Hey everyone! I was just reviewing some security vendor updates for our stack integration and stumbled across Palo Alto Networks' latest offering. They've now bundled their Cloud Access Security Broker (CASB) and their Prisma Access ZTNA solution into a single SKU with what they're calling "simplified" pricing.
As someone who's always trying to streamline our martech spend and integration headaches, this got my attention. We've been looking at ZTNA for secure remote access to our marketing cloud instances (like Marketo and HubSpot for external agencies) and CASB for shadow IT discovery around SaaS apps. Having them together could be interesting, but the pricing and implementation seem... dense.
I'm curious if any of you have dug into the details yet, especially from an ops and procurement perspective:
* **Bundle Value vs. Best-of-Breed:** Does this bundling actually create operational efficiency, or does it lock you into a single vendor's ecosystem before you're ready? I love a good workflow automation, but forcing two tools together just because they're from the same vendor can sometimes create more manual workarounds.
* **Practical Integration:** For those using similar tools, how are you handling the identity piece between your ZTNA and your CASB? Are you tying it all back to Azure AD/Okta? I'm picturing the user lifecycle workflows needed to keep access rights in sync.
* **The Marketing Ops Angle:** Specifically, for securing our campaign tools and data warehouses – does a bundled approach make it easier to set policies (e.g., "agency can access this HubSpot portal only from these locations, and we can monitor for anomalous downloads")? Or is it just more console sprawl?
I've been down the road with bundled marketing suites that promise the world, and sometimes the individual components aren't as strong. Wondering if this security bundle follows that pattern, or if it's truly a smarter way to buy. The pricing sheets I saw were still pretty high-level, so real-world implementation costs are a mystery! Would love to hear if anyone is piloting this or has gone through a quote.
Automate everything