Cato SASE Cloud Platform vs Netskope Next Gen Secure Web Gateway comparison

Why PeerSpot?

The compared Cato Networks and Netskope solutions aren't in the same category. Cato Networks is ranked #6 in SASE , with an average rating of 9.3, and holds a 6.4% mindshare in the category. Netskope is ranked #13 in WSG , with an average rating of 10.0, and holds a 2.1% mindshare. Additionally, 100% of Cato Networks users are willing to recommend the solution, compared to 100% of Netskope users who would recommend it.

Comparison Buyer's Guide

Download the report

Executive Summary

We performed a comparison between Cato SASE Cloud Platform and Netskope Next Gen Secure Web Gateway based on real PeerSpot user reviews.

Find out what your peers are saying about Palo Alto Networks, Cisco, Zscaler and others in Secure Access Service Edge (SASE).

To learn more, read our detailed Secure Access Service Edge (SASE) Report (Updated: October 2026).

Buyer's Guide

Secure Access Service Edge (SASE)

October 2026

Download the complete report

Helped 920,929 peers since 2012

Review summaries and opinions

We asked business professionals to review the solutions they use. Here are some excerpts of what they said:

Categories and Ranking

iboss

Mindshare comparison

Secure Access Service Edge (SASE) Mindshare Distribution
Product	Mindshare (%)
Cato SASE Cloud Platform	6.4%
Prisma Access by Palo Alto Networks	10.2%
Zscaler Zero Trust Exchange Platform	8.6%
Other	74.8%

Secure Access Service Edge (SASE)

Secure Web Gateways (SWG) Mindshare Distribution
Product	Mindshare (%)
Netskope Next Gen Secure Web Gateway	2.1%
Zscaler Internet Access	9.8%
Cisco Umbrella	9.5%
Other	78.6%

Secure Web Gateways (SWG)

Featured Reviews

Ashok Ananthula

Senior Consultant Proxy Engineering at a financial services firm with 10,001+ employees

Cloud gateway has strengthened remote web security and now needs better Mac and ISP support

The problem our organization had is that iboss failed for the Mac devices. It is not able to give a successful agent for the Mac agents. That is where in 2025, we had to migrate to the Palo Alto-based platform. If your use case is for just Windows laptops,you can consider this platform as an option One issue is the data center resiliency part. In India especially, they are not tied up with the Tier 1 ISPs like Tata or Airtel; they were having Tier 2 ISPs and encountered many issues reaching few major sites that my organization depends on, and they were having problems that they could not fix quickly. They also lack a mechanism to route that traffic within their data center; rather, they ask customers to make a pac file change to route it to Singapore explicitly. It would be better if they route from their backend , i mean even if I send it to India DC, they should be able to route it internally to make that work; however, they fail to do that and ask the customer to route it in the pac file. Another suggestion is that in China, they do not have the proper setup; they used to have numerous problems with slowness and lack of premium circuits in China as well. That leads to multiple sites working slowly with latency-related issues. So the main issue is the ISP-related problems that need to be solved.

Read full review

reviewer2697738

Product & Services Integrator at a comms service provider with 10,001+ employees

Cloud security has unified global network design and has simplified threat visibility

I think all of the functionalities, such as the secure web gateway feature, are quite good. I also believe Cato SASE Cloud Platform is one of the only solutions that has not only a software firewall solution but also a physical software solution where you can change the company's firewalls and put in sockets from Cato SASE Cloud Platform, which I see as an advantage for them. The single-pass architecture has improved user experience with Cato SASE Cloud Platform as it provides security teams in companies a platform where they can easily obtain information if there are breaches or security issues. I assess the benefit of integrating WAN optimization as good. There is ease in making rules between WAN optimization, especially when it comes to global connections because of all their points of presence that are spread over the world. I think the real-time threat protection of Cato SASE Cloud Platform is also good. Their points of presence are quite efficient, and I do not see any delays in that area.

Read full review

reviewer2811576

Experto de Seguridad Informática at a financial services firm with 1,001-5,000 employees

Granular web controls have improved user-specific access and reduced security incidents

For the moment, the solution is going quite well, and I cannot think of anything specific we could improve at the moment.Perhaps in file control, the maximum size of the files that can be analyzed is a negative aspect or an improvement that I consider necessary in Netskope Next Gen Secure Web Gateway.

Read full review

Quotes from Members

We asked business professionals to review the solutions they use. Here are some excerpts of what they said:

Pros

"The iboss system is highly reliable. The false positive rates are small compared to some other systems we've experienced through other partner agencies who use competing solutions."

"iboss is easy to use despite its complexity. Multiple engineers manage it, but it's significantly more straightforward to administer than traditional VPNs and web proxies."

"The console is cloud-based, which is something I really appreciate."

"iboss is pretty scalable. They provide good support. The case managers you work with to coordinate what you need are pretty good."

"It was a very easy product to install. It can be deployed very fast."

"The students were always protected, and the content filtering worked very well, seeming to work better than other products we had tried previously."

"First of all, the security policies are essential. I do not have to rely solely on Active Directory for our users."

"We were impressed by the solution's mental health function, which can detect if someone needs help. It scans what users are browsing and flags warning signs so we can check to see if they are okay. We've had to use it a couple of times."

More iboss pros

"The WAN aggregation feature is the most valuable."

"The Cato SASE Cloud Platform supports my customers' needs for connectivity and security by removing the throttling from the headquarters and putting a firewall in the cloud, instead of having to use a costly MPLS network to perform security inspection on all traffic from various branches."

"When I first encountered Cato, I didn't know how to use it, but after a week of training, I could onboard our systems to it, so the solution was easy to learn and navigate."

"We never really had any outages."

"Technical support was always helpful and responsive."

"The most valuable features of Cato Networks are the always-on VPN for remote workers and centralized management. Additionally, web filtering and antivirus are good."

"The Cato SASE Cloud Platform is a remarkable solution for managing and controlling all aspects of Zero Trust network access functions through its SASE capabilities. It's designed with an exquisite and practical architecture, making it a worthwhile investment for organizations looking to optimize IT spending and streamline management processes."

"If you really want to have a solution that has an easy deployment and provides SD-WAN and firewall abilities, go with Cato Networks."

More Cato SASE Cloud Platform pros

"We can connect cloud apps and monitor them."

"Prevents data leakage and protects data."

"It is for secure web trafficking, and it is doing what it needs to do. It allows customers to consolidate and eliminate multiple technologies onto Netskope and just kind of turn the dial and use more features, such as CASB, VPN. SWG is another feature. You can monitor and govern all the traffic."

"We've found the solution to be quite stable."

"My advice for others looking into implementing the solution it is easy to use, and it is one of the best solutions on the market."

"The solution is reliable and has high availability."

"Web filtering and DLP are good features."

"There are a lot of features, but the groups that are created for the policy groups available with Netskope are already relevant to any industry. So grouping the policies is the easiest part and a valuable feature."

More Netskope Next Gen Secure Web Gateway pros

Cons

"To scale up, a new iboss Node Blade Chassis must be purchased."

"I'd like to see them accelerate development on the security side, particularly around data loss prevention."

"Sometimes, obviously, there are bugs."

"The problem our organization had is that iboss failed for the Mac devices; it is not able to give a successful agent for the Mac agents, and that is where in 2025 we had to migrate to the Palo Alto-based platform."

"The area I would like to see improvement in is the ability with in the reporter to navigate directly to the content the user is traversing. It is kind of there, but it's not perfect. Quite frequently, I receive links that lead me to pages with error messages."

"I would like to see simpler dashboards, more detailed reporting, and faster performance in iboss."

"Sometimes when you call in support, you get someone who is just following a sheet. It feels like a runaround. You feel that you are running into that support wall."

"iboss could improve by making alert noises lower, adding clearer setup steps, and speeding up support response times."

More iboss cons

"A little tweaking or improvement of the UI in terms of logging when troubleshooting would be an improvement because it's very detailed."

"The product may be complex for users with few years of experience."

"The tool needs to be more granular. Its reports are not very in-depth."

"They can't do one-to-one NAT (Network Address Translation) in AP (their access point), and that is something that Palo Alto can do."

"For a packaged solution, needing external intervention or a system integrator to get other features not offered by Cato Networks could be an area for improvement. Cato Networks does what it's meant to do and is even overstretching capabilities when introducing new features. The product can only have very few features added on top of what its currently doing. Managed service providers can deliver the extra features you'd need. It's a set of managed services, and what Cato Networks does is very comprehensive. So, for the time being, when the actual incarnation of the SASE solution is deployed, Cato Networks is a very effective product. Naturally, technology will evolve, so everybody knows that in three, four, or five years, there will be a new kid on the block, a new game. Still, at the moment, Cato Networks only needs to improve a little regarding SASE delivery. The product is doing very well, but one feature the Cato Networks team is doing right is preparing for the future through deploying the SSE 360, so the security service is at that edge. It's an excellent strategy to prepare for the future. SSE 360 is what Cato Networks should invest in the most to keep prospering."

"Cato Networks could improve their intrusion detection. There is not a lot in place."

"Modifying or incorporating Cato Network to work with a third-party platform, such as Microsoft, or other Software-as-a-Service (SaaS) offerings would be beneficial. Having more integration partners would help the users implement the solution."

"It could expand its reach into other sectors like professional services and finance, requiringmore specialized tools beyond Cato's current offerings. This includes better integration with third-party providers for more sophisticated tools such as intrusion prevention systems, anti-malware, and data loss prevention. Additionally, enhancing network speed and optimizing last-mile connectivity for managed service providers like us would be beneficial."

More Cato SASE Cloud Platform cons

"Improvement in the solution is required in certain areas where the product does not provide access to its direct end users, who use the portal as an administrator."

"The initial setup and implementation are not straightforward."

"Netskope can only provide the high level related to threats."

"Perhaps in file control, the maximum size of the files that can be analyzed is a negative aspect or an improvement that I consider necessary in Netskope Next Gen Secure Web Gateway."

"Netskope Next Gen Secure Web Gateway needs to integrate IoT, which can help to control devices."

"The initial setup is a bit complex in that it takes a lot of time. In order to get the product to work as you need it to, there is a lot of configuration required."

"The solution could improve the features for Zero Trust Network Access. They should add more security components to that module."

"They should work on marketing material to put out their work with a little more effort."

More Netskope Next Gen Secure Web Gateway cons

Pricing and Cost Advice

"We have not priced the solution recently, but they were competitive with other vendors in the past."

"It is probably in line with other solutions, but I do not deal with the financial side."

"We had the cost of purchasing a new appliance along with the implementation and licensing costs. However, the following year, the cost of just licensing was similar to what was paid the previous year for a new appliance along with the implementation and licensing costs."

"It is expensive compared to one of its competitors."

"The overall pricing for iboss is very competitive and transparent."

"It is not expensive, and it is also not cheap. iboss is priced right in the sweet spot for the number of features it offers."

"The price of Cato Networks is in the middle range compared to other solutions. NetFoundry is a less expensive solution than Cato Networks."

"The pricing is on the higher side, almost an eight out of ten."

"The solution's pricing is flexible."

"The price is not an issue for us, as it is priced more competitively than some other vendors."

"You pay yearly based on the speed of your network. If you increase the speed of your network, you increase the cost for your throughput. It is by bandwidth for the most part and then licenses for VPN. There is some per-seat licensing for VPN access, but the majority of it is minimal. It is like $30 a year per client. The rest is based on how much bandwidth you'll use. You pay for that upfront for the year, and if you have to increase it, you increase it, and then they let you send more data through. There are no additional costs in addition to the standard licensing fees."

"Cato Networks seems more expensive than Cisco Meraki."

"I'd rate Cato SASE Cloud Platform's pricing as about five or six out of ten. It's not the cheapest solution, but it is cheaper than Palo Alto and even VeloCloud. We've been working with them for a while and have significant discounts. Our licensing costs vary because we keep adding sites, but it's about 280 per month per site. This includes additional features beyond the base product, starting at around 200."

"Cato Networks is an expensive product, but it works out of the box, so that's the usual trade-off, make versus buy. If you decide to buy a product that doesn't require much programming, then you'd want to go for Cato Networks, which will work naturally, and immediately without any complex setup. However, the product is a little bit more expensive than the competitors. On a scale of one to five, I'd rate the pricing for Cato Networks as four."

More Cato SASE Cloud Platform pricing and cost advice

"We pay a licensing fee of $10,000 on a yearly basis."

"The product is cheap."

"The license model is based on the number of users. You have the possibility to have 10,000 users if you wish."

"The solution's overall cost is cheaper than regular web security solutions."

"The price is average. Because the license is user-based, you can increase it as per the user quantity."

See which vendors are best for you

Use our free recommendation engine to learn which Secure Access Service Edge (SASE) solutions are best for your needs.

See recommendations

920,929 professionals have used our research since 2012.

Top Industries

By visitors reading reviews

Financial Services Firm

11%

Manufacturing Company

10%

Comms Service Provider

Construction Company

Manufacturing Company

13%

Comms Service Provider

10%

Financial Services Firm

Computer Software Company

Financial Services Firm

16%

Construction Company

Manufacturing Company

Outsourcing Company

Company Size

By reviewers

Large Enterprise

Midsize Enterprise

Small Business

By reviewers
Company Size	Count
Small Business	15
Midsize Enterprise	8
Large Enterprise	16

By reviewers
Company Size	Count
Small Business	16
Midsize Enterprise	7
Large Enterprise	11

By reviewers
Company Size	Count
Small Business	8
Midsize Enterprise	3
Large Enterprise	4

Questions from the Community

What needs improvement with iboss?

iboss could be improved by making the dashboard more user-friendly, providing more detailed real-time alerts, and imp...

See all answers

What is your primary use case for iboss?

iboss is primarily used for cloud security, helping to protect users when they access websites and cloud applications...

See all answers

What is your experience regarding pricing and costs for iboss?

The pricing and licensing for iboss were reasonable for the security features. The setup costs were manageable, thoug...

See all answers

What is your primary use case for Cato Networks?

I can see that I am a consultant at a reseller and I am the architect of Cato SASE Cloud Platform designs. In the bas...

See all answers

What advice do you have for others considering Cato Networks?

It is difficult to find types of companies I would not recommend Cato SASE Cloud Platform to, and I believe you can u...

See all answers

What is your experience regarding pricing and costs for Cato Networks?

I do not find it particularly expensive, but for some companies, they may not have the budget to be at that level of ...

See all answers

Which lesser known firewall product has the best chance at unseating the market leaders?

Netscope, Zscaler if they continue route they are on now. FIrewalls needs great deal of automation on each end, datac...

See all answers

Which lesser known firewall product has the best chance at unseating the market leaders?

Those firewalls that allow extend the perimeter. Nowadays, there is a issue with the static perimeter and all is goin...

See all answers

What needs improvement with Netskope Next Gen Secure Web Gateway?

For the moment, the solution is going quite well, and I cannot think of anything specific we could improve at the mom...

See all answers

Comparisons

Prisma Access by Palo Alto Networks vs iboss

Compared 10% of the time

Netskope vs iboss

Compared 8% of the time

Fortinet FortiGate vs iboss

Compared 7% of the time

Cisco Umbrella vs iboss

Compared 6% of the time

More iboss Competitors

Zscaler Zero Trust Exchange Platform vs Cato SASE Cloud Platform

Compared 6% of the time

Prisma Access by Palo Alto Networks vs Cato SASE Cloud Platform

Compared 6% of the time

Aryaka Unified SASE Platform vs Cato SASE Cloud Platform

Compared 5% of the time

Fortinet FortiGate vs Cato SASE Cloud Platform

Compared 5% of the time

Cloudflare One vs Cato SASE Cloud Platform

Compared 5% of the time

More Cato SASE Cloud Platform Competitors

Prisma Access by Palo Alto Networks vs Netskope Next Gen Secure Web Gateway

Compared 15% of the time

Menlo Secure vs Netskope Next Gen Secure Web Gateway

Compared 14% of the time

Fortinet FortiGate vs Netskope Next Gen Secure Web Gateway

Compared 8% of the time

dope.swg vs Netskope Next Gen Secure Web Gateway

Compared 6% of the time

Prisma Access Browser vs Netskope Next Gen Secure Web Gateway

Compared 4% of the time

More Netskope Next Gen Secure Web Gateway Competitors

Product Reports

Buyer's Guide

iboss

October 2026

Download iboss product report

Buyer's Guide

Cato SASE Cloud Platform

November 2026

Download Cato SASE Cloud Platform product report

Buyer's Guide

Netskope Next Gen Secure Web Gateway

October 2026

Netskope Next Gen Secure Web Gateway report

Download Netskope Next Gen Secure Web Gateway product report

Also Known As

iBoss Cloud Platform

Cato Networks

No data available

Overview

iboss is the Zero Trust SASE platform that gives organizations complete visibility and governance over their AI, data, and applications through one unified platform, one console, one policy engine, and one data lake.

Your endpoints may already stop malware. Your data and application activity can still be invisible. iboss decrypts and understands every connection, then turns that signal into answers security leaders can act on.

The platform leads with three capabilities in this order: AI Security and Visibility, Data Security and Visibility, and App Visibility and Control. Zero Trust Network Access, VPN replacement, and SD-WAN sit underneath as the access fabric that carries those three. Trusted by global enterprises and government agencies.

What are the most important features of Iboss?

- AI Security and Visibility: conversation capture, shadow-AI discovery, AI DLP, and agent governance across Claude, Co-Work, ChatGPT, Gemini, and Grok, and emerging services.

- Data Security and Visibility: full SSL/TLS decryption, deep content inspection, MIP label compliance, and one-click compliance reporting.

- App Visibility and Control: signatureless CASB, dual risk scoring, in-app controls, and SSPM for major SaaS.

- Containerized Zero Trust SASE: dedicated containers, isolated SSL keys, one console, one policy engine, one data lake.

- Access fabric: ZTNA, VPN replacement, and SD-WAN under the same platform.

What benefits should users consider in reviews?

- Complete visibility over AI, data, and applications from one platform instead of separate point tools.

- Encrypted traffic is inspected by default so data decisions use content and context together.

- Shadow SaaS and new web tools appear as they are used, with enforceable controls in one console.

- Native data sovereignty through dedicated containers, in-region inspection, and per-customer SSL key custody.

- Scale proven in published materials: 10M+ users, 100+ countries, 150B+ transactions, 2.5B+ threats blocked.

Economic buyers are CISOs, CIOs, and VPs of Security. Champions include security architects, network and infrastructure leaders, SecOps, and GRC. Primary segments: enterprise and business, financial services, government (including FedRAMP Gov Cloud), healthcare, manufacturing, legal and professional services, retail and hospitality, and MSP/MSSP partners. Education, including K-12, is one vertical among these.

iboss

Cato SASE Cloud Platform delivers a comprehensive approach to network security and connectivity, integrating SASE, CASB, and zero-trust network access for improved performance and scalability in diverse locations.

Cato SASE Cloud Platform offers robust security solutions, including a next-gen firewall and VPN support. It provides a unified management system that is easy to use and integrates seamlessly with existing infrastructures. The platform's self-healing model ensures real-time threat mitigation, enhancing connectivity and performance even in challenging locations. Users appreciate the platform's scalability, integration capabilities, and significant cost savings. However, there is room for improvement in security, network integration, feature enhancement, and affordability to better support larger enterprises and improve user experience.

What are the essential features of Cato SASE Cloud Platform?

SASE: Integrates security and networking functions for seamless performance.
CASB: Provides secure access to cloud applications.
Zero-trust Network Access: Offers secure and direct access without the need for traditional VPNs.
Unified Management: Centralizes control for ease of use and improved efficiency.
Next-Gen Firewall: Robust protection against diverse threats with advanced firewall capabilities.

What benefits or ROI can users expect?

Scalability: Easily adapts to growing organizational needs.
Cost Savings: Reduces expenses through efficient integration and operations.
Operational Efficiency: Streamlined processes save time and resources.
Responsive Support: Quick access to help when needed enhances user satisfaction.

Organizations in sectors like finance, telecommunications, and construction use Cato SASE Cloud Platform for enhanced network security and global connectivity. It effectively replaces MPLS with a cloud-native SD-WAN, integrates security measures for public clouds, and provides centralized management. Its implementation supports a zero-trust model, redundancy, and ISP integration, ensuring scalable remote access and improved security measures.

Cato Networks

Netskope Next Gen Secure Web Gateway delivers advanced web security with features like malware control, DLP, and swift connectivity. With cloud-native operations, it enhances security without on-premise hardware.

Organizations leveraging Netskope Next Gen Secure Web Gateway benefit from its ease of policy management, swift connections, and consolidation of technologies. The gateway ensures robust security with features such as CASB, URL filtering, threat prevention, and sandboxing. Its operations are cloud-native, eliminating the need for on-premise hardware, and it integrates effectively with IAM and PAM systems. Broad SaaS coverage and an emphasis on architectural governance enhance web activity security and visibility. While there is room to improve file control, IoT functionality, and endpoint features, it remains a trusted option for safe web browsing, filtering, and security through advanced policy controls and prevention methods.

What are the key features of Netskope Next Gen Secure Web Gateway?

Policy Ease: Simplifies managing security policies for diverse web applications.
Swift Connections: Ensures fast and secure internet connections for uninterrupted workflow.
Malware Control: Provides robust protection against malware with comprehensive control features.
Data Loss Prevention (DLP): Prevents data breaches through effective monitoring and management.
Cloud-Native Operations: Operates fully in the cloud, eliminating the need for physical hardware.
CASB Integration: Offers seamless integration with Cloud Access Security Broker for enhanced security.
Threat Prevention: Detects and prevents potential online threats effectively.

What benefits and ROI should be considered when evaluating Netskope Next Gen Secure Web Gateway?

Security Enhancement: Provides increased security through advanced threat prevention and control tools.
Cost Efficiency: Reduces the need for on-premise hardware, lowering total cost of ownership.
Operational Efficiency: Enhances operational workflow with faster and more secure internet connections.
Comprehensive Integration: Integrates seamlessly with existing IAM and PAM systems, facilitating ease of use.
Actionable Insights: Offers detailed reporting and analytics for informed decision-making.

Netskope Next Gen Secure Web Gateway is widely implemented across industries for secure internet navigation, application control, and threat prevention. Enterprises use it to prevent shadow IT, manage SaaS traffic, and enforce governance according to specific industry regulations, ensuring security and compliance.

Netskope

Sample Customers

Trusted by global enterprises and government agencies.

Paysafe, AdRoll, Pet Lovers Centre, Arlington Orthopedics, Humphreys & Partners Architects

Arrow, Cloudrise, Sainsbury, Evalueserve, Stroock, Apria, Ather Energy, CSA, AVX Corporation Nuna, City of San Diego Case, Genomic Health Case Study, Oak Hill Advisors, MaRS Discovery District.

Buyer's Guide

Secure Access Service Edge (SASE)

October 2026

Download Free Report

Find out what your peers are saying about Palo Alto Networks, Cisco, Zscaler and others in Secure Access Service Edge (SASE). Updated: October 2026.

DOWNLOAD NOW

920,929 professionals have used our research since 2012.

We monitor all Secure Access Service Edge (SASE) reviews to prevent fraudulent reviews and keep review quality high. We do not post reviews by company employees or direct competitors. We validate each review for authenticity via cross-reference with LinkedIn, and personal follow-up with the reviewer when necessary.