A Prisma SD-WAN branch device (ION) can be deployed in one of three distinct operational modes. Control mode is the standard operational state where the device is fully managed, builds secure fabric tunnels, and actively forwards traffic based on policy. Analytics mode places the device in a passive, monitoring-only state; it collects and reports network and application data to the controller but does not build tunnels or enforce policy. Disabled mode effectively takes the device offline, ceasing all communication with the controller and participation in the SD-WAN fabric.

A. "Testing" and "POV" (Proof of Value) describe deployment phases or use cases, not configurable operational modes within the Prisma SD-WAN system.

B. "Production" is a deployment stage, not a specific device mode. While a device in "Control" mode is typically in production, "Production" itself is not the mode name.

D. "POV" and "Production" are terms for deployment stages or environments, not the technical configuration states of an ION device.

1. Palo Alto Networks Prisma SD-WAN Administrator's Guide. (2023). Device Modes. "An ION device can be in one of the following modes: Control Mode, Analytics Mode, Disabled Mode." This section details the function of each of the three official modes. Retrieved from the Palo Alto Networks TechDocs portal.

2. Palo Alto Networks Prisma SD-WAN Administrator's Guide. (2023). Add a Site. In the workflow for adding a new site, the documentation specifies selecting the device mode, listing "Control," "Analytics," and "Disabled" as the available options for the ION device at that site. Retrieved from the Palo Alto Networks TechDocs portal.