SASE solution for their customers.