[](https://www.paloaltonetworks.com/?ts=markdown) * Sign In * Customer * Partner * Employee * [Login to download](https://www.paloaltonetworks.com/login?ts=markdown) * [Join us to become a member](https://www.paloaltonetworks.com/login?screenToRender=traditionalRegistration&ts=markdown) * EN * [USA (ENGLISH)](https://www.paloaltonetworks.com) * [AUSTRALIA (ENGLISH)](https://www.paloaltonetworks.com.au) * [BRAZIL (PORTUGUÉS)](https://www.paloaltonetworks.com.br) * [CANADA (ENGLISH)](https://www.paloaltonetworks.ca) * [CHINA (简体中文)](https://www.paloaltonetworks.cn) * [FRANCE (FRANÇAIS)](https://www.paloaltonetworks.fr) * [GERMANY (DEUTSCH)](https://www.paloaltonetworks.de) * [INDIA (ENGLISH)](https://www.paloaltonetworks.in) * [ITALY (ITALIANO)](https://www.paloaltonetworks.it) * [JAPAN (日本語)](https://www.paloaltonetworks.jp) * [KOREA (한국어)](https://www.paloaltonetworks.co.kr) * [LATIN AMERICA (ESPAÑOL)](https://www.paloaltonetworks.lat) * [MEXICO (ESPAÑOL)](https://www.paloaltonetworks.com.mx) * [SINGAPORE (ENGLISH)](https://www.paloaltonetworks.sg) * [SPAIN (ESPAÑOL)](https://www.paloaltonetworks.es) * [TAIWAN (繁體中文)](https://www.paloaltonetworks.tw) * [UK (ENGLISH)](https://www.paloaltonetworks.co.uk) * ![magnifying glass search icon to open search field](https://www.paloaltonetworks.com/etc/clientlibs/clean/imgs/search-black.svg) * [Contact Us](https://www.paloaltonetworks.com/company/contact-sales?ts=markdown) * [What's New](https://www.paloaltonetworks.com/resources?ts=markdown) * [Get Support](https://support.paloaltonetworks.com/SupportAccount/MyAccount) * [Under Attack?](https://start.paloaltonetworks.com/contact-unit42.html) ![x close icon to close mobile navigation](https://www.paloaltonetworks.com/etc/clientlibs/clean/imgs/x-black.svg) [![Palo Alto Networks logo](https://www.paloaltonetworks.com/etc/clientlibs/clean/imgs/pan-logo-dark.svg)](https://www.paloaltonetworks.com/?ts=markdown) ![magnifying glass search icon to open search field](https://www.paloaltonetworks.com/etc/clientlibs/clean/imgs/search-black.svg) * [](https://www.paloaltonetworks.com/?ts=markdown) * Products ![black arrow pointing left to go back to main navigation](https://www.paloaltonetworks.com/etc/clientlibs/clean/imgs/arrow-right-black.svg) Products [AI-Powered Network Security Platform](https://www.paloaltonetworks.com/network-security?ts=markdown) * [AI Security](https://www.paloaltonetworks.com/precision-ai-security/secure-ai-by-design?ts=markdown) * [Prisma AIRS](https://www.paloaltonetworks.com/prisma/prisma-ai-runtime-security?ts=markdown) * [AI Access Security](https://www.paloaltonetworks.com/sase/ai-access-security?ts=markdown) * [Cloud Delivered Security Services](https://www.paloaltonetworks.com/network-security/security-subscriptions?ts=markdown) * [Advanced Threat Prevention](https://www.paloaltonetworks.com/network-security/advanced-threat-prevention?ts=markdown) * [Advanced URL Filtering](https://www.paloaltonetworks.com/network-security/advanced-url-filtering?ts=markdown) * [Advanced WildFire](https://www.paloaltonetworks.com/network-security/advanced-wildfire?ts=markdown) * [Advanced DNS Security](https://www.paloaltonetworks.com/network-security/advanced-dns-security?ts=markdown) * [Enterprise Data Loss Prevention](https://www.paloaltonetworks.com/sase/enterprise-data-loss-prevention?ts=markdown) * [Enterprise Device Security](https://www.paloaltonetworks.com/network-security/enterprise-device-security?ts=markdown) * [Medical Device Security](https://www.paloaltonetworks.com/network-security/medical-device-security?ts=markdown) * [OT Device Security](https://www.paloaltonetworks.com/network-security/ot-device-security?ts=markdown) * [SaaS Security](https://www.paloaltonetworks.com/sase/saas-security?ts=markdown) * [Next-Generation Firewalls](https://www.paloaltonetworks.com/network-security/next-generation-firewall?ts=markdown) * [Hardware Firewalls](https://www.paloaltonetworks.com/network-security/hardware-firewall-innovations?ts=markdown) * [Software Firewalls](https://www.paloaltonetworks.com/network-security/software-firewalls?ts=markdown) * [Strata Cloud Manager](https://www.paloaltonetworks.com/network-security/strata-cloud-manager?ts=markdown) * [SD-WAN for NGFW](https://www.paloaltonetworks.com/network-security/sd-wan-subscription?ts=markdown) * [PAN-OS](https://www.paloaltonetworks.com/network-security/pan-os?ts=markdown) * [Panorama](https://www.paloaltonetworks.com/network-security/panorama?ts=markdown) * [Secure Access Service Edge](https://www.paloaltonetworks.com/sase?ts=markdown) * [Prisma SASE](https://www.paloaltonetworks.com/sase?ts=markdown) * [Application Acceleration](https://www.paloaltonetworks.com/sase/app-acceleration?ts=markdown) * [Autonomous Digital Experience Management](https://www.paloaltonetworks.com/sase/adem?ts=markdown) * [Enterprise DLP](https://www.paloaltonetworks.com/sase/enterprise-data-loss-prevention?ts=markdown) * [Prisma Access](https://www.paloaltonetworks.com/sase/access?ts=markdown) * [Prisma Browser](https://www.paloaltonetworks.com/sase/prisma-browser?ts=markdown) * [Prisma SD-WAN](https://www.paloaltonetworks.com/sase/sd-wan?ts=markdown) * [Remote Browser Isolation](https://www.paloaltonetworks.com/sase/remote-browser-isolation?ts=markdown) * [SaaS Security](https://www.paloaltonetworks.com/sase/saas-security?ts=markdown) [AI-Driven Security Operations Platform](https://www.paloaltonetworks.com/cortex?ts=markdown) * [Cloud Security](https://www.paloaltonetworks.com/cortex/cloud?ts=markdown) * [Cortex Cloud](https://www.paloaltonetworks.com/cortex/cloud?ts=markdown) * [Application Security](https://www.paloaltonetworks.com/cortex/cloud/application-security?ts=markdown) * [Cloud Posture Security](https://www.paloaltonetworks.com/cortex/cloud/cloud-posture-security?ts=markdown) * [Cloud Runtime Security](https://www.paloaltonetworks.com/cortex/cloud/runtime-security?ts=markdown) * [Prisma Cloud](https://www.paloaltonetworks.com/prisma/cloud?ts=markdown) * [AI-Driven SOC](https://www.paloaltonetworks.com/cortex?ts=markdown) * [Cortex XSIAM](https://www.paloaltonetworks.com/cortex/cortex-xsiam?ts=markdown) * [Cortex XDR](https://www.paloaltonetworks.com/cortex/cortex-xdr?ts=markdown) * [Cortex AgentiX](https://www.paloaltonetworks.com/cortex/agentix?ts=markdown) * [Cortex XSOAR](https://www.paloaltonetworks.com/cortex/cortex-xsoar?ts=markdown) * [Cortex Exposure Management](https://www.paloaltonetworks.com/cortex/exposure-management?ts=markdown) * [Cortex Xpanse](https://www.paloaltonetworks.com/cortex/cortex-xpanse?ts=markdown) * [Cortex Advanced Email Security](https://www.paloaltonetworks.com/cortex/advanced-email-security?ts=markdown) * [Unit 42 Managed Detection \& Response](https://www.paloaltonetworks.com/cortex/managed-detection-and-response?ts=markdown) * [Unit 42 Managed XSIAM](https://www.paloaltonetworks.com/cortex/managed-xsiam?ts=markdown) * Solutions ![black arrow pointing left to go back to main navigation](https://www.paloaltonetworks.com/etc/clientlibs/clean/imgs/arrow-right-black.svg) Solutions Secure AI by Design * [Secure AI Ecosystem](https://www.paloaltonetworks.com/prisma/prisma-ai-runtime-security?ts=markdown) * [Secure GenAI Usage](https://www.paloaltonetworks.com/sase/ai-access-security?ts=markdown) Network Security * [Cloud Network Security](https://www.paloaltonetworks.com/network-security/software-firewalls?ts=markdown) * [Data Center Security](https://www.paloaltonetworks.com/network-security/data-center?ts=markdown) * [DNS Security](https://www.paloaltonetworks.com/network-security/advanced-dns-security?ts=markdown) * [Intrusion Detection and Prevention](https://www.paloaltonetworks.com/network-security/advanced-threat-prevention?ts=markdown) * [Device Security](https://www.paloaltonetworks.com/network-security/device-security?ts=markdown) * [OT Security](https://www.paloaltonetworks.com/network-security/ot-device-security?ts=markdown) * [5G Security](https://www.paloaltonetworks.com/network-security/5g-security?ts=markdown) * [Secure All Apps, Users and Locations](https://www.paloaltonetworks.com/sase/secure-users-data-apps-devices?ts=markdown) * [Secure Branch Transformation](https://www.paloaltonetworks.com/sase/secure-branch-transformation?ts=markdown) * [Secure Work on Any Device](https://www.paloaltonetworks.com/sase/secure-work-on-any-device?ts=markdown) * [VPN Replacement](https://www.paloaltonetworks.com/sase/vpn-replacement-for-secure-remote-access?ts=markdown) * [Web \& Phishing Security](https://www.paloaltonetworks.com/network-security/advanced-url-filtering?ts=markdown) Cloud Security * [Application Security Posture Management (ASPM)](https://www.paloaltonetworks.com/cortex/cloud/application-security-posture-management?ts=markdown) * [Software Supply Chain Security](https://www.paloaltonetworks.com/cortex/cloud/software-supply-chain-security?ts=markdown) * [Code Security](https://www.paloaltonetworks.com/cortex/cloud/code-security?ts=markdown) * [Cloud Security Posture Management (CSPM)](https://www.paloaltonetworks.com/cortex/cloud/cloud-security-posture-management?ts=markdown) * [Cloud Infrastructure Entitlement Management (CIEM)](https://www.paloaltonetworks.com/cortex/cloud/cloud-infrastructure-entitlement-management?ts=markdown) * [Data Security Posture Management (DSPM)](https://www.paloaltonetworks.com/cortex/cloud/data-security-posture-management?ts=markdown) * [AI Security Posture Management (AI-SPM)](https://www.paloaltonetworks.com/cortex/cloud/ai-security-posture-management?ts=markdown) * [Cloud Detection \& Response](https://www.paloaltonetworks.com/cortex/cloud-detection-and-response?ts=markdown) * [Cloud Workload Protection (CWP)](https://www.paloaltonetworks.com/cortex/cloud/cloud-workload-protection?ts=markdown) * [Web Application \& API Security (WAAS)](https://www.paloaltonetworks.com/cortex/cloud/web-app-api-security?ts=markdown) Security Operations * [Cloud Detection \& Response](https://www.paloaltonetworks.com/cortex/cloud-detection-and-response?ts=markdown) * [Security Information and Event Management](https://www.paloaltonetworks.com/cortex/modernize-siem?ts=markdown) * [Network Security Automation](https://www.paloaltonetworks.com/cortex/network-security-automation?ts=markdown) * [Incident Case Management](https://www.paloaltonetworks.com/cortex/incident-case-management?ts=markdown) * [SOC Automation](https://www.paloaltonetworks.com/cortex/security-operations-automation?ts=markdown) * [Threat Intel Management](https://www.paloaltonetworks.com/cortex/threat-intel-management?ts=markdown) * [Managed Detection \& Response](https://www.paloaltonetworks.com/cortex/managed-detection-and-response?ts=markdown) * [Attack Surface Management](https://www.paloaltonetworks.com/cortex/cortex-xpanse/attack-surface-management?ts=markdown) * [Compliance Management](https://www.paloaltonetworks.com/cortex/cortex-xpanse/compliance-management?ts=markdown) * [Internet Operations Management](https://www.paloaltonetworks.com/cortex/cortex-xpanse/internet-operations-management?ts=markdown) * [Extended Data Lake (XDL)](https://www.paloaltonetworks.com/cortex/cortex-xdl?ts=markdown) * [Agentic Assistant](https://www.paloaltonetworks.com/cortex/cortex-agentic-assistant?ts=markdown) Endpoint Security * [Endpoint Protection](https://www.paloaltonetworks.com/cortex/endpoint-protection?ts=markdown) * [Extended Detection \& Response](https://www.paloaltonetworks.com/cortex/detection-and-response?ts=markdown) * [Ransomware Protection](https://www.paloaltonetworks.com/cortex/ransomware-protection?ts=markdown) * [Digital Forensics](https://www.paloaltonetworks.com/cortex/digital-forensics?ts=markdown) [Industries](https://www.paloaltonetworks.com/industry?ts=markdown) * [Public Sector](https://www.paloaltonetworks.com/industry/public-sector?ts=markdown) * [Financial Services](https://www.paloaltonetworks.com/industry/financial-services?ts=markdown) * [Manufacturing](https://www.paloaltonetworks.com/industry/manufacturing?ts=markdown) * [Healthcare](https://www.paloaltonetworks.com/industry/healthcare?ts=markdown) * [Small \& Medium Business Solutions](https://www.paloaltonetworks.com/industry/small-medium-business-portfolio?ts=markdown) * Services ![black arrow pointing left to go back to main navigation](https://www.paloaltonetworks.com/etc/clientlibs/clean/imgs/arrow-right-black.svg) Services [Threat Intel and Incident Response Services](https://www.paloaltonetworks.com/unit42?ts=markdown) * [Assess](https://www.paloaltonetworks.com/unit42/assess?ts=markdown) * [AI Security Assessment](https://www.paloaltonetworks.com/unit42/assess/ai-security-assessment?ts=markdown) * [Attack Surface Assessment](https://www.paloaltonetworks.com/unit42/assess/attack-surface-assessment?ts=markdown) * [Breach Readiness Review](https://www.paloaltonetworks.com/unit42/assess/breach-readiness-review?ts=markdown) * [BEC Readiness Assessment](https://www.paloaltonetworks.com/bec-readiness-assessment?ts=markdown) * [Cloud Security Assessment](https://www.paloaltonetworks.com/unit42/assess/cloud-security-assessment?ts=markdown) * [Compromise Assessment](https://www.paloaltonetworks.com/unit42/assess/compromise-assessment?ts=markdown) * [Cyber Risk Assessment](https://www.paloaltonetworks.com/unit42/assess/cyber-risk-assessment?ts=markdown) * [M\&A Cyber Due Diligence](https://www.paloaltonetworks.com/unit42/assess/mergers-acquisitions-cyber-due-diligence?ts=markdown) * [Penetration Testing](https://www.paloaltonetworks.com/unit42/assess/penetration-testing?ts=markdown) * [Purple Team Exercises](https://www.paloaltonetworks.com/unit42/assess/purple-teaming?ts=markdown) * [Ransomware Readiness Assessment](https://www.paloaltonetworks.com/unit42/assess/ransomware-readiness-assessment?ts=markdown) * [SOC Assessment](https://www.paloaltonetworks.com/unit42/assess/soc-assessment?ts=markdown) * [Supply Chain Risk Assessment](https://www.paloaltonetworks.com/unit42/assess/supply-chain-risk-assessment?ts=markdown) * [Tabletop Exercises](https://www.paloaltonetworks.com/unit42/assess/tabletop-exercise?ts=markdown) * [Unit 42 Retainer](https://www.paloaltonetworks.com/unit42/retainer?ts=markdown) * [Respond](https://www.paloaltonetworks.com/unit42/respond?ts=markdown) * [Cloud Incident Response](https://www.paloaltonetworks.com/unit42/respond/cloud-incident-response?ts=markdown) * [Digital Forensics](https://www.paloaltonetworks.com/unit42/respond/digital-forensics?ts=markdown) * [Incident Response](https://www.paloaltonetworks.com/unit42/respond/incident-response?ts=markdown) * [Managed Detection and Response](https://www.paloaltonetworks.com/unit42/respond/managed-detection-response?ts=markdown) * [Managed Threat Hunting](https://www.paloaltonetworks.com/unit42/respond/managed-threat-hunting?ts=markdown) * [Managed XSIAM](https://www.paloaltonetworks.com/cortex/managed-xsiam?ts=markdown) * [Unit 42 Retainer](https://www.paloaltonetworks.com/unit42/retainer?ts=markdown) * [Transform](https://www.paloaltonetworks.com/unit42/transform?ts=markdown) * [IR Plan Development and Review](https://www.paloaltonetworks.com/unit42/transform/incident-response-plan-development-review?ts=markdown) * [Security Program Design](https://www.paloaltonetworks.com/unit42/transform/security-program-design?ts=markdown) * [Virtual CISO](https://www.paloaltonetworks.com/unit42/transform/vciso?ts=markdown) * [Zero Trust Advisory](https://www.paloaltonetworks.com/unit42/transform/zero-trust-advisory?ts=markdown) [Global Customer Services](https://www.paloaltonetworks.com/services?ts=markdown) * [Education \& Training](https://www.paloaltonetworks.com/services/education?ts=markdown) * [Professional Services](https://www.paloaltonetworks.com/services/consulting?ts=markdown) * [Success Tools](https://www.paloaltonetworks.com/services/customer-success-tools?ts=markdown) * [Support Services](https://www.paloaltonetworks.com/services/solution-assurance?ts=markdown) * [Customer Success](https://www.paloaltonetworks.com/services/customer-success?ts=markdown) [![](https://www.paloaltonetworks.com/etc/clientlibs/clean/imgs/logo-unit-42.svg) UNIT 42 RETAINER Custom-built to fit your organization's needs, you can choose to allocate your retainer hours to any of our offerings, including proactive cyber risk management services. Learn how you can put the world-class Unit 42 Incident Response team on speed dial. Learn more](https://www.paloaltonetworks.com/unit42/retainer?ts=markdown) * Partners ![black arrow pointing left to go back to main navigation](https://www.paloaltonetworks.com/etc/clientlibs/clean/imgs/arrow-right-black.svg) Partners NextWave Partners * [NextWave Partner Community](https://www.paloaltonetworks.com/partners?ts=markdown) * [Cloud Service Providers](https://www.paloaltonetworks.com/partners/nextwave-for-csp?ts=markdown) * [Global Systems Integrators](https://www.paloaltonetworks.com/partners/nextwave-for-gsi?ts=markdown) * [Technology Partners](https://www.paloaltonetworks.com/partners/technology-partners?ts=markdown) * [Service Providers](https://www.paloaltonetworks.com/partners/service-providers?ts=markdown) * [Solution Providers](https://www.paloaltonetworks.com/partners/nextwave-solution-providers?ts=markdown) * [Managed Security Service Providers](https://www.paloaltonetworks.com/partners/managed-security-service-providers?ts=markdown) * [XMDR Partners](https://www.paloaltonetworks.com/partners/managed-security-service-providers/xmdr?ts=markdown) Take Action * [Portal Login](https://www.paloaltonetworks.com/partners/nextwave-partner-portal?ts=markdown) * [Managed Services Program](https://www.paloaltonetworks.com/partners/managed-security-services-provider-program?ts=markdown) * [Become a Partner](https://paloaltonetworks.my.site.com/NextWavePartnerProgram/s/partnerregistration?type=becomepartner) * [Request Access](https://paloaltonetworks.my.site.com/NextWavePartnerProgram/s/partnerregistration?type=requestaccess) * [Find a Partner](https://paloaltonetworks.my.site.com/NextWavePartnerProgram/s/partnerlocator) [CYBERFORCE CYBERFORCE represents the top 1% of partner engineers trusted for their security expertise. Learn more](https://www.paloaltonetworks.com/cyberforce?ts=markdown) * Company ![black arrow pointing left to go back to main navigation](https://www.paloaltonetworks.com/etc/clientlibs/clean/imgs/arrow-right-black.svg) Company Palo Alto Networks * [About Us](https://www.paloaltonetworks.com/about-us?ts=markdown) * [Management Team](https://www.paloaltonetworks.com/about-us/management?ts=markdown) * [Investor Relations](https://investors.paloaltonetworks.com) * [Locations](https://www.paloaltonetworks.com/about-us/locations?ts=markdown) * [Ethics \& Compliance](https://www.paloaltonetworks.com/company/ethics-and-compliance?ts=markdown) * [Corporate Responsibility](https://www.paloaltonetworks.com/about-us/corporate-responsibility?ts=markdown) * [Military \& Veterans](https://jobs.paloaltonetworks.com/military) [Why Palo Alto Networks?](https://www.paloaltonetworks.com/why-paloaltonetworks?ts=markdown) * [Precision AI Security](https://www.paloaltonetworks.com/precision-ai-security?ts=markdown) * [Our Platform Approach](https://www.paloaltonetworks.com/why-paloaltonetworks/platformization?ts=markdown) * [Accelerate Your Cybersecurity Transformation](https://www.paloaltonetworks.com/why-paloaltonetworks/nam-cxo-portfolio?ts=markdown) * [Awards \& Recognition](https://www.paloaltonetworks.com/about-us/awards?ts=markdown) * [Customer Stories](https://www.paloaltonetworks.com/customers?ts=markdown) * [Global Certifications](https://www.paloaltonetworks.com/legal-notices/trust-center/compliance?ts=markdown) * [Trust 360 Program](https://www.paloaltonetworks.com/resources/whitepapers/trust-360?ts=markdown) Careers * [Overview](https://jobs.paloaltonetworks.com/) * [Culture \& Benefits](https://jobs.paloaltonetworks.com/en/culture/) [A Newsweek Most Loved Workplace "Businesses that do right by their employees" Read more](https://www.paloaltonetworks.com/company/press/2021/palo-alto-networks-secures-top-ranking-on-newsweek-s-most-loved-workplaces-list-for-2021?ts=markdown) * More ![black arrow pointing left to go back to main navigation](https://www.paloaltonetworks.com/etc/clientlibs/clean/imgs/arrow-right-black.svg) More Resources * [Blog](https://www.paloaltonetworks.com/blog/?ts=markdown) * [Unit 42 Threat Research](https://unit42.paloaltonetworks.com/) * [Communities](https://www.paloaltonetworks.com/communities?ts=markdown) * [Content Library](https://www.paloaltonetworks.com/resources?ts=markdown) * [Cyberpedia](https://www.paloaltonetworks.com/cyberpedia?ts=markdown) * [Tech Insider](https://techinsider.paloaltonetworks.com/) * [Knowledge Base](https://knowledgebase.paloaltonetworks.com/) * [Palo Alto Networks TV](https://tv.paloaltonetworks.com/) * [Perspectives of Leaders](https://www.paloaltonetworks.com/perspectives/?ts=markdown) * [Cyber Perspectives Magazine](https://www.paloaltonetworks.com/cybersecurity-perspectives/cyber-perspectives-magazine?ts=markdown) * [Regional Cloud Locations](https://www.paloaltonetworks.com/products/regional-cloud-locations?ts=markdown) * [Tech Docs](https://docs.paloaltonetworks.com/) * [Security Posture Assessment](https://www.paloaltonetworks.com/security-posture-assessment?ts=markdown) * [Threat Vector Podcast](https://unit42.paloaltonetworks.com/unit-42-threat-vector-podcast/) * [Packet Pushers Podcasts](https://www.paloaltonetworks.com/podcasts/packet-pusher?ts=markdown) Connect * [LIVE community](https://live.paloaltonetworks.com/) * [Events](https://events.paloaltonetworks.com/) * [Executive Briefing Center](https://www.paloaltonetworks.com/about-us/executive-briefing-program?ts=markdown) * [Demos](https://www.paloaltonetworks.com/demos?ts=markdown) * [Contact us](https://www.paloaltonetworks.com/company/contact-sales?ts=markdown) [Blog Stay up-to-date on industry trends and the latest innovations from the world's largest cybersecurity Learn more](https://www.paloaltonetworks.com/blog/) * Sign In ![black arrow pointing left to go back to main navigation](https://www.paloaltonetworks.com/etc/clientlibs/clean/imgs/arrow-right-black.svg) Sign In * Customer * Partner * Employee * [Login to download](https://www.paloaltonetworks.com/login?ts=markdown) * [Join us to become a member](https://www.paloaltonetworks.com/login?screenToRender=traditionalRegistration&ts=markdown) * EN ![black arrow pointing left to go back to main navigation](https://www.paloaltonetworks.com/etc/clientlibs/clean/imgs/arrow-right-black.svg) Language * [USA (ENGLISH)](https://www.paloaltonetworks.com) * [AUSTRALIA (ENGLISH)](https://www.paloaltonetworks.com.au) * [BRAZIL (PORTUGUÉS)](https://www.paloaltonetworks.com.br) * [CANADA (ENGLISH)](https://www.paloaltonetworks.ca) * [CHINA (简体中文)](https://www.paloaltonetworks.cn) * [FRANCE (FRANÇAIS)](https://www.paloaltonetworks.fr) * [GERMANY (DEUTSCH)](https://www.paloaltonetworks.de) * [INDIA (ENGLISH)](https://www.paloaltonetworks.in) * [ITALY (ITALIANO)](https://www.paloaltonetworks.it) * [JAPAN (日本語)](https://www.paloaltonetworks.jp) * [KOREA (한국어)](https://www.paloaltonetworks.co.kr) * [LATIN AMERICA (ESPAÑOL)](https://www.paloaltonetworks.lat) * [MEXICO (ESPAÑOL)](https://www.paloaltonetworks.com.mx) * [SINGAPORE (ENGLISH)](https://www.paloaltonetworks.sg) * [SPAIN (ESPAÑOL)](https://www.paloaltonetworks.es) * [TAIWAN (繁體中文)](https://www.paloaltonetworks.tw) * [UK (ENGLISH)](https://www.paloaltonetworks.co.uk) * [Contact Us](https://www.paloaltonetworks.com/company/contact-sales?ts=markdown) * [What's New](https://www.paloaltonetworks.com/resources?ts=markdown) * [Get support](https://support.paloaltonetworks.com/SupportAccount/MyAccount) * [Under Attack?](https://start.paloaltonetworks.com/contact-unit42.html) * [Demos and Trials](https://www.paloaltonetworks.com/get-started?ts=markdown) Search All * [Tech Docs](https://docs.paloaltonetworks.com/search) Close search modal [Deploy Bravely --- Secure your AI transformation with Prisma AIRS](https://www.deploybravely.com) [](https://www.paloaltonetworks.com/?ts=markdown) 1. [Cyberpedia](https://www.paloaltonetworks.com/cyberpedia?ts=markdown) 2. [Cloud Security](https://www.paloaltonetworks.com/cyberpedia/cloud-security?ts=markdown) 3. [SD-WAN vs. MPLS: Reliability, Security, Cost, and the Future](https://www.paloaltonetworks.com/cyberpedia/sd-wan-vs-mpls?ts=markdown) Table of contents * [Do enterprises still need MPLS in the age of SD-WAN?](#do-enterprises-still-need-mpls-in-the-age-of-sd-wan) * [How does SD-WAN differ from MPLS in architecture and operation?](#how-does-sd-wan-differ-from-mpls-in-architecture-and-operation) * [Which is more reliable, MPLS or SD-WAN?](#which-is-more-reliable-mpls-or-sd-wan) * [How secure is SD-WAN compared to MPLS?](#how-secure-is-sd-wan-compared-to-mpls) * [Is SD-WAN really cheaper than MPLS?](#is-sd-wan-really-cheaper-than-mpls) * [Can SD-WAN replace MPLS, or do they coexist?](#can-sd-wan-replace-mpls-or-do-they-coexist) * [What's the future of SD-WAN vs. MPLS?](#what-is-the-future-of-sd-wan-vs-mpls) * [SD-WAN vs. MPLS FAQs](#sd-wan-vs-mpls-faqs) # SD-WAN vs. MPLS: Reliability, Security, Cost, and the Future 6 min. read Table of contents * [Do enterprises still need MPLS in the age of SD-WAN?](#do-enterprises-still-need-mpls-in-the-age-of-sd-wan) * [How does SD-WAN differ from MPLS in architecture and operation?](#how-does-sd-wan-differ-from-mpls-in-architecture-and-operation) * [Which is more reliable, MPLS or SD-WAN?](#which-is-more-reliable-mpls-or-sd-wan) * [How secure is SD-WAN compared to MPLS?](#how-secure-is-sd-wan-compared-to-mpls) * [Is SD-WAN really cheaper than MPLS?](#is-sd-wan-really-cheaper-than-mpls) * [Can SD-WAN replace MPLS, or do they coexist?](#can-sd-wan-replace-mpls-or-do-they-coexist) * [What's the future of SD-WAN vs. MPLS?](#what-is-the-future-of-sd-wan-vs-mpls) * [SD-WAN vs. MPLS FAQs](#sd-wan-vs-mpls-faqs) 1. Do enterprises still need MPLS in the age of SD-WAN? * [1. Do enterprises still need MPLS in the age of SD-WAN?](#do-enterprises-still-need-mpls-in-the-age-of-sd-wan) * [2. How does SD-WAN differ from MPLS in architecture and operation?](#how-does-sd-wan-differ-from-mpls-in-architecture-and-operation) * [3. Which is more reliable, MPLS or SD-WAN?](#which-is-more-reliable-mpls-or-sd-wan) * [4. How secure is SD-WAN compared to MPLS?](#how-secure-is-sd-wan-compared-to-mpls) * [5. Is SD-WAN really cheaper than MPLS?](#is-sd-wan-really-cheaper-than-mpls) * [6. Can SD-WAN replace MPLS, or do they coexist?](#can-sd-wan-replace-mpls-or-do-they-coexist) * [7. What's the future of SD-WAN vs. MPLS?](#what-is-the-future-of-sd-wan-vs-mpls) * [8. SD-WAN vs. MPLS FAQs](#sd-wan-vs-mpls-faqs) The difference between MPLS and SD-WAN is that MPLS forwards traffic with label switching over carrier circuits, while SD-WAN directs traffic with software-defined policies across diverse links. MPLS achieves reliability through reserved network paths and carrier quality of service. SD-WAN achieves flexibility through centralized control, dynamic path selection, and integration with cloud applications. ## Do enterprises still need MPLS in the age of SD-WAN? [MPLS](https://www.paloaltonetworks.com/cyberpedia/mpls-what-is-multiprotocol-label-switching) became the backbone of enterprise WANs in the early 2000s. It offered predictable latency, high availability, and strong [quality of service](https://www.paloaltonetworks.com/cyberpedia/mpls-what-is-multiprotocol-label-switching). Service providers built global backbones on MPLS because enterprises needed private, reliable connections for voice, video, and business-critical applications. For many years, this made MPLS the default WAN choice. It delivered performance guarantees that the public internet could not match. Carrier SLAs reinforced this reliability, and global reach gave large enterprises confidence in using MPLS for their distributed operations. ![Architecture diagram titled 'Limitations of traditional WAN' shows multiple network paths converging through a central data center. On the left, a user icon is connected to a VPN, which leads to the internet. Three separate branch icons labeled Branch, Branch #2, and Branch #3 each connect to the central element labeled 'Oversaturated data center' in red. The Branch icon also passes through a router icon. The oversaturated data center connects to both cloud apps and local apps on the right, illustrating indirect traffic flow through the central hub. The internet and data center are also directly connected.](https://www.paloaltonetworks.com/content/dam/pan/en_US/images/cyberpedia/sd-wan-vs-mpls/Limitations-of-traditional-WAN.png "Architecture diagram titled 'Limitations of traditional WAN' shows multiple network paths converging through a central data center. On the left, a user icon is connected to a VPN, which leads to the internet. Three separate branch icons labeled Branch, Branch #2, and Branch #3 each connect to the central element labeled 'Oversaturated data center' in red. The Branch icon also passes through a router icon. The oversaturated data center connects to both cloud apps and local apps on the right, illustrating indirect traffic flow through the central hub. The internet and data center are also directly connected.") However: The role of MPLS has shifted. Modern networks are cloud-first. Applications run in SaaS platforms or public cloud, not only in central [data centers](https://www.paloaltonetworks.com/cyberpedia/what-is-a-data-center). Backhauling all that traffic over MPLS adds latency and cost. Enterprises also expect agility. Provisioning MPLS circuits often takes months. SD-WAN, in contrast, can bring new sites online in days and route directly to the cloud. ![The diagram titled 'App connectivity pre \& post-SD-WAN' illustrates network connections for distributed applications. In the 'From' section, a branch office connects to the headquarters (HQ) via MPLS, and the HQ connects to cloud services like AWS, Azure, Google Drive, Salesforce, and Microsoft, as well as social media platforms such as TikTok, YouTube, Instagram, and Facebook. In the 'To' section, the branch office connects to MPLS/5G/broadband, which directly connects to cloud services, social media platforms, and SaaS applications, bypassing the HQ for certain connections.](https://www.paloaltonetworks.com/content/dam/pan/en_US/images/cyberpedia/sd-wan-vs-mpls/App-connectivity-pre-and-post-SD-WAN.png) Important: MPLS isn't irrelevant. Some industries still value it for deterministic performance. Financial trading, healthcare imaging, and real-time collaboration can still benefit from reserved, private paths. At the same time, many organizations reduce their MPLS footprint by offloading SaaS and branch traffic to SD-WAN. In other words: MPLS is no longer the automatic answer. SD-WAN now covers most enterprise needs with more flexibility and lower cost. But MPLS remains in use for specific workloads and locations. The reality for many enterprises is a hybrid WAN, where MPLS and SD-WAN operate side by side until the business no longer requires carrier-grade predictability. | ***Further reading:*** * [*What Is Hybrid SD-WAN?*](https://www.paloaltonetworks.com/cyberpedia/what-is-hybrid-sdwan) * [*Traditional WAN vs. SD-WAN: What Are the Differences?*](https://www.paloaltonetworks.com/cyberpedia/traditional-wan-vs-sd-wan) ## How does SD-WAN differ from MPLS in architecture and operation? MPLS and SD-WAN approach wide area networking in very different ways. MPLS relies on private circuits and forwards traffic using label switching. ![The diagram is titled 'MPLS architecture' and shows two main sections: the control plane and the forwarding plane. The control plane contains two blue boxes labeled 'IP routing protocols' and 'Label Distribution Protocol (LDP),' with arrows pointing right to 'Routing information exchange' and 'Label binding information exchange.' Below, the forwarding plane has two orange boxes labeled 'IP routing table or CEF FIB' and 'Label forwarding information base,' with arrows pointing right to 'Outgoing IP packets' and 'Outgoing labeled packets.' On the left side, arrows indicate 'Incoming IP packets' entering the IP routing table and 'Incoming labeled packets' entering the label forwarding information base.](https://www.paloaltonetworks.com/content/dam/pan/en_US/images/cyberpedia/sd-wan-vs-mpls/MPLS-architecture.png) SD-WAN creates a software overlay that runs on top of any transport, including broadband, LTE, or even MPLS itself. ![Diagram labeled 'SD-WAN architecture' showing six branch office icons, three on each side, connected to a central data center box at the bottom. The branches and data center also connect upward to a box labeled 'Internet' that contains cloud service logos including AWS, Azure, Google Cloud, Dropbox, Salesforce, and Workday. Green lines represent MPLS, purple lines represent cellular, and blue lines represent broadband, all shown in the key at the bottom.](https://www.paloaltonetworks.com/content/dam/pan/en_US/images/cyberpedia/sd-wan-vs-mpls/SD-WAN-architecture.png) Here's why that matters: **MPLS architecture is hardware-centric.** The carrier provisions dedicated links and enforces routing across its backbone. Policies are tied to those circuits. In contrast, SD-WAN separates the control and data plane. It uses centralized software to steer traffic dynamically across multiple paths. **Traffic handling is another key distinction.** MPLS uses class of service settings defined by the carrier to prioritize voice, video, and other critical flows. These priorities remain static once configured. SD-WAN measures link conditions in real time. It can shift traffic based on latency, jitter, or packet loss. Which means: applications get the best available path at that moment. **Provisioning also differs sharply.** Adding or changing MPLS circuits can take weeks or months. SD-WAN overlays can be deployed in days. New sites can join simply by connecting an edge device or vCPE to the controller. That difference in speed directly impacts how fast an enterprise can adapt its WAN. **Management is equally important.** With MPLS, the service provider manages the network and applies policies. Enterprise IT teams depend on carrier processes for every change. With SD-WAN, control is returned to the enterprise. Administrators can define policies centrally and push them to all sites instantly. ***Note:*** *Neither model is universally better. MPLS still offers predictable delivery over private links. SD-WAN offers agility and visibility across diverse transports. Most enterprises today blend the two.* | ***Further reading:*** * [*What Is an SD-WAN Appliance? | SD-WAN Hardware \& Equipment*](https://www.paloaltonetworks.com/cyberpedia/what-is-an-sdwan-appliance) * [*What Is an SD-WAN Gateway? | Definition, Explanation, Use Cases*](https://www.paloaltonetworks.com/cyberpedia/what-is-an-sd-wan-gateway) * [*Types of SD-WAN Deployment Models: A Complete Guide*](https://www.paloaltonetworks.com/cyberpedia/sd-wan-deployment-models) ## Which is more reliable, MPLS or SD-WAN? MPLS has long been known for reliability. It provides deterministic performance on latency, jitter, and packet loss. That reputation comes from its design. Traffic travels on private circuits with reserved bandwidth, and carriers guarantee delivery through service level agreements (SLAs). SD-WAN works differently. It doesn't reserve private paths. Instead, it uses multiple links at once and constantly measures their performance. If latency spikes or a line fails, traffic can move to a healthier path automatically. It uses multipath. It monitors links in real time. It fails over automatically. That gives SD-WAN resilience in practice. | Reliability: MPLS vs. SD-WAN | |------------------------------| | Aspect | MPLS reliability | SD-WAN reliability | |-----------------------|-------------------------------------------------------------------------------|-----------------------------------------------------------| | **Performance basis** | Deterministic, with fixed latency, jitter, and packet loss | Adaptive, based on real-time monitoring of multiple links | | **Traffic handling** | Reserved bandwidth over private circuits | Dynamic path selection with multipath and failover | | **Guarantees** | Backed by carrier SLAs | Dependent on overlay intelligence and underlay quality | | **Best fit** | Mission-critical apps where every millisecond counts (e.g., trading, imaging) | Branch SaaS, cloud apps, and general business traffic | Here's why this matters: MPLS reliability is contractual. The carrier is obligated to deliver the promised quality. SD-WAN reliability is adaptive. It depends on the intelligence of the overlay and the quality of available underlay connections. So which is more reliable? It depends on the workload. For a trading floor or medical imaging system, MPLS may still be the safer choice because every millisecond counts. For branch offices using SaaS, SD-WAN may be more effective. It provides enough consistency for cloud applications while avoiding MPLS provisioning delays and costs. On the other hand, many enterprises find that a mix works best. MPLS remains in place for mission-critical flows. SD-WAN carries the bulk of everyday business traffic. That balance lets organizations get deterministic reliability where it matters and adaptive reliability everywhere else. ![Icon of a sd-wan box above a hand](https://www.paloaltonetworks.com/content/dam/pan/en_US/images/cyberpedia/sd-wan-vs-mpls/icon-sd-wan.svg) ## See it in action Book a personalized Prisma SD-WAN demo to see how it supports your network's reliability and applications. [Request demo](https://www.paloaltonetworks.com/sase/sd-wan#connect) ## How secure is SD-WAN compared to MPLS? MPLS has often been described as secure because it runs on private circuits. But that security is limited. MPLS isolates traffic from other customers, yet it does not [encrypt the data](https://www.paloaltonetworks.com/cyberpedia/data-encryption). If someone gained access inside the provider's backbone, the traffic would be visible. SD-WAN approaches security differently. Every connection is built over encrypted tunnels. This ensures that data stays protected even when the underlying transport is the public internet. Many SD-WAN solutions also integrate [firewall-as-a-service (FWaaS)](https://www.paloaltonetworks.com/cyberpedia/what-is-firewall-as-a-service) or are delivered as part of a larger secure access service edge (SASE) framework. Which means: security is embedded more directly into the architecture. ![Architecture diagram illustrating security integration in an SD-WAN environment. It features a branch on the left connected to a next-generation firewall (NGFW), which is indicated by an orange circle. The NGFW connects to an SD-WAN router, shown in blue at the center of the diagram. Above the SD-WAN router, several security features are displayed within a red-bordered box, including IDS/IPS, ATP, UTM, DLP, and SSL. The SD-WAN router connects to HQ and the Internet, with threat feeds depicted to the right of the Internet. The data center and SIEM/SOAR are also shown as endpoints connected to the SD-WAN router. The title 'Security integration in SD-WAN' is prominently displayed at the top, highlighting the focus on enhancing security measures within the SD-WAN architecture.](https://www.paloaltonetworks.com/content/dam/pan/en_US/images/cyberpedia/sd-wan-vs-mpls/SD-WAN-security-integration.png "Architecture diagram illustrating security integration in an SD-WAN environment. It features a branch on the left connected to a next-generation firewall (NGFW), which is indicated by an orange circle. The NGFW connects to an SD-WAN router, shown in blue at the center of the diagram. Above the SD-WAN router, several security features are displayed within a red-bordered box, including IDS/IPS, ATP, UTM, DLP, and SSL. The SD-WAN router connects to HQ and the Internet, with threat feeds depicted to the right of the Internet. The data center and SIEM/SOAR are also shown as endpoints connected to the SD-WAN router. The title 'Security integration in SD-WAN' is prominently displayed at the top, highlighting the focus on enhancing security measures within the SD-WAN architecture.") Here's why this comparison matters: MPLS is private but not inherently secure. It depends on trust in the carrier and physical isolation. SD-WAN is not private by default but compensates with encryption and layered security controls. Both models still require a defense-in-depth approach. Enterprises often deploy additional [firewalls](https://www.paloaltonetworks.com/cyberpedia/what-is-a-firewall), [intrusion detection](https://www.paloaltonetworks.com/cyberpedia/what-is-an-intrusion-detection-system-ids), or monitoring alongside either option. On the other hand, SD-WAN gives enterprises more direct visibility into security policies. They can manage [segmentation](https://www.paloaltonetworks.com/cyberpedia/what-is-network-segmentation), apply application-level controls, and tie network access into identity systems. MPLS leaves these tasks outside its scope. The takeaway: MPLS provides privacy through isolation, while SD-WAN provides confidentiality through encryption and integrated controls. Neither is enough on its own, but SD-WAN better aligns with the security needs of cloud-first and distributed environments. | ***Further reading:*** * [*How Are Firewalls and SD-WAN Related?*](https://www.paloaltonetworks.com/cyberpedia/how-are-firewalls-and-sd-wan-related) * [*What Is SD-WAN Security? | SD-WAN Security Considerations*](https://www.paloaltonetworks.com/cyberpedia/what-is-sd-wan-security) * [*What Is SASE (Secure Access Service Edge)? | A Starter Guide*](https://www.paloaltonetworks.com/cyberpedia/what-is-sase) ## Is SD-WAN really cheaper than MPLS? MPLS has always carried a high price tag. The main reason is recurring circuit costs. Carriers lease private lines, and enterprises pay a premium for guaranteed performance. Provisioning is also inflexible. Adding or changing circuits often takes months, which adds to both direct and indirect costs. SD-WAN is often presented as the cheaper option. It can aggregate lower-cost internet and broadband links to replace or supplement MPLS. That shift usually reduces the recurring expenses tied to private circuits. On the surface, it looks like clear savings. However: SD-WAN is not free of costs. Licenses for the software overlay must be purchased. Edge devices or virtual CPEs are required at each site. If a managed service is chosen, ongoing fees are added. Which means: the savings are not absolute. They depend on how the solution is deployed and consumed. Here's why this matters: Total cost cannot be measured by circuits alone. Management overhead, agility, and opportunity costs all factor in. MPLS is slower to provision, which can delay branch rollouts or cloud migrations. SD-WAN enables faster deployment and direct-to-cloud access, which reduces operational costs over time. In practice, many enterprises find that the agility and flexibility of SD-WAN offset its licensing and hardware costs. The takeaway: SD-WAN is often less expensive in the long run. But the actual cost advantage depends on the mix of transport, licensing model, and management approach an enterprise selects. | ***Further reading:** [How Much Does SD-WAN Cost?](https://www.paloaltonetworks.com/cyberpedia/how-much-does-sdwan-cost)* ## Can SD-WAN replace MPLS, or do they coexist? SD-WAN often enters the picture as a replacement for MPLS. But in practice, most networks operate the two in parallel. Here's why: MPLS has long been valued for its reliability. Enterprises rely on it for mission-critical applications that demand predictable performance. At the same time, SD-WAN provides flexibility. It can route SaaS and cloud traffic directly over the internet, reduce dependence on carrier circuits, and connect branch sites faster. The result is a hybrid WAN. MPLS stays in place for workloads that need strict guarantees. SD-WAN handles traffic that benefits from agility and cost efficiency. This coexistence gives IT teams a balance of performance and adaptability. ![The diagram titled 'Hybrid SD-WAN' shows SD-WAN edges on the left connecting to both the public internet and a private network labeled MPLS. The public internet path links to SD-WAN gateways that provide access to SaaS and an enterprise data center, while the private MPLS path connects directly to the enterprise data center with an on-premises SD-WAN edge. At the top, an SD-WAN orchestrator oversees the architecture. Labels highlight dynamic multipath optimization, centralized gateways, and parallel connectivity through both MPLS and broadband links.](https://www.paloaltonetworks.com/content/dam/pan/en_US/images/cyberpedia/sd-wan-vs-mpls/Hybrid-SD-WAN.png) Migration strategies reflect this reality. Few organizations make a clean cut from MPLS to SD-WAN. Instead, they phase in SD-WAN across sites, monitor performance, and keep rollback options available. Over time, MPLS contracts may be reduced as more traffic shifts to SD-WAN overlays. On the other hand: MPLS is not disappearing. Many enterprises will maintain a blend, using SD-WAN for scale and cloud reach while retaining MPLS where deterministic delivery is non-negotiable. In other words: SD-WAN can replace MPLS in some cases. But for most, they coexist during transition---and sometimes for the long term. | ***Further reading:** [How to Execute an MPLS to SD-WAN Migration Step-by-Step](https://www.paloaltonetworks.com/cyberpedia/mpls-to-sd-wan-migration)* ## What's the future of SD-WAN vs. MPLS? MPLS is shrinking. But it's not disappearing. Many enterprises are reducing MPLS to a smaller role---often just for mission-critical traffic. At the same time, they are bringing in SD-WAN as the primary transport layer or running both in hybrid mode. This coexistence helps avoid disruption and provides a smooth transition. On the other hand, SD-WAN is quickly becoming the base for secure edge architectures. It ties into cloud adoption, [zero trust](https://www.paloaltonetworks.com/cyberpedia/what-is-a-zero-trust-architecture), and SASE. Which means: most future-facing strategies are being built with SD-WAN at the core. The path forward is likely gradual. First hybrid---where MPLS and SD-WAN run together during transition.. Then internet-first, where broadband, fiber, and wireless links replace MPLS as the dominant transport. And eventually, a secure edge model where SD-WAN integrates with broader SASE frameworks for policy enforcement and security at every point of access. Important: MPLS still offers guaranteed performance through SLAs, and in some regions, it remains the most reliable option. That's why MPLS won't vanish overnight. To sum it up: enterprises are moving toward SD-WAN because it's flexible, cost-efficient, and cloud-ready. But MPLS will continue to play a supporting role for years to come, especially where performance guarantees are critical. ![Icon of box](https://www.paloaltonetworks.com/content/dam/pan/en_US/images/cyberpedia/sd-wan-vs-mpls/icon-sd-wan-trial.svg) ## Try it in your network Start a Prisma SD-WAN free trial to test reliability and application performance in your environment. [Start free trial](https://www.paloaltonetworks.com/sase/sd-wan#connect) ## SD-WAN vs. MPLS FAQs #### Is SD-WAN replacing MPLS? SD-WAN is not replacing MPLS entirely, but it is becoming a popular alternative for certain use cases. SD-WAN offers cost-effectiveness, flexibility, and improved performance for cloud-based applications, making it an attractive choice for organizations seeking to optimize their WAN connectivity. However, MPLS still has its advantages in terms of reliability, security, and dedicated connections, making it suitable for specific applications and organizations with specific requirements. #### What is the advantage of SD-WAN? * Operational simplicity * Carrier-Independent WAN connectivity * Improved performance * Cost savings * Improved connectivity * Increased security * Improved reliability #### What are the disadvantages of MPLS? * Higher cost * Limited flexibility * Longer deployment times * Centralized architecture limitations * Limited visibility and control #### Is SD-WAN a Layer 2 or 3 network? SD-WAN appliances often have built-in Layer 3 to Layer 7 security capabilities that can secure application traffic both intrabranch and interbranch. #### Has SD-WAN become obsolete? No. SD-WAN is not obsolete. It remains the foundation of modern WAN design and is evolving into secure access service edge (SASE) and zero trust architectures. #### What is more secure, SD-WAN or MPLS? Typically SD-WAN. MPLS is private but unencrypted. SD-WAN encrypts traffic end-to-end and often integrates firewall/SASE controls, which better fits cloud and distributed use. #### Is SD-WAN deployment causing the demise of MPLS? Yes, gradually. SD-WAN adoption is reducing reliance on MPLS by shifting traffic to broadband and cloud-first paths. MPLS remains for mission-critical applications, but its role is shrinking. Related content [Podcast: Packet Pushers | Why SD-WAN is the Secret to SASE Success Hear why SD-WAN is the foundational component of a SASE solution.](https://media.blubrry.com/packetpushers/media.blubrry.com/2903570/ins.blubrry.com/2903570/TB_Palo_Alto_0701-SD-WAN.mp3) [Podcast: Packet Pushers | Can SD-WAN Solve Latency Issues for Modern Applications? Get the facts on how application acceleration helps deliver SaaS \& cloud apps with the highest level of performance.](https://media.blubrry.com/packetpushers/media.blubrry.com/2903570/ins.blubrry.com/2903570/TB_0120_PANW.mp3) [eBook: Why Next-Gen SD-WAN Is the Solution for You Discover how integrated next-gen SD-WAN improves user experience, control, and visibility.](https://start.paloaltonetworks.com/why-next-gen-sd-wan-is-the-solution-for-you.html) [eBook: The Branch of the Future, Today Find out how to securely enable branch modernization with Prisma SD-WAN.](https://www.paloaltonetworks.com/resources/ebooks/securely-enable-branch-modernization-with-prisma-sd-wan) ![Share page on facebook](https://www.paloaltonetworks.com/etc/clientlibs/clean/imgs/resources/facebook-circular-icon.svg) ![Share page on linkedin](https://www.paloaltonetworks.com/etc/clientlibs/clean/imgs/resources/linkedin-circular-icon.svg) [![Share page by an email](https://www.paloaltonetworks.com/etc/clientlibs/clean/imgs/resources/email-circular-icon.svg)](mailto:?subject=SD-WAN%20vs.%20MPLS%3A%20Reliability%2C%20Security%2C%20Cost%2C%20and%20the%20Future&body=MPLS%20forwards%20traffic%20with%20label%20switching%20over%20carrier%20circuits%2C%20while%20SD-WAN%20directs%20traffic%20with%20software-defined%20policies%20across%20diverse%20links.%20at%20https%3A//www.paloaltonetworks.com/cyberpedia/sd-wan-vs-mpls) Back to Top {#footer} ## Products and Services * [AI-Powered Network Security Platform](https://www.paloaltonetworks.com/network-security?ts=markdown) * [Secure AI by Design](https://www.paloaltonetworks.com/precision-ai-security/secure-ai-by-design?ts=markdown) * [Prisma AIRS](https://www.paloaltonetworks.com/prisma/prisma-ai-runtime-security?ts=markdown) * [AI Access Security](https://www.paloaltonetworks.com/sase/ai-access-security?ts=markdown) * [Cloud Delivered Security Services](https://www.paloaltonetworks.com/network-security/security-subscriptions?ts=markdown) * [Advanced Threat Prevention](https://www.paloaltonetworks.com/network-security/advanced-threat-prevention?ts=markdown) * [Advanced URL Filtering](https://www.paloaltonetworks.com/network-security/advanced-url-filtering?ts=markdown) * [Advanced WildFire](https://www.paloaltonetworks.com/network-security/advanced-wildfire?ts=markdown) * [Advanced DNS Security](https://www.paloaltonetworks.com/network-security/advanced-dns-security?ts=markdown) * [Enterprise Data Loss Prevention](https://www.paloaltonetworks.com/sase/enterprise-data-loss-prevention?ts=markdown) * [Enterprise IoT Security](https://www.paloaltonetworks.com/network-security/enterprise-device-security?ts=markdown) * [Medical IoT Security](https://www.paloaltonetworks.com/network-security/medical-device-security?ts=markdown) * [Industrial OT Security](https://www.paloaltonetworks.com/network-security/medical-device-security?ts=markdown) * [SaaS Security](https://www.paloaltonetworks.com/sase/saas-security?ts=markdown) * [Next-Generation Firewalls](https://www.paloaltonetworks.com/network-security/next-generation-firewall?ts=markdown) * [Hardware Firewalls](https://www.paloaltonetworks.com/network-security/hardware-firewall-innovations?ts=markdown) * [Software Firewalls](https://www.paloaltonetworks.com/network-security/software-firewalls?ts=markdown) * [Strata Cloud Manager](https://www.paloaltonetworks.com/network-security/strata-cloud-manager?ts=markdown) * [SD-WAN for NGFW](https://www.paloaltonetworks.com/network-security/sd-wan-subscription?ts=markdown) * [PAN-OS](https://www.paloaltonetworks.com/network-security/pan-os?ts=markdown) * [Panorama](https://www.paloaltonetworks.com/network-security/panorama?ts=markdown) * [Secure Access Service Edge](https://www.paloaltonetworks.com/sase?ts=markdown) * [Prisma SASE](https://www.paloaltonetworks.com/sase?ts=markdown) * [Application Acceleration](https://www.paloaltonetworks.com/sase/app-acceleration?ts=markdown) * [Autonomous Digital Experience Management](https://www.paloaltonetworks.com/sase/adem?ts=markdown) * [Enterprise DLP](https://www.paloaltonetworks.com/sase/enterprise-data-loss-prevention?ts=markdown) * [Prisma Access](https://www.paloaltonetworks.com/sase/access?ts=markdown) * [Prisma Browser](https://www.paloaltonetworks.com/sase/prisma-browser?ts=markdown) * [Prisma SD-WAN](https://www.paloaltonetworks.com/sase/sd-wan?ts=markdown) * [Remote Browser Isolation](https://www.paloaltonetworks.com/sase/remote-browser-isolation?ts=markdown) * [SaaS Security](https://www.paloaltonetworks.com/sase/saas-security?ts=markdown) * [AI-Driven Security Operations Platform](https://www.paloaltonetworks.com/cortex?ts=markdown) * [Cloud Security](https://www.paloaltonetworks.com/cortex/cloud?ts=markdown) * [Cortex Cloud](https://www.paloaltonetworks.com/cortex/cloud?ts=markdown) * [Application Security](https://www.paloaltonetworks.com/cortex/cloud/application-security?ts=markdown) * [Cloud Posture Security](https://www.paloaltonetworks.com/cortex/cloud/cloud-posture-security?ts=markdown) * [Cloud Runtime Security](https://www.paloaltonetworks.com/cortex/cloud/runtime-security?ts=markdown) * [Prisma Cloud](https://www.paloaltonetworks.com/prisma/cloud?ts=markdown) * [AI-Driven SOC](https://www.paloaltonetworks.com/cortex?ts=markdown) * [Cortex XSIAM](https://www.paloaltonetworks.com/cortex/cortex-xsiam?ts=markdown) * [Cortex XDR](https://www.paloaltonetworks.com/cortex/cortex-xdr?ts=markdown) * [Cortex XSOAR](https://www.paloaltonetworks.com/cortex/cortex-xsoar?ts=markdown) * [Cortex Xpanse](https://www.paloaltonetworks.com/cortex/cortex-xpanse?ts=markdown) * [Unit 42 Managed Detection \& Response](https://www.paloaltonetworks.com/cortex/managed-detection-and-response?ts=markdown) * [Managed XSIAM](https://www.paloaltonetworks.com/cortex/managed-xsiam?ts=markdown) * [Threat Intel and Incident Response Services](https://www.paloaltonetworks.com/unit42?ts=markdown) * [Proactive Assessments](https://www.paloaltonetworks.com/unit42/assess?ts=markdown) * [Incident Response](https://www.paloaltonetworks.com/unit42/respond?ts=markdown) * [Transform Your Security Strategy](https://www.paloaltonetworks.com/unit42/transform?ts=markdown) * [Discover Threat Intelligence](https://www.paloaltonetworks.com/unit42/threat-intelligence-partners?ts=markdown) ## Company * [About Us](https://www.paloaltonetworks.com/about-us?ts=markdown) * [Careers](https://jobs.paloaltonetworks.com/en/) * [Contact Us](https://www.paloaltonetworks.com/company/contact-sales?ts=markdown) * [Corporate Responsibility](https://www.paloaltonetworks.com/about-us/corporate-responsibility?ts=markdown) * [Customers](https://www.paloaltonetworks.com/customers?ts=markdown) * [Investor Relations](https://investors.paloaltonetworks.com/) * [Location](https://www.paloaltonetworks.com/about-us/locations?ts=markdown) * [Newsroom](https://www.paloaltonetworks.com/company/newsroom?ts=markdown) ## Popular Links * [Blog](https://www.paloaltonetworks.com/blog/?ts=markdown) * [Communities](https://www.paloaltonetworks.com/communities?ts=markdown) * [Content Library](https://www.paloaltonetworks.com/resources?ts=markdown) * [Cyberpedia](https://www.paloaltonetworks.com/cyberpedia?ts=markdown) * [Event Center](https://events.paloaltonetworks.com/) * [Manage Email Preferences](https://start.paloaltonetworks.com/preference-center) * [Products A-Z](https://www.paloaltonetworks.com/products/products-a-z?ts=markdown) * [Product Certifications](https://www.paloaltonetworks.com/legal-notices/trust-center/compliance?ts=markdown) * [Report a Vulnerability](https://www.paloaltonetworks.com/security-disclosure?ts=markdown) * [Sitemap](https://www.paloaltonetworks.com/sitemap?ts=markdown) * [Tech Docs](https://docs.paloaltonetworks.com/) * [Unit 42](https://unit42.paloaltonetworks.com/) * [Do Not Sell or Share My Personal Information](https://panwedd.exterro.net/portal/dsar.htm?target=panwedd) ![PAN logo](https://www.paloaltonetworks.com/etc/clientlibs/clean/imgs/pan-logo-dark.svg) * [Privacy](https://www.paloaltonetworks.com/legal-notices/privacy?ts=markdown) * [Trust Center](https://www.paloaltonetworks.com/legal-notices/trust-center?ts=markdown) * [Terms of Use](https://www.paloaltonetworks.com/legal-notices/terms-of-use?ts=markdown) * [Documents](https://www.paloaltonetworks.com/legal?ts=markdown) Copyright © 2025 Palo Alto Networks. All Rights Reserved * [![Youtube](https://www.paloaltonetworks.com/etc/clientlibs/clean/imgs/social/youtube-black.svg)](https://www.youtube.com/user/paloaltonetworks) * [![Podcast](https://www.paloaltonetworks.com/content/dam/pan/en_US/images/icons/podcast.svg)](https://www.paloaltonetworks.com/podcasts/threat-vector?ts=markdown) * [![Facebook](https://www.paloaltonetworks.com/etc/clientlibs/clean/imgs/social/facebook-black.svg)](https://www.facebook.com/PaloAltoNetworks/) * [![LinkedIn](https://www.paloaltonetworks.com/etc/clientlibs/clean/imgs/social/linkedin-black.svg)](https://www.linkedin.com/company/palo-alto-networks) * [![Twitter](https://www.paloaltonetworks.com/etc/clientlibs/clean/imgs/social/twitter-x-black.svg)](https://twitter.com/PaloAltoNtwks) * EN Select your language