We performed a comparison between Appgate SDP, OpenVPN Access Server, and Prisma Access by Palo Alto Networks based on real PeerSpot user reviews.
Find out what your peers are saying about Zscaler, Palo Alto Networks, Cisco and others in ZTNA as a Service."The interface is really friendly. It's simple to understand."
"It is a scalable solution...The support answers your questions very fast."
"One of the most important features is stopping lateral movement across our network."
"It is pretty stable."
"The simplicity of the SDP platform is a standout feature; instead of navigating through intricate details, users can seamlessly connect to the company's network or switch to the internet with minimal effort."
"The flexibility of the tool is valuable. It is very robust. It has a very robust configuration capability."
"Highly configurable. You can create your own custom client installer and can rebrand the server-side program."
"A valuable feature for us is its ability to see the new Citrix server as a local server within the company. And it allows us to test abroad."
"The product’s adaptability is valuable."
"I would recommend this solution to other people."
"There is support for multi-factor authentication."
"It can securely do remote product updates... just as if it was on our LAN."
"The most valuable feature is that I can access my local network remotely and avoid doing all the port forwarding and redirections, and so on."
"The solution is user-friendly and easy to implement."
"The solution has all its capabilities in a single cloud delivery platform which is great and it provides overall good protection."
"Prisma Access gives us security from a single point. It controls mobile users and determines how secure their networks will be, including from where they will get internet access. We can optimize things and add security profiles centrally."
"The performance is good."
"Prisma Access by Palo Alto Networks is a seamless solution."
"It protects all app traffic so that users can gain access to all apps. Unlike other solutions that only work from ports 80 and 443, which are predominantly for web traffic, Prisma Access covers all protocols and works on all traffic patterns... The most sophisticated attacks can arise from sources that are not behind 80/443."
"Prisma SaaS is very easy to use; it's common sense — it's the best-in-class."
"The solution's most valuable features were the model's reduced complexity on the client side and its capability to provide security."
"The most valuable features of the solution are in the areas of the secure remote access it provides while also being user-friendly."
"One thing that kind of sticks out to me is the ability to do a proper non-split tunnel. VPN tunnel-wise, it is not really a true unsplit tunnel, but I think that's just because of the way it's designed. A split VPN basically allows your system to talk to other systems without being forced down the tunnel. A VPN running in a non-split tunnel mode forces all the traffic down the tunnel to wherever you're VPNing to. It forces the traffic down so that the traffic is subject to the firewall and rules that you have in your corporate environment and such. It helps to prevent remote malicious folks that may be talking directly to that box from piggybacking into the corporate environment through it. They do it partially, but it would be nice to see more of an enterprise-level solution there."
"They could provide a single-box solution to manage tools for 4000 users. Additionally, they could add extra features to enhance remote micro connection."
"On the cloud, when you make some changes, it may be difficult."
"It would be better to connect to an application portal from any device. Documentation and support could be better."
"The user interface should be improved as it is not very easy to work with the updates."
"One limitation is that it's harder to provide access to multiple applications in the company with Appgate, but that's probably because of poor management."
"The upgrade path from older versions was more difficult than we wanted to tackle, so we ran an older version of the software for longer than I wanted. Patching, updating, and migrating to newer versions was a problem for us. That said, we were on a rather old version that I inherited yet it worked rock solid."
"There is always room for more security features."
"The high availability deployment is not very straightforward. They can make it simpler. OpenVPN does not support some of the additional protocols that Pulse Secure and Cisco AnyConnect support. They can include support for these additional protocols."
"It could be faster. It could also be more stable."
"We occasionally have internet issues which affect stability."
"I would like to see a GUI or Web UI to manage users. Today these features are in the Pro Edition or are done by scripts."
"When there are too many concurrent users trying to connect at the same time, there may be a bit of a bottleneck."
"The solution can be more compatible with different operating systems."
"From any improvement perspective, the product's compatibility issues with Linux need to be resolved."
"We would like to see improvements in the licensing; currently, Palo Alto provides 500 to 1000 licenses for users, and we want to see 1500 to 2000 licenses for one version."
"When we deploy firewall rules via Panorama, we find it's a little bit slow. We have a global environment and might have 100 gateways or VPNs in the cloud. When we deploy something, it tries to deploy it one-by-one, and that can be slow."
"While Palo Alto has understood the essence of building capabilities around cloud technology and have come up with a CASB offering, that is a very new product. There are other companies that have better offerings for understanding cloud applications and have more graceful controls. That's something that Palo Alto needs to work on."
"There is some particular traffic that the security team wants to filter out and apply their own policies and they cannot."
"Lacks a hybrid model which has API plus in-line security."
"The licensing model isn't flexible enough. It's an all-or-nothing model. Other providers in the market allow you to buy modules or add-ons separately. With Prisma Access, you have to purchase the same module for all users."
"They automatically update and they should give us time to fully understand what they're updating so that we can make sure it doesn't impact production."
More Prisma Access by Palo Alto Networks Pricing and Cost Advice →