[](https://www.paloaltonetworks.com/sase?ts=markdown) ![x close icon to close mobile navigation](https://www.paloaltonetworks.com/etc/clientlibs/clean/imgs/x-black.svg) [![sase logo](https://www.paloaltonetworks.com/etc/clientlibs/clean/imgs/sase-logo-dark.svg)](https://www.paloaltonetworks.com/sase?ts=markdown) ![magnifying glass search icon to open search fieldn](https://www.paloaltonetworks.com/etc/clientlibs/clean/imgs/search-black.svg) * [](https://www.paloaltonetworks.com/sase?ts=markdown) * [Why Prisma SASE](https://www.paloaltonetworks.com/sase?ts=markdown) * [How Prisma SASE Works](https://www.paloaltonetworks.com/sase/how-it-works?ts=markdown) * Products ![black arrow pointing left to go back to main navigation](https://www.paloaltonetworks.com/etc/clientlibs/clean/imgs/arrow-right-black.svg) Products * [Prisma AIRS](https://www.paloaltonetworks.com/prisma/prisma-ai-runtime-security?ts=markdown) * [Prisma Browser](https://www.paloaltonetworks.com/sase/prisma-browser?ts=markdown) * [Prisma Access](https://www.paloaltonetworks.com/sase/access?ts=markdown) * [Prisma SD-WAN](https://www.paloaltonetworks.com/sase/sd-wan?ts=markdown) * [AI Access Security](https://www.paloaltonetworks.com/sase/ai-access-security?ts=markdown) * [Application Acceleration](https://www.paloaltonetworks.com/sase/app-acceleration?ts=markdown) * [Autonomous Digital Experience Management (ADEM)](https://www.paloaltonetworks.com/sase/adem?ts=markdown) * [Enterprise DLP](https://www.paloaltonetworks.com/sase/enterprise-data-loss-prevention?ts=markdown) * [Remote Browser Isolation](https://www.paloaltonetworks.com/sase/remote-browser-isolation?ts=markdown) * [SaaS Security (CASB)](https://www.paloaltonetworks.com/sase/saas-security?ts=markdown) * [Strata Cloud Manager](https://www.paloaltonetworks.com/network-security/strata-cloud-manager?ts=markdown) * Solutions ![black arrow pointing left to go back to main navigation](https://www.paloaltonetworks.com/etc/clientlibs/clean/imgs/arrow-right-black.svg) Solutions * [SASE](https://www.paloaltonetworks.com/sase?ts=markdown) * [VPN Replacement](https://www.paloaltonetworks.com/sase/vpn-replacement-for-secure-remote-access?ts=markdown) * [Secure Branch Transformation](https://www.paloaltonetworks.com/sase/secure-branch-transformation?ts=markdown) * [Secure Work on Any Device](https://www.paloaltonetworks.com/sase/secure-work-on-any-device?ts=markdown) * [Safeguard your Sensitive Data](https://www.paloaltonetworks.com/sase/protect-your-sensitive-data?ts=markdown) * [Deliver Peak Performance \& Secure Apps](https://www.paloaltonetworks.com/sase/deliver-peak-application-performance?ts=markdown) * [Secure All Apps, Users and Locations](https://www.paloaltonetworks.com/sase/secure-users-data-apps-devices?ts=markdown) * Resources ![black arrow pointing left to go back to main navigation](https://www.paloaltonetworks.com/etc/clientlibs/clean/imgs/arrow-right-black.svg) Resources * [Blog](https://www.paloaltonetworks.com/blog/sase/?ts=markdown) * [Customer Stories](https://www.paloaltonetworks.com/sase/customer-stories?ts=markdown) * [Events](https://www.paloaltonetworks.com/resources/sase-events?ts=markdown) * [Cyberpedia](https://www.paloaltonetworks.com/cyberpedia?ts=markdown) * [Packet Pushers Podcasts](https://www.paloaltonetworks.com/podcasts/packet-pusher?ts=markdown) * [Datasheets](https://www.paloaltonetworks.com/resources?q=*%3A*&_charset_=UTF-8&fq=PRODUCTS0_DFACET%3Apan%253Aresource-center%252Fproducts0%252Fprisma-sase&fq=RC_TYPE_DFACET%3Apan%253Aresource-center%252Frc-type%252Fdatasheet) * [Whitepapers](https://www.paloaltonetworks.com/resources?q=*%3A*&_charset_=UTF-8&fq=PRODUCTS0_DFACET%3Apan%253Aresource-center%252Fproducts0%252Fprisma-sase&fq=RC_TYPE_DFACET%3Apan%253Aresource-center%252Frc-type%252Fwhitepaper) * [Research Reports](https://www.paloaltonetworks.com/resources?q=*%3A*&_charset_=UTF-8&fq=PRODUCTS0_DFACET%3Apan%253Aresource-center%252Fproducts0%252Fprisma-sase&fq=RC_TYPE_DFACET%3Apan%253Aresource-center%252Frc-type%252Fresearch) * [Videos](https://www.paloaltonetworks.com/resources?q=*%3A*&_charset_=UTF-8&fq=PRODUCTS0_DFACET%3Apan%253Aresource-center%252Fproducts0%252Fprisma-sase&fq=RC_TYPE_DFACET%3Apan%253Aresource-center%252Frc-type%252Fvideo) * * [Get Started](https://www.paloaltonetworks.com/resources/test-drives?topic=sase&ts=markdown) ![Palo Alto Networks logo icon](https://www.paloaltonetworks.com/etc/clientlibs/clean/imgs/logo-default.svg) ![white arrow icon pointing left to return to main Palo Alto Networks site](https://www.paloaltonetworks.com/etc/clientlibs/clean/imgs/arrow-right-white.svg) [](https://www.paloaltonetworks.com/sase?ts=markdown) Search All * [Tech Docs](https://docs.paloaltonetworks.com/search.html#sort=relevancy&layout=card&numberOfResults=25&f:@panproductcategory=[Prisma%20Access]) Close search modal [![Palo Alto Networks Logo](https://www.paloaltonetworks.com/content/dam/pan/en_US/images/sase/customers-2024/tiles/tile-logos/BeamSuntory_Tile_Logo.svg)](https://www.paloaltonetworks.com/?ts=markdown) Case Study # Beam Suntory improves security and performance with Prisma SASE In brief ### Customer Beam Suntory ### Industry Consumer goods ### Country United States of America ### Products and services Distilled spirits ### Organization size 74 locations 4,500 employees ### Website [www.beamsuntory.com](https://www.beamsuntory.com/) *** ** * ** *** ### Challenge * After an incident, security urgently needed to be upgraded * Legacy network components created latency and costly downtime ### Requirements * Comprehensive security solution to address perimeter, identity, and proxies * SD-WAN with portal-based remote management ### Solution Prisma^®^ SASE, including Prisma Access and Prisma SD-WAN [Download PDF](https://www.paloaltonetworks.com/content/dam/pan/en_US/assets/pdf/customers/beam-suntory.pdf?ts=markdown) INTRODUCTION Integrated security and networking prepares a global distiller for the digital future Beam Suntory is the world's third-largest producer of distilled alcoholic beverages. Its digital network connects 74 global locations, where over a hundred iconic brands, such as Jim Beam^®^, Maker's Mark^®^, and Courvoisier^®^, are produced, warehoused, and distributed; all aspects of the company's operations are managed in an ERP system from SAP. From ordering ingredients to delivering a bottle of whiskey to a retail store, Beam Suntory's digital estate plays a vital role in the business. In 2018, a major security incident occurred, motivating the company to take a new approach to security. Soon after, Senior Network Architect Qun Wei joined the company and was tasked with replacing an aging network architecture. Beam Suntory launched two parallel projects in 2019: one to upgrade the company's network security infrastructure and a second to replace legacy network elements with SD-WAN. CHALLENGE ## Security concerns and downtime require an upgrade The 2018 incident shut down Beam Suntory's back-office, leaving the company temporarily unable to operate. Beam Suntory knew it needed to improve security---and that its global footprint and complex network architecture increased the challenge of keeping the company's network and data assets secure and available. Upon analyzing its security estate, Beam Suntory realized that many of its security capabilities were outdated, inconsistent, and lacked the scalability the company required. Legacy firewalls needed to be upgraded, the hardware-based web proxy solution wasn't meeting expectations, and the intrusion detection system (IDS)---which was only present in the data center---needed to be extended across the entire network. At the same time, legacy components of its network architecture urgently needed to be replaced. At some 24/7 manufacturing facilities, multiprotocol label switching (MPLS) circuits caused periodic losses of connectivity, costing $80,000 per hour in interrupted productivity and requiring several hours to repair. Remote users needed to connect through the data center to access cloud-based applications, creating latency and overburdening the network. And with a wide range of system components in locations throughout the world, Qun Wei's team struggled to provide adequate management and maintenance from the company headquarters in Chicago, IL. REQUIREMENTS ## An integrated approach to securing the network With these challenges pressing concurrently, Qun Wei and his team saw an opportunity to adopt an integrated solution. Rather than patching holes, they took a proactive approach, setting requirements for the combined security and networking projects with an eye to the future. For network security, Beam Suntory needed a solution that could scale to meet its global needs. IDS functionality had to extend from the data center to the entire network, and proxy functionality needed to be replaced. For the SD-WAN project, Qun Wei's primary requirement was to overcome the connectivity challenges of MPLS. He was also interested in gaining portal-based, cloud-delivered management and diagnostic tools. And it was important that deployment be straightforward, since no one on his team had experience with SD-WAN. As both projects progressed, Qun Wei and his team realized that rather than pursuing two separate projects, they could combine their security and network transformation efforts by adopting a SASE architecture. This approach could meet all of their requirements while delivering additional benefits. Eliminating their reliance on the legacy remote access virtual private network (VPN) could reduce latency and help manage data center traffic loads. And integrated, cloud-based security products could move security beyond the traditional perimeter. SOLUTION ## Meeting combined security and networking needs Palo Alto Networks Prisma SASE, the industry's most complete SASE solution, met all of Beam Suntory's needs by integrating Prisma Access for security and Prisma SD-WAN for network functionality. With consolidated, best-in-class security and a cloud-native secure service edge (SSE) platform, Prisma Access secured the company's network, provided proxy functionality, and extended IDS from the data center to the entire network. "The account team showed me how we could route all our remote users through Prisma Access, so they didn't have to connect through the data center," says Qun Wei. "That helped to reduce the load on the network." Prisma SD-WAN, the industry's only next-generation SD-WAN, was deployed in parallel to replace edge routers. Its centralized cloud management met Qun Wei's desire for remote monitoring, and its ease of deployment simplified implementation. Following a six-month pilot with Palo Alto Networks engineering support, his team has been able to smoothly manage deployment at additional locations with minimal downtime. Building on Prisma SASE, Beam Suntory was also able to enhance its network security by deploying cloud-delivered security solutions (CDSS), including WildFire^®^, Advanced Threat Prevention, and Advanced URL Filtering. ## "The account team showed me how we could route all our remote users through Prisma Access, so they didn't have to connect through the data center. That helped to reduce the load on the network." Qun Wei Senior Network Architect, Beam Suntory BENEFITS ## Greater reliability and comprehensive security By implementing Prisma SASE, Beam Suntory has significantly improved its security posture, network reliability, and performance. It's also simplified operations, making it easy for Qun Wei's team to manage network and security components. Through Prisma Access and Panorama, the team can control all egress traffic and define whitelists and blacklists from a single location. Automation---including the ability to create and implement network-wide policies on the fly---results in meaningful time savings. And because Palo Alto Networks updates signatures and performs other dynamic updates, the IT team is able to stay ahead of potential threats. "When log4j hit," Qun Wei offers as an example, "and I went in to block the traffic, Prisma Access had already blocked it automatically. It was pretty cool. We were ahead of the game." Prisma SD-WAN increased network speed and reliability, overcoming connectivity issues of MPLS. It also reduced latency, improving the user experience for remote users in all geographies. When employees had to shift to remote work during the pandemic, Prisma SASE simplified the transition. Rather than logging in through the data center, users could directly access the productivity tools they need in the cloud. And for Qun Wei and his team, the visibility the solution provided ensured security, even with sudden proliferations of remote users and surges in application traffic. ## "The product saved our lives and increased both the performance and the security level." Qun Wei Senior Network Architect, Beam Suntory ## Palo Alto Networks makes the business future-ready Today, Prisma SASE provides secure access for Beam Suntory's more than 4,500 users. As the implementation has progressed, the company has seen a dramatic improvement in efficiency and security across its global network. "The product saved our lives and increased both the performance and the security level," Qun Wei says. It also increased his team's confidence in the network's efficiency, reliability, and security. Now, Qun Wei and his team are working to entirely replace MPLS with Prisma SD-WAN, increasing bandwidth and reliability at every Beam Suntory location while reducing overall costs. And to further improve security, they're planning to adopt Zero Trust Network Access (ZTNA) by fully implementing the ZTNA 2.0 capabilities of Prisma Access. *Find out more about how Palo Alto Network's best-in-class solutions can improve security and network efficiency for your organization. Additional information is [here.](https://www.paloaltonetworks.com/sase?ts=markdown)* ## Share this story ![Share page by link](https://www.paloaltonetworks.com/etc/clientlibs/clean/imgs/customersredesign/link-icon.svg) [![Share page on linkedin](https://www.paloaltonetworks.com/etc/clientlibs/clean/imgs/customersredesign/linkedin-icon.svg)](https://www.linkedin.com/sharing/share-offsite/?url=https%3A//www.paloaltonetworks.com/customers/beam-suntory-improves-security-and-performance-with-prisma-sase&title=Beam%20Suntory%20improves%20security%20and%20performance%20with%20Prisma%20SASE) [![Share page on x](https://www.paloaltonetworks.com/etc/clientlibs/clean/imgs/customersredesign/twitter-x-icon.svg)](https://www.x.com/compose/post?title=https%3A//www.paloaltonetworks.com/customers/beam-suntory-improves-security-and-performance-with-prisma-sase) [![Share page on facebook](https://www.paloaltonetworks.com/etc/clientlibs/clean/imgs/customersredesign/facebook-icon.svg)](https://www.facebook.com/share.php?u=https%3A//www.paloaltonetworks.com/customers/beam-suntory-improves-security-and-performance-with-prisma-sase) \[![Share page by an email](https://www.paloaltonetworks.com/etc/clientlibs/clean/imgs/customersredesign/email-icon.svg)\](mailto:?subject=Sharing A Case Study I just read\&body=I thought you'd be interested in this case study: Beam Suntory improves security and performance with Prisma SASE at https://www.paloaltonetworks.com/customers/beam-suntory-improves-security-and-performance-with-prisma-sase) *** ** * ** *** LIGHT MODE DARK MODE ## Products \& Services Used \[![Prisma Access](https://www.paloaltonetworks.com/etc/clientlibs/clean/imgs/icon-prisma.svg) ### Prisma Access\](https://www.paloaltonetworks.com/sase/access?ts=markdown) \[![Prisma SASE](https://www.paloaltonetworks.com/etc/clientlibs/clean/imgs/icon-prisma.svg) ### Prisma SASE\](https://www.paloaltonetworks.com/sase?ts=markdown) \[![Prisma SD-WAN](https://www.paloaltonetworks.com/etc/clientlibs/clean/imgs/icon-prisma.svg) ### Prisma SD-WAN\](https://www.paloaltonetworks.com/sase/sd-wan?ts=markdown) {#footer} ## Products and Services * [AI-Powered Network Security Platform](https://www.paloaltonetworks.com/network-security?ts=markdown) * [Secure AI by Design](https://www.paloaltonetworks.com/precision-ai-security/secure-ai-by-design?ts=markdown) * [Prisma AIRS](https://www.paloaltonetworks.com/prisma/prisma-ai-runtime-security?ts=markdown) * [AI Access Security](https://www.paloaltonetworks.com/sase/ai-access-security?ts=markdown) * [Cloud Delivered Security Services](https://www.paloaltonetworks.com/network-security/security-subscriptions?ts=markdown) * [Advanced Threat Prevention](https://www.paloaltonetworks.com/network-security/advanced-threat-prevention?ts=markdown) * [Advanced URL Filtering](https://www.paloaltonetworks.com/network-security/advanced-url-filtering?ts=markdown) * [Advanced WildFire](https://www.paloaltonetworks.com/network-security/advanced-wildfire?ts=markdown) * [Advanced DNS Security](https://www.paloaltonetworks.com/network-security/advanced-dns-security?ts=markdown) * [Enterprise Data Loss Prevention](https://www.paloaltonetworks.com/sase/enterprise-data-loss-prevention?ts=markdown) * [Enterprise IoT Security](https://www.paloaltonetworks.com/network-security/enterprise-device-security?ts=markdown) * [Medical IoT Security](https://www.paloaltonetworks.com/network-security/medical-device-security?ts=markdown) * [Industrial OT Security](https://www.paloaltonetworks.com/network-security/medical-device-security?ts=markdown) * [SaaS Security](https://www.paloaltonetworks.com/sase/saas-security?ts=markdown) * [Next-Generation Firewalls](https://www.paloaltonetworks.com/network-security/next-generation-firewall?ts=markdown) * [Hardware Firewalls](https://www.paloaltonetworks.com/network-security/hardware-firewall-innovations?ts=markdown) * [Software Firewalls](https://www.paloaltonetworks.com/network-security/software-firewalls?ts=markdown) * [Strata Cloud Manager](https://www.paloaltonetworks.com/network-security/strata-cloud-manager?ts=markdown) * [SD-WAN for NGFW](https://www.paloaltonetworks.com/network-security/sd-wan-subscription?ts=markdown) * [PAN-OS](https://www.paloaltonetworks.com/network-security/pan-os?ts=markdown) * [Panorama](https://www.paloaltonetworks.com/network-security/panorama?ts=markdown) * [Secure Access Service Edge](https://www.paloaltonetworks.com/sase?ts=markdown) * [Prisma SASE](https://www.paloaltonetworks.com/sase?ts=markdown) * [Application Acceleration](https://www.paloaltonetworks.com/sase/app-acceleration?ts=markdown) * [Autonomous Digital Experience Management](https://www.paloaltonetworks.com/sase/adem?ts=markdown) * [Enterprise DLP](https://www.paloaltonetworks.com/sase/enterprise-data-loss-prevention?ts=markdown) * [Prisma Access](https://www.paloaltonetworks.com/sase/access?ts=markdown) * [Prisma Browser](https://www.paloaltonetworks.com/sase/prisma-browser?ts=markdown) * [Prisma SD-WAN](https://www.paloaltonetworks.com/sase/sd-wan?ts=markdown) * [Remote Browser Isolation](https://www.paloaltonetworks.com/sase/remote-browser-isolation?ts=markdown) * [SaaS Security](https://www.paloaltonetworks.com/sase/saas-security?ts=markdown) * [AI-Driven Security Operations Platform](https://www.paloaltonetworks.com/cortex?ts=markdown) * [Cloud Security](https://www.paloaltonetworks.com/cortex/cloud?ts=markdown) * [Cortex Cloud](https://www.paloaltonetworks.com/cortex/cloud?ts=markdown) * [Application Security](https://www.paloaltonetworks.com/cortex/cloud/application-security?ts=markdown) * [Cloud Posture Security](https://www.paloaltonetworks.com/cortex/cloud/cloud-posture-security?ts=markdown) * [Cloud Runtime Security](https://www.paloaltonetworks.com/cortex/cloud/runtime-security?ts=markdown) * [Prisma Cloud](https://www.paloaltonetworks.com/prisma/cloud?ts=markdown) * [AI-Driven SOC](https://www.paloaltonetworks.com/cortex?ts=markdown) * [Cortex XSIAM](https://www.paloaltonetworks.com/cortex/cortex-xsiam?ts=markdown) * [Cortex XDR](https://www.paloaltonetworks.com/cortex/cortex-xdr?ts=markdown) * [Cortex XSOAR](https://www.paloaltonetworks.com/cortex/cortex-xsoar?ts=markdown) * [Cortex Xpanse](https://www.paloaltonetworks.com/cortex/cortex-xpanse?ts=markdown) * [Unit 42 Managed Detection \& Response](https://www.paloaltonetworks.com/cortex/managed-detection-and-response?ts=markdown) * [Managed XSIAM](https://www.paloaltonetworks.com/cortex/managed-xsiam?ts=markdown) * [Threat Intel and Incident Response Services](https://www.paloaltonetworks.com/unit42?ts=markdown) * [Proactive Assessments](https://www.paloaltonetworks.com/unit42/assess?ts=markdown) * [Incident Response](https://www.paloaltonetworks.com/unit42/respond?ts=markdown) * [Transform Your Security Strategy](https://www.paloaltonetworks.com/unit42/transform?ts=markdown) * [Discover Threat Intelligence](https://www.paloaltonetworks.com/unit42/threat-intelligence-partners?ts=markdown) ## Company * [About Us](https://www.paloaltonetworks.com/about-us?ts=markdown) * [Careers](https://jobs.paloaltonetworks.com/en/) * [Contact Us](https://www.paloaltonetworks.com/company/contact-sales?ts=markdown) * [Corporate Responsibility](https://www.paloaltonetworks.com/about-us/corporate-responsibility?ts=markdown) * [Customers](https://www.paloaltonetworks.com/customers?ts=markdown) * [Investor Relations](https://investors.paloaltonetworks.com/) * [Location](https://www.paloaltonetworks.com/about-us/locations?ts=markdown) * [Newsroom](https://www.paloaltonetworks.com/company/newsroom?ts=markdown) ## Popular Links * [Blog](https://www.paloaltonetworks.com/blog/?ts=markdown) * [Communities](https://www.paloaltonetworks.com/communities?ts=markdown) * [Content Library](https://www.paloaltonetworks.com/resources?ts=markdown) * [Cyberpedia](https://www.paloaltonetworks.com/cyberpedia?ts=markdown) * [Event Center](https://events.paloaltonetworks.com/) * [Manage Email Preferences](https://start.paloaltonetworks.com/preference-center) * [Products A-Z](https://www.paloaltonetworks.com/products/products-a-z?ts=markdown) * [Product Certifications](https://www.paloaltonetworks.com/legal-notices/trust-center/compliance?ts=markdown) * [Report a Vulnerability](https://www.paloaltonetworks.com/security-disclosure?ts=markdown) * [Sitemap](https://www.paloaltonetworks.com/sitemap?ts=markdown) * [Tech Docs](https://docs.paloaltonetworks.com/) * [Unit 42](https://unit42.paloaltonetworks.com/) * [Do Not Sell or Share My Personal Information](https://panwedd.exterro.net/portal/dsar.htm?target=panwedd) ![PAN logo](https://www.paloaltonetworks.com/etc/clientlibs/clean/imgs/pan-logo-dark.svg) * [Privacy](https://www.paloaltonetworks.com/legal-notices/privacy?ts=markdown) * [Trust Center](https://www.paloaltonetworks.com/legal-notices/trust-center?ts=markdown) * [Terms of Use](https://www.paloaltonetworks.com/legal-notices/terms-of-use?ts=markdown) * [Documents](https://www.paloaltonetworks.com/legal?ts=markdown) Copyright © 2025 Palo Alto Networks. All Rights Reserved * [![Youtube](https://www.paloaltonetworks.com/etc/clientlibs/clean/imgs/social/youtube-black.svg)](https://www.youtube.com/user/paloaltonetworks) * [![Podcast](https://www.paloaltonetworks.com/content/dam/pan/en_US/images/icons/podcast.svg)](https://www.paloaltonetworks.com/podcasts/threat-vector?ts=markdown) * [![Facebook](https://www.paloaltonetworks.com/etc/clientlibs/clean/imgs/social/facebook-black.svg)](https://www.facebook.com/PaloAltoNetworks/) * [![LinkedIn](https://www.paloaltonetworks.com/etc/clientlibs/clean/imgs/social/linkedin-black.svg)](https://www.linkedin.com/company/palo-alto-networks) * [![Twitter](https://www.paloaltonetworks.com/etc/clientlibs/clean/imgs/social/twitter-x-black.svg)](https://twitter.com/PaloAltoNtwks) * EN Select your language