Prisma Access is a Secure Access Service Edge (SASE) platform that converges networking and security functions into a single, cloud-delivered service. Data Loss Prevention (DLP) and Cloud Access Security Broker (CASB) are fundamental security technologies. DLP inspects network traffic to prevent the exfiltration of sensitive data, while CASB provides visibility and control over cloud-based applications (SaaS). Within the Prisma Access architecture, these capabilities are integral components of the cloud-delivered security stack. They are processed by the Security Processing Nodes (SPNs) and are explicitly categorized as security services designed to protect users, applications, and data.

A. Network: This layer is responsible for connectivity, routing, and SD-WAN functionality, not the content inspection and policy enforcement provided by DLP and CASB.

B. Management: This layer involves the configuration, logging, and monitoring of the service (e.g., via Panorama or the cloud management UI), not the real-time security processing itself.

C. Cloud: This describes the delivery model for the entire Prisma Access platform rather than a specific functional layer within its architecture.

1. Palo Alto Networks. (2023). Prisma Access At a Glance [Datasheet]. In the section "Complete

Best-in-Class Security

" the datasheet lists "Data Loss Prevention (DLP)" and "SaaS Security Inline (CASB)" as key security capabilities of the platform.

2. Palo Alto Networks. (2024). Prisma Access Administrator's Guide. "Get Started with Enterprise DLP". This section describes DLP as a security service that you configure to "discover and protect sensitive data."

3. Palo Alto Networks. (2024). Prisma Access Administrator's Guide. "SaaS Security Inline". This documentation details how Prisma Access provides inline CASB capabilities to "discover and control new applications" and "protect data

" which are core security functions.