In which mode should an ION device be configured at a newly acquired site to...

AnION device(used in Prisma SD-WAN) must be configured inAnalytics modeat a newly acquired site toaudit traffic without steering it. This mode allows administrators tomonitor network behaviorwithout activelymodifying traffic paths.

Passively Observes Traffic

TheION device monitors and logs site trafficfor analysis.

No active controlover routing or traffic flow is applied.

Useful for Network Auditing Before Full Deployment

Analytics mode providesvisibility into site trafficbefore committing toSD-WAN policy changes.

Helpsidentify optimization opportunitiesandtroubleshoot connectivitybefore enabling traffic steering.

(A) Access Mode– Enablesactive routing and steeringof traffic, which isnot desiredfor passive auditing.

(B) Control Mode–Actively controls traffic flowsand enforces policies, not suitable for observation-only setups.

(C) Disabled Mode– Thedevice would not functionin this mode, making it useless for traffic monitoring.

Firewall Deployment– Prisma SD-WAN ION devices must be placed in Analytics mode for initial audits.

Zero Trust Architectures– Helps assess security risks before enabling active controls.

Why Analytics Mode is the Correct Choice?Other Answer Choices AnalysisReferences and Justification:Thus,Analytics Mode (D) is the correct answer, as it allows auditing of site traffic without traffic steering.