{"id":362241,"date":"2026-07-16T07:00:54","date_gmt":"2026-07-16T14:00:54","guid":{"rendered":"https:\/\/www.paloaltonetworks.com\/blog\/?p=362241"},"modified":"2026-07-15T07:52:14","modified_gmt":"2026-07-15T14:52:14","slug":"palo-alto-networks-and-att-delivering-quantum-resilient-sase-fabric","status":"publish","type":"post","link":"https:\/\/www2.paloaltonetworks.com\/blog\/2026\/07\/palo-alto-networks-and-att-delivering-quantum-resilient-sase-fabric\/","title":{"rendered":"Palo Alto Networks and AT&#038;T - Delivering Quantum-Resilient SASE Fabric"},"content":{"rendered":"<p><em>By Yogesh Ranade from Palo Alto Networks, and Senthil Ramakrishnan from AT&amp;T<\/em><\/p>\n<p><span style=\"font-weight: 400;\">The digital world is currently navigating a dual-speed revolution. Acceleration of AI and hyperconnectivity is unlocking unprecedented economic value. The silent but rapid progress of quantum computing is fundamentally threatening the cryptographic foundation upon which that value is built.<\/span><\/p>\n<p><span style=\"font-weight: 400;\">As leaders in global networking and cybersecurity, Palo Alto Networks and AT&amp;T Business launched<\/span><a href=\"https:\/\/www.paloaltonetworks.com\/company\/press\/2025\/at-t-joins-forces-with-palo-alto-networks-to-introduce-secure-connectivity-solution-for-business-customers\"> <span style=\"font-weight: 400;\">Secure Connectivity solutions for Business Customers<\/span><\/a><span style=\"font-weight: 400;\">. We recognize that quantum-readiness is no longer a distant milestone; it is now a strategic imperative. With threatening data longevity and <\/span><a href=\"https:\/\/www.paloaltonetworks.com\/cyberpedia\/what-is-quantum-computings-threat-to-cybersecurity#forgery\"><span style=\"font-weight: 400;\">Trust Now, Forge Later<\/span><\/a><span style=\"font-weight: 400;\"> targeting digital identities, the risks are already looming.\u00a0<\/span><\/p>\n<p><span style=\"font-weight: 400;\">By integrating<\/span><a href=\"https:\/\/www.paloaltonetworks.com\/sase\/sd-wan\"> <span style=\"font-weight: 400;\">Prisma SD-WAN\u2019s<\/span><\/a><span style=\"font-weight: 400;\"> cryptographic innovation with AT&amp;T\u2019s global network, Palo Alto Networks and AT&amp;T Business are proud to deliver the <\/span><b>Quantum-Resilient SASE Fabric.<\/b><\/p>\n<h2><b>The Quantum Shift Towards Building Resilience for Tomorrow\u2019s Reality<\/b><\/h2>\n<p><span style=\"font-weight: 400;\">For over 30 years, the difficulty of mathematics has been our primary defense. Classical algorithms, like RSA and Diffie-Hellman, provided the shield for our global economy because they were computationally impossible for classical machines to solve. However, quantum computing fundamentally changes this landscape by providing an exponential speed-up. By leveraging Shor\u2019s Algorithm, quantum computers can break these classical cryptographic foundations, turning a decryption process that would take a classic supercomputer millennia into a task of mere hours.<\/span><\/p>\n<h3><b>Neutralizing the Quantum Crisis<\/b><\/h3>\n<p><span style=\"font-weight: 400;\">Palo Alto Networks is embedding Post-Quantum Cryptography (PQC) as a native pillar of the <\/span><a href=\"https:\/\/www.paloaltonetworks.com\/sase\"><span style=\"font-weight: 400;\">Prisma SASE<\/span><\/a><span style=\"font-weight: 400;\"> fabric. We are moving beyond the forklift-upgrade model to a software-defined, standards-based foundation, which is built on strict separation of management and data plane components:<\/span><\/p>\n<ul>\n<li style=\"font-weight: 400;\" aria-level=\"1\"><b>Universal Control Plane Hardening (TLS 1.3):<\/b><span style=\"font-weight: 400;\"> We have transitioned all control plane traffic to TLS 1.3 (Transport Layer Security 1.3), the global gold standard for Internet encryption. This secures the \"brain\" of the network (where routing configurations and security policies are managed), making it immune to quantum-enabled impersonation and credential theft.<\/span><\/li>\n<li style=\"font-weight: 400;\" aria-level=\"1\"><b>PQC-Hardened Data Plane (IETF Standards):<\/b><span style=\"font-weight: 400;\"> We are operationalizing PQC across the entire fabric by adopting official standards published by the Internet Engineering Task Force (IETF), specifically RFC 9370, 9242, and 8784. In plain terms, these standards allow us to use \"hybrid key exchanges.\" This means we wrap your data in two layers of protection at once: a classical mathematical shield for immediate compatibility, and a quantum-resistant shield to protect against future decryption threats, all without causing packet fragmentation or network slowdowns.<\/span><\/li>\n<li style=\"font-weight: 400;\" aria-level=\"1\"><b>Logs and Telemetry Plane:<\/b><span style=\"font-weight: 400;\"> All network telemetry and metadata (the automated operational logs and traffic pattern data generated by the network, rather than the actual content of your business files) are encrypted in transit via TLS 1.3. This architecture guarantees that even this secondary network metadata is geofenced to your chosen region with no cross-region aggregation, satisfying the most stringent data residency mandates.<\/span><\/li>\n<li style=\"font-weight: 400;\" aria-level=\"1\"><b>Crypto-Agility as a Standard:<\/b><span style=\"font-weight: 400;\"> \"Crypto-agility\" is natively built into our systems, which means the software is designed to adopt new mathematical algorithms. As the National Institute of Standards and Technology (NIST) refines its guidelines, our systems can be upgraded seamlessly via simple, automated cloud updates without requiring expensive hardware replacements to ensure our customers\u2019 security posture.<\/span><\/li>\n<li style=\"font-weight: 400;\" aria-level=\"1\"><b>Secure Boot Support: <\/b><span style=\"font-weight: 400;\">Palo Alto Networks Prisma SD-WAN ION hardware supports Secure Boot to ensure that only cryptographically signed bootloaders, kernels, and trusted applications are executed during the boot process. This establishes a chain of trust from the BIOS firmware to the operating system, preventing the execution of unauthorized or tampered software. ION hardware appliances ship with an integrated, dedicated Trusted Platform Module (TPM), which provides hardware-level root-of-trust by securely storing cryptographic keys, certificates, and sensitive data to prevent unauthorized physical tampering and ensure secure device authentication. The OS\/software layers use PQC algorithms to negotiate and secure the management, control plane and data plane tunnels. This ensures quantum readiness without requiring an immediate, widespread rip-and-replace of physical branch hardware.<\/span><\/li>\n<\/ul>\n<h2><b>The AT&amp;T Perspective Views Security at Global Scale<\/b><\/h2>\n<p><span style=\"font-weight: 400;\">From the perspective of a global leader like AT&amp;T, PQC is an operational mandate. Providing connectivity to the world\u2019s most regulated industries means that security cannot be bolted on. Security must be an inherent property of the transport layer and the connectivity infrastructure itself.<\/span><\/p>\n<h3><b>Turning Complexity into a Strategic Advantage<\/b><\/h3>\n<p><span style=\"font-weight: 400;\">Managing a global footprint that spans across 5G, fiber, and legacy underlays requires an institutional expertise that few can match. For AT&amp;T, the move to a more secure quantum-ready fabric with <\/span><a href=\"https:\/\/www.business.att.com\/products\/att-dynamic-defense.html\" rel=\"nofollow,noopener\" ><span style=\"font-weight: 400;\">Dynamic Defense<\/span><\/a><span style=\"font-weight: 400;\"> is about <\/span><a href=\"https:\/\/about.att.com\/blogs\/2026\/cybersecurity.html\" rel=\"nofollow,noopener\" ><span style=\"font-weight: 400;\">providing security where it matters most<\/span><\/a><span style=\"font-weight: 400;\">: the network. Our customers shouldn't have to worry about whether their data is traveling over an MPLS circuit or the public internet.<\/span><\/p>\n<p><span style=\"font-weight: 400;\">Through this collaboration, AT&amp;T expands the delivery of Dynamic Defense:<\/span><\/p>\n<ul>\n<li style=\"font-weight: 400;\" aria-level=\"1\"><b>Cross-Underlay Consistency:<\/b><span style=\"font-weight: 400;\"> We enable PQC protection to be applied uniformly across all transport mediums, eliminating the \"weak links\" that often exist in hybrid environments where data moves between private and public circuits.<\/span><\/li>\n<li style=\"font-weight: 400;\" aria-level=\"1\"><b>Automated PQC Policy Orchestration:<\/b><span style=\"font-weight: 400;\"> New branch locations are seamlessly integrated into the quantum-ready fabric through automated policy distribution. The moment a device is activated via zero touch provisioning, the branch is enabled to be protected against HNDL threats from the first packet without requiring manual site-by-site intervention.<\/span><\/li>\n<li style=\"font-weight: 400;\" aria-level=\"1\"><b>Compliance:<\/b><span style=\"font-weight: 400;\"> With mandates like <\/span><b>NIS2\/DORA<\/b><span style=\"font-weight: 400;\"> in Europe and <\/span><b>NORA\/CNSA 2.0<\/b><span style=\"font-weight: 400;\"> in the U.S., our clients face a closing window for compliance. AT&amp;T provides the verifiable chain of trust required to prove \"Quantum Readiness\" across the entire circuit path, ensuring your fabric is audit-ready and compliant with global standards.<\/span><\/li>\n<\/ul>\n<h2><b>The Power of the Post-Quantum Secure Fabric<\/b><\/h2>\n<p><span style=\"font-weight: 400;\">The true value of this relationship lies in the synergy between the network and the security stack. By combining our strengths, we have built a solution that is significantly more resilient than the sum of its parts.<\/span><\/p>\n<h3><b>The SPI Advantage Is Performance Without Compromise<\/b><\/h3>\n<p><span style=\"font-weight: 400;\">Through <\/span><a href=\"https:\/\/www.paloaltonetworks.com\/blog\/sase\/seamless-service-provider-network-attach-with-prisma-sase\/\"><b>Service Provider Interconnect<\/b><\/a><b> (SPI),<\/b><span style=\"font-weight: 400;\"> Palo Alto Networks' security platforms natively integrate with AT&amp;T\u2019s private network core to deliver a seamless quantum-safe on-ramp. This means business traffic can connect directly to a secure AT&amp;T network without having to build slow, complex software tunnels over the public internet, preserving high performance while delivering next-generation encryption. Historically, high-level encryption meant a \"performance tax\" on latency and throughput. Our combined architecture allows quantum-safe traffic to flow over AT&amp;T\u2019s network backbone, enabling organizations to modernize their security without sacrificing the user experience.<\/span><\/p>\n<h3><b>Securing the Decentralized Perimeter (The Branch as the Edge)<\/b><\/h3>\n<p><span style=\"font-weight: 400;\">In today\u2019s highly distributed business landscape, the traditional corporate \"headquarters\" is no longer the center of gravity. The network perimeter has shifted to the branch (decentralized edge locations like retail storefronts, remote clinics, regional bank offices, and warehouse hubs) and the individual 5G-connected devices employees use. Securing these remote, local edge points is critical because they represent the primary gateway where sensitive company data first enters the network.\u00a0<\/span><\/p>\n<p><span style=\"font-weight: 400;\">By utilizing AT&amp;T\u2019s leadership in WAN, 5G and cellular technologies, we leverage Hybrid Public Key Infrastructure (PKI) to secure these edge locations. Hybrid PKI is a digital identity framework that issues dual security credentials to every device: one \"classical\" identity to ensure compatibility with existing networks today, and one \"quantum-resistant\" identity. This double-verification guarantees that a cellular-connected remote branch or a mobile site is just as immune to quantum decryption or identity spoofing as a fortified corporate data center.<\/span><\/p>\n<h2><b>The Path Forward Is a Vision for Long-Term Trust<\/b><\/h2>\n<p><span style=\"font-weight: 400;\">The transition to a quantum-ready future is a marathon, not a sprint, and the first steps must be taken now. Palo Alto Networks and AT&amp;T Business are offering a clear, practical path to quantum resilience.<\/span><\/p>\n<p><span style=\"font-weight: 400;\">We are delivering more than a simple software update as we prepare customers for the next generation of digital commerce. Together, we are designing our network to help ensure the data of today remains protected against the threats of tomorrow, securing the digital integrity of every enterprise we serve.<\/span><\/p>\n<p><span style=\"font-weight: 400;\">As we redefine the boundaries of security in connectivity, we invite you to join us in helping secure your organization\u2019s digital future. Contact your or<\/span><a href=\"https:\/\/www.paloaltonetworks.com\/company\/contact-sales\"> <span style=\"font-weight: 400;\">Palo Alto Networks<\/span><\/a><span style=\"font-weight: 400;\"> account representative today to begin a strategic Quantum-Readiness Assessment and experience the power of the <\/span><a href=\"https:\/\/www.paloaltonetworks.com\/blog\/sase\/the-practical-path-to-a-quantum-ready-future-in-sase\/\"><span style=\"font-weight: 400;\">Quantum-Resilient SASE Fabric<\/span><\/a><span style=\"font-weight: 400;\">.<\/span><\/p>\n","protected":false},"excerpt":{"rendered":"<p>By Yogesh Ranade from Palo Alto Networks, and Senthil Ramakrishnan from AT&amp;T The digital world is currently navigating a dual-speed revolution. Acceleration of AI and hyperconnectivity is unlocking unprecedented economic value. The &hellip;<\/p>\n","protected":false},"author":840,"featured_media":362246,"comment_status":"open","ping_status":"open","sticky":false,"template":"","format":"standard","meta":{"_jetpack_memberships_contains_paid_content":false,"footnotes":""},"categories":[308,78,6717],"tags":[8153,10804,6881,3255],"coauthors":[8449],"class_list":["post-362241","post","type-post","status-publish","format-standard","has-post-thumbnail","hentry","category-announcement","category-partners","category-products-and-services","tag-att","tag-quantom-cryptography","tag-sase","tag-service-providers"],"jetpack_featured_media_url":"https:\/\/www2.paloaltonetworks.com\/blog\/wp-content\/uploads\/2026\/07\/Quantum_ATT_Blog_Featured-scaled.jpeg","jetpack_sharing_enabled":true,"_links":{"self":[{"href":"https:\/\/www2.paloaltonetworks.com\/blog\/wp-json\/wp\/v2\/posts\/362241","targetHints":{"allow":["GET"]}}],"collection":[{"href":"https:\/\/www2.paloaltonetworks.com\/blog\/wp-json\/wp\/v2\/posts"}],"about":[{"href":"https:\/\/www2.paloaltonetworks.com\/blog\/wp-json\/wp\/v2\/types\/post"}],"author":[{"embeddable":true,"href":"https:\/\/www2.paloaltonetworks.com\/blog\/wp-json\/wp\/v2\/users\/840"}],"replies":[{"embeddable":true,"href":"https:\/\/www2.paloaltonetworks.com\/blog\/wp-json\/wp\/v2\/comments?post=362241"}],"version-history":[{"count":9,"href":"https:\/\/www2.paloaltonetworks.com\/blog\/wp-json\/wp\/v2\/posts\/362241\/revisions"}],"predecessor-version":[{"id":362493,"href":"https:\/\/www2.paloaltonetworks.com\/blog\/wp-json\/wp\/v2\/posts\/362241\/revisions\/362493"}],"wp:featuredmedia":[{"embeddable":true,"href":"https:\/\/www2.paloaltonetworks.com\/blog\/wp-json\/wp\/v2\/media\/362246"}],"wp:attachment":[{"href":"https:\/\/www2.paloaltonetworks.com\/blog\/wp-json\/wp\/v2\/media?parent=362241"}],"wp:term":[{"taxonomy":"category","embeddable":true,"href":"https:\/\/www2.paloaltonetworks.com\/blog\/wp-json\/wp\/v2\/categories?post=362241"},{"taxonomy":"post_tag","embeddable":true,"href":"https:\/\/www2.paloaltonetworks.com\/blog\/wp-json\/wp\/v2\/tags?post=362241"},{"taxonomy":"author","embeddable":true,"href":"https:\/\/www2.paloaltonetworks.com\/blog\/wp-json\/wp\/v2\/coauthors?post=362241"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}