Check Point Harmony SASE (formerly Perimeter 81) vs Prisma Access by Palo Alto Networks comparison

Check Point Harmony SASE (formerly Perimeter 81) vs. Prisma Access by Palo Alto Networks

Download the complete report

Helped 872,778 peers since 2012

Review summaries and opinions

We asked business professionals to review the solutions they use. Here are some excerpts of what they said:

Categories and Ranking

iboss

Mindshare comparison

As of October 2025, in the Secure Access Service Edge (SASE) category, the mindshare of iboss is 2.1%, up from 1.4% compared to the previous year. The mindshare of Check Point Harmony SASE (formerly Perimeter 81) is 3.9%, down from 4.7% compared to the previous year. The mindshare of Prisma Access by Palo Alto Networks is 15.3%, down from 18.5% compared to the previous year. It is calculated based on PeerSpot user engagement data.

Secure Access Service Edge (SASE) Market Share Distribution
Product	Market Share (%)
Prisma Access by Palo Alto Networks	15.3%
Check Point Harmony SASE (formerly Perimeter 81)	3.9%
iboss	2.1%
Other	78.7%

Secure Access Service Edge (SASE)

Featured Reviews

Matt Crockford

Head of Cybersecurity at SES Water

It's easy to roll out, and their understanding of our business made it seamless

One aspect we value about iboss is its simplicity. Their customer service is brilliant, and they are super responsive and knowledgeable. It's easy to roll out, and their understanding of our business made it seamless. We were impressed by the solution's mental health function, which can detect if someone needs help. It scans what users are browsing and flags warning signs so we can check to see if they are okay. We've had to use it a couple of times. The user interface is highly intuitive. Our IT team picked it up with minimal training. It's arranged so that it's easy to find where things are. Another advantage is the single pane of glass console, which gives you visibility into what's happening. We're not fully there yet because we haven't implemented zero trust, but we're excited about the possibilities from the demos we've seen. We launched a POC of iboss' ChatGPT Risk Protection feature two weeks ago. AI is a great tool, but you need to be careful what you put into it. My biggest fear is employees inputting sensitive corporate information or customer PII data into one of these chatbots. I was impressed by our trial of the feature. It's exactly what we wanted. Now, when a user goes to ChatGPT, there's a banner warning them not to share information, and we can block conversations containing customer data like bank details and email addresses. I don't want to stop people from using it, but we need visibility. We've only tried it on a test group of 15 people. You can configure it to look for specific keywords or integrate it with your DLP policy if you have that configured

Read full review

Nasseer Qureshi

Pre Sales Consultant at Redington Group

Delivers seamless and secure remote access while enhancing security posture

Check Point Harmony SASE (formerly Perimeter 81) offers strong features, but there are areas that could be improved. One area for improvement is integration with third-party identity providers. It works with standard SAML and SSO, but we would prefer deeper integrations with solutions such as Ping for more advanced identity-based policies. Additionally, a mobile-specific client or lightweight agent would be helpful for securing access from smartphones, especially in BYOD environments. We would appreciate more granular reporting and analytics, including better drill-down capabilities to investigate specific users or app activity. The logs are comprehensive, but filtering them can sometimes feel messy. The user interface on the management portal could be more intuitive, especially when managing multiple sites or remote offices. Some of the policy configuration steps are nested and could be streamlined.

Read full review

Roberto Pastorino

Network and Cybersecurity Consultant at a tech services company with 11-50 employees

Have supported client adoption of security solutions but need more control over infrastructure

It's a working solution. It's not the easiest, but no DLP solution is easy. With Netskope, the whole infrastructure is proprietary. Prisma Access by Palo Alto Networks is using a service in AWS, and it's not totally a proprietary infrastructure. Sometimes a third-party outage could impact the whole operability. I'm not certain if the vendor is moving towards sovereignty of infrastructure at this moment, but from what I saw in the past, there was this reliance on third parties for the infrastructure: AWS, GCP, Oracle, and others. This is one point of attention for me. I would prefer more proprietary infrastructure.

Read full review

Quotes from Members

We asked business professionals to review the solutions they use. Here are some excerpts of what they said:

Pros

"Content filtering is the most useful feature of iboss."

"iboss is pretty scalable. They provide good support. The case managers you work with to coordinate what you need are pretty good."

"The console is cloud-based, which is something I really appreciate."

"Technical support is pretty sharp and very responsive."

"The security aspect of the solution, particularly the malware behind it, is excellent. That's something that really helped us out. It's not just a simple proxy that just blocks the insights of potential threats that come on behind it. They do malware detection and that helps us a lot."

"iboss is among the few products providing inline filtering where no application is needed on the device. It operates on the network side and is not device-based. This feature was one of the main reasons why we stayed with them for so long."

"Valuable features: Within the filter: Controls (Web categories, applications, and Allow/Block list) and Network (local Subnets). Within the reporter: Logs (Event Log) and Reports."

"Our primary use case for this product is DLP,"

More iboss pros

"The ease of use not only translates to quick adoption rates - it also ensures that our employees remain compliant with our cybersecurity protocols, enhancing the overall security posture of our organization."

"The characteristics that I have liked the most are the ease of implementation and administration."

"Perimeter 81 is very pretty."

"While the higher cost and complexity may pose challenges for smaller companies without extensive IT resources, the value provided by Check Point's advanced capabilities and excellent 24/7 support justifies the investment. Overall, it is highly recommended that insurance firms prioritize data security and regulatory compliance, especially medium to large companies with the resources to manage and fully utilize its features."

"Even after restarting, it tries to quickly reestablish connection which is very helpful."

"It's improved the security of every single OS in the organization as well as the visibility and security capabilities."

"The scalability is good, and I'd give it an eight out of ten."

"Now that we use Harmony Connect, the files are inspected and we are sure that no malicious content is inside the company."

More Check Point Harmony SASE (formerly Perimeter 81) pros

"The most valuable feature of Prisma Access is its ability to provide enterprise-class security for both Internet and internal application access."

"A feature I've found very helpful is run time security because most of the products on the market will look at security during the build time, and they don't really look at what happens once you're going into production."

"Panorama provides centralized management capabilities for all our firewalls and locations so that we can manage different data centers through a single device, a very valuable feature. We don't have to log into various devices to oversee them individually."

"Prisma integrates well with Cortex XDR and Cortex Data Lake. My company has been also using Prisma Access in-house for nearly a year, and it integrates seamlessly."

"The tool's consolidation is pretty quick."

"Security is absolutely spot-on, really top-notch. It's the result of all the components that come together, such as the HIP [Host Information Profile] and components like Forcepoint, providing end-user content inspection, and antivirus. It incorporates DLP features and that's fantastic because Prisma Access makes sure that all of the essential prerequisites are in place before a user can log in or can be tunneled into."

"The solution's most valuable features were the model's reduced complexity on the client side and its capability to provide security."

"We're now able to go after contracts that require a Zero Trust solution and Prisma's other technology solutions."

More Prisma Access by Palo Alto Networks pros

Cons

"One thing I would like to see differently with their Zero Trust platform is that some of the AI aspects related to high-risk activities have more false positives."

"I am currently doing a PoC of the zero trust aspect of it. Compared to other similar solutions, it is hard to get around each feature. It takes a while to get used to it."

"Our biggest problem with their service was it did not recognize the device and filtering did not always work correctly."

"Their on-premise hardware's network interface is capped at one gigabit, which is sort of a problem. If you stand a filter up where all traffic flows through that, according to them, in order to go above a gigabit, you have to have multiple devices, which in today's IT seems a little bit silly. They could easily put in an SFP port into their device that could accommodate 10 gigs or at least offer a box."

"File integrity monitoring would be very advantageous as an additional feature."

"The reporting feature needs improvement. It doesn't give you the expected results. It is quite difficult to get the specific reports needed, and it is not as intuitive as the rest of the platform."

"For zero trust implementation, we encountered complexity issues, especially with a large infrastructure company ExxonMobil."

"Regarding pricing, setup costs, and licensing, iboss is not cheap, and that's my only concern."

More iboss cons

"The integration from a management perspective could be improved so that the management can, from an existing Check Point firewall, manage a Harmony firewall through one pane of glass."

"The access to the portal should be faster. It shouldn't crash a lot."

"Offering in-app explanations detailing what each feature does, its benefits and potential use cases can help users better understand and utilize the tool to its full potential."

"As it is a new market solution, I still face some instabilities in access at certain times of the day when I have more than 150 users using it simultaneously."

"I don't know if it is technically feasible, however, if the Desktop App could be used as a Web App or a Chrome Extension it would be very nice."

"Zero Trust Network Access can be a security breach if not used correctly."

"Currently, I am not able to define a different country or location, which can result in negative experiences as the tool is being recognized by websites and this can make it difficult to access them or force me to disable the program temporarily."

"Automation and scalability are areas where the solution lacks and needs to improve."

More Check Point Harmony SASE (formerly Perimeter 81) cons

"Prisma would be a stronger solution if it could aggregate resources by project or by application. So say we have an application we've developed in AWS and five applications we've developed in Azure. The platform will group it according to those applications, but it's based on the tags we use in Azure, which means I have to rely on development teams to tag resources properly."

"The Prisma Access could improve in terms of adding more machine learning and AI capabilities to automate tasks such as incident response."

"They automatically update and they should give us time to fully understand what they're updating so that we can make sure it doesn't impact production."

"The frequency of updates could be reduced."

"It's not really Prisma's fault, but when you try to create exceptions you don't really have those abilities. You cannot say, on the management platform, "Hey, for these users I want to create these exceptions." That is one thing that I have gotten some complaints about, and we have faced some challenges there."

"Its security is good. Everything is good, but the way the dashboard responds can be improved. It takes time to implement a policy. If you change only two or three lines and push the policy to make the change work, it takes 20 to 30 minutes even for a small change. That is something very irritating from the implementation perspective."

"I would like the solution to support a different type of authentication. We can't configure a secondary method for our portal."

"The solution needs to be more compatible with other solutions. This is specifically a problem for us when it comes to healthcare applications. They have proprietary connection types and things of that nature that make compatibility a challenge sometimes."

More Prisma Access by Palo Alto Networks cons

Pricing and Cost Advice

"It is not expensive, and it is also not cheap. iboss is priced right in the sweet spot for the number of features it offers."

"We had the cost of purchasing a new appliance along with the implementation and licensing costs. However, the following year, the cost of just licensing was similar to what was paid the previous year for a new appliance along with the implementation and licensing costs."

"It is probably in line with other solutions, but I do not deal with the financial side."

"It is expensive compared to one of its competitors."

"The overall pricing for iboss is very competitive and transparent."

"We have not priced the solution recently, but they were competitive with other vendors in the past."

"The solution's pricing model may not be suitable for smaller companies, as they might find it expensive. Larger companies tend to receive more value due to many users."

"The pricing of Check Point is relatively high when compared to other competitors like Palo Alto and Fortinet. While Palo Alto may be on the higher side in terms of cost, Check Point's pricing is similar to that of Fortinet. In some cases, Check Point offers better value for the features it provides. We initially considered other options but ultimately decided to purchase hardware that came with three years of iOS. This approach eliminated the need for any additional costs associated with Check Point. I would rate it 10 out of 10."

"Perimeter 81 charges separately for gateways and VPN connectivity, but compared to Azure, it seemed more reasonable."

"The product is reasonably priced."

"Annual licenses cost $30 to $40 each."

"Regarding pricing, I can say that the more the number of users, the less they have to pay."

"The cost of the solution's licenses depends on the particular use cases."

"Overall I am very happy with the solution’s flexibility and pricing."

More Check Point Harmony SASE (formerly Perimeter 81) pricing and cost advice

"Prisma Access is one of the best compared to other products on the market. The cost is favorable, and Palo Alto provides a simple architecture, so I recommend the solution to anyone using a different product. There are no hidden costs besides the license; what you see is what you get."

"The initial prices of Prisma Access were okay. But as soon as you start deploying Palo Alto gear, the support prices and the recurring prices, which are the major operational costs, tend to increase over time."

"There's no reason not to buy the enterprise version that gives you unlimited PoPs, but you must understand the limitations you impose on yourself if you do that. If you go crazy, that allowlist will be too big for Kubernetes clusters."

"The solution is expensive."

"The pricing for this solution is on the higher end."

"We have to pay additional costs for maintenance and support services."

"The solution requires a license and the technical support has extra costs. The licensing model could improve."

"Compared to other products, the price is slightly high."

More Prisma Access by Palo Alto Networks pricing and cost advice

See which vendors are best for you

Use our free recommendation engine to learn which Secure Access Service Edge (SASE) solutions are best for your needs.

See recommendations

872,778 professionals have used our research since 2012.

Top Industries

By visitors reading reviews

Financial Services Firm

11%

Computer Software Company

11%

Manufacturing Company

Comms Service Provider

Computer Software Company

15%

Financial Services Firm

Manufacturing Company

Government

Computer Software Company

12%

Financial Services Firm

12%

Manufacturing Company

11%

Government

Company Size

By reviewers

Large Enterprise

Midsize Enterprise

Small Business

By reviewers
Company Size	Count
Small Business	6
Midsize Enterprise	6
Large Enterprise	5

By reviewers
Company Size	Count
Small Business	52
Midsize Enterprise	18
Large Enterprise	15

By reviewers
Company Size	Count
Small Business	23
Midsize Enterprise	21
Large Enterprise	27

Questions from the Community

What needs improvement with iboss?

For zero trust implementation, we encountered complexity issues, especially with a large infrastructure company Exxon...

What is your primary use case for iboss?

Previously when I used iboss, we did the POC for iboss for ExxonMobil. Four or five people wanted to move from our ol...

What is your experience regarding pricing and costs for iboss?

Regarding pricing, setup costs, and licensing, iboss is not cheap, and that's my only concern. There are cheaper alte...

What do you like most about Harmony Connect?

The product's initial setup phase is very simple.

What is your experience regarding pricing and costs for Harmony Connect?

I am not aware of the pricing, setup cost, and licensing, but I would say the setup cost is our resource, and we have...

What needs improvement with Harmony Connect?

Check Point Harmony SASE needs improvement as it is a very new product that lacks very basic features, and it can sta...

What is the better solution - Prisma Access or Zscaler Private Access?

We looked into Prisma Access before choosing Zscaler Private Access (ZPA). Palo Alto’s Prisma Access is a secure ac...

What do you like most about Prisma Access by Palo Alto Networks?

The most valuable features of the solution are in the areas of the secure remote access it provides while also being ...

What is your experience regarding pricing and costs for Prisma Access by Palo Alto Networks?

From my experience, Palo Alto is more expensive compared to solutions like Netskope and Triscale.

Zscaler Internet Access vs iboss

Comparisons

Netskope vs iboss

Compared 13% of the time

Compared 13% of the time

Cisco Umbrella vs iboss

Compared 12% of the time

Cloudflare One vs iboss

Compared 6% of the time

Cato SASE Cloud Platform vs iboss

Compared 5% of the time

More iboss Competitors

Zscaler Zero Trust Exchange Platform vs Check Point Harmony SASE (formerly Perimeter 81)

Compared 10% of the time

Netskope vs Check Point Harmony SASE (formerly Perimeter 81)

Compared 10% of the time

OpenVPN Access Server vs Check Point Harmony SASE (formerly Perimeter 81)

Compared 8% of the time

Cisco Umbrella vs Check Point Harmony SASE (formerly Perimeter 81)

Compared 7% of the time

Microsoft Defender for Endpoint vs Check Point Harmony SASE (formerly Perimeter 81)

Compared 4% of the time

More Check Point Harmony SASE (formerly Perimeter 81) Competitors

Netskope vs Prisma Access by Palo Alto Networks

Compared 13% of the time

Zscaler Internet Access vs Prisma Access by Palo Alto Networks

Compared 11% of the time

Cisco Umbrella vs Prisma Access by Palo Alto Networks

Compared 8% of the time

FortiSASE vs Prisma Access by Palo Alto Networks

Compared 6% of the time

Netskope Private Access vs Prisma Access by Palo Alto Networks

Compared 2% of the time

More Prisma Access by Palo Alto Networks Competitors

Product Reports

iboss

Download iboss product report

Check Point Harmony SASE (formerly Perimeter 81)

Download Check Point Harmony SASE (formerly Perimeter 81) product report

Check Point Harmony SASE (formerly Perimeter 81) report

Prisma Access by Palo Alto Networks

Download Prisma Access by Palo Alto Networks product report

Prisma Access by Palo Alto Networks report

Also Known As

iBoss Cloud Platform

Check Point Quantum SASE

Palo Alto Networks Prisma Access, Prisma Access, GlobalProtect, Palo Alto GlobalProtect Mobile Security Manager, Prisma SaaS by Palo Alto Networks, Prisma Access

Overview

Iboss offers a comprehensive cloud-based security platform valued for its scalability and autonomous features, ensuring robust security with easy deployment and management capabilities.

Renowned for its robust security architecture, Iboss integrates seamlessly within diverse networks, delivering efficient granular filtering and advanced content categorization. Its single pane of glass console provides ease of management, allowing rapid scalability suitable for rapidly deploying environments. Operates in BYOD setups due to inline filtering without device installation. Integration with cloud-based applications enhances user control, and features like SASE, SSL inspection, and ChatGPT risk protection stand as highlights. Despite its strengths, users have pointed out areas for enhancement like direct navigation in reports, SSL decryption, and better cloud integration while having room to improve data loss prevention.

What are the most important features of Iboss?

Scalability: Supports rapid deployment across diverse networks.
SASE: A consolidated approach to secure access.
SSL Inspection: Ensures safe data transmission.
Granular Filtering: Detailed control over accessible content.
Single Pane Management: Unifies control through a centralized console.

What benefits should users consider in reviews?

Cost-effectiveness: Offers competitive pricing with robust features.
Autonomous Operation: Reduces management overhead.
Responsive Support: Provides assistance when needed.
Flexible Deployment: Available for both cloud and on-premises environments.

The usage of Iboss spans educational institutions, specifically K-12, to enforce internet policies, protect data, and support remote work environments. It provides web filtering and security frameworks to ensure safe browsing. Its platform-as-a-service model offers flexibility for both cloud-based and on-premises requirements, integrating seamlessly to deliver enhanced security features suitable for various deployment needs including zero trust, CASB, and network security for work-from-home setups.

iboss

Check Point Harmony SASE, formerly Perimeter 81, offers robust security features like split tunneling, MFA, and Zero Trust Network Access focused on secure remote access and optimized connectivity for remote teams.

Check Point Harmony SASE delivers advanced security through a user-friendly interface, efficient VPN connections, and a centralized management console. It enhances security with real-time threat intelligence from ThreatCloud and traffic management via built-in optimization. Firewall as a Service and Secure Web Gateway safeguard against unauthorized access and phishing. While users seek enhanced networking customizations and better integration with identity providers, there's an emphasis on improving reporting, real-time analytics, and policy management. Requests also include a Chrome extension, traffic balancing, and simplified configuration to address some resource-intensive aspects.

What are the key features of Check Point Harmony SASE?

Split Tunneling: Manages internet traffic more efficiently by routing only necessary data through the VPN.
MFA: Provides an additional layer of security through multi-factor authentication.
Zero Trust Network Access: Ensures secure connections by validating every user and device.
ThreatCloud: Enhances protection with real-time threat intelligence.
Firewall as a Service: Protects against unauthorized access and threats.
Secure Web Gateway: Prevents phishing attacks and unauthorized internet access.

How can organizations benefit from using Check Point Harmony SASE?

Improved Security: Real-time threat intelligence and robust authentication minimize risks.
Centralized Management: Simplifies control over network security and policies.
Optimized Connectivity: Efficient traffic routing enhances user experience.
Flexible Integration: Seamlessly integrates with existing IT infrastructure, enhancing strategic security deployment.

Check Point Harmony SASE is used across industries for secure remote access and connectivity, protecting sensitive data, and managing access to corporate resources. It is ideal for those with hybrid cloud models and requires comprehensive security measures combined with existing IT infrastructures to meet specific industry demands.

Check Point Software Technologies

Prisma Access by Palo Alto Networks provides consistent security for all users and applications across your remote networks. Prisma Access grants users safe access to the cloud and data center applications and the internet as well. In addition, the solution combines all of your security and networking capabilities into a single cloud-delivered platform, enabling flexible hybrid workforces.

Prisma Access can be managed two ways:

Cloud Managed
Panorama Managed

Prisma Access delivers both networking and security services, including:

SD-WAN
VPN
Zero Trust network access (ZTNA)
Quality of service (QoS)
Clean Pipe
Firewall as a service (FWaaS)
DNS Security
Threat Prevention
Cloud secure web gateway (SWG)
Data loss prevention (DLP)
Cloud access security broker (CASB)

Prisma Access by Palo Alto Networks Features

Prisma Access by Palo Alto Networks has many valuable key features including: App-ID, User-ID, Device-ID, SSL Decryption, Dynamic User Group (DUG) Monitoring, AI/ML-Based Detection, IoT Security, Reporting, URL Filtering, Enterprise Data Loss Prevention (DLP), Digital Experience Monitoring (DEM)*, Logging, Policy Automation, Intrusion Prevention System (IPS), and many more.

Prisma Access by Palo Alto Networks Benefits

Some of the benefits of using Prisma Access by Palo Alto Networks include:

Security: Prisma Access gives you consistent security to protect against cyberattacks, with enforcement of policy at every location. By implementing Prisma Access, you also gain protection that works to prevent known and unknown malware, exploits, credential theft, command and control, and many other attack vectors across all ports and protocols.
Global connectivity: Prisma Access provides global coverage through use of its connectivity layer.
Scalability: With Prisma Access, scaling is automatically managed and is scalable, flexible, and agile.
Instant deployment: Deployment is fast, eliminating wasted time that may otherwise be associated with setting up a solution, operating it, or shipping hardware in order to get started.

Reviews from Real Users

Below are some reviews and helpful feedback written by Microsoft Azure Synapse Analytics

users who are currently using the solution.

PeerSpot user Partha D., Global Network Tech Lead at a computer software company, speaks about his experience using the product, saying, "It protects all app traffic so that users can gain access to all apps. Unlike other solutions that only work from ports 80 and 443, which are predominantly for web traffic, Prisma Access covers all protocols and works on all traffic patterns... The most sophisticated attacks can arise from sources that are not behind 80/443."

Tejas J., a Sr. Cloud Security Architect at a computer software company, mentions that "it is geographically dispersed, and it sits on top of Google and AWS platforms. Therefore, you don't face the standard issues, such as latency or bandwidth issues, that you usually face in the case of on-prem data centers.”

Another PeerSpot reviewer, Max I., Associate Director at Cognizant, comments that "Security is absolutely spot-on, really top-notch. It's the result of all the components that come together, such as the HIP [Host Information Profile] and components like Forcepoint, providing end-user content inspection, and antivirus. It incorporates DLP features and that's fantastic because Prisma Access makes sure that all of the essential prerequisites are in place before a user can log in or can be tunneled into."

Palo Alto Networks

Sample Customers

More than 4,000 global enterprises trust the iboss Cloud Platform to support their modern workforces, including a large number of Fortune 50 companies.

Aqua Security, Cognito, Multipoint, Kustomer, Postman, Meredith

Concord Hospital, State of Colorado, Essilor International, RheinLand Versicherungsgruppe, University of Westminster, Universidade Nove de Julho, SPAR Austria, CAME Group, ZipRealty, Greenhill & Co., IKT Agder, Aviva Stadium, Animal Logic, Management & Training Corporation, Brigham Young University Hawaii, School District of Chilliwack

Check Point Harmony SASE (formerly Perimeter 81) vs. Prisma Access by Palo Alto Networks