Prisma SD-WAN and Check Point Harmony SASE compete in cloud security and networking. Prisma SD-WAN has the upper hand in integration capabilities and ease of onboarding, while Check Point Harmony SASE excels in Zero Trust and policy management.
Features: Prisma SD-WAN integrates seamlessly with Palo Alto firewalls, has centralized management, and includes advanced traffic shaping and monitoring. Check Point Harmony SASE offers Zero Trust Network Access (ZTNA), centralized management for threat prevention, and robust security features on a cloud-native platform.
Room for Improvement: Prisma SD-WAN requires enhancements in documentation, physical setup processes, and support availability. Check Point Harmony SASE could improve third-party integrations, offer more detailed analytics, and simplify the user interface for non-technical users.
Ease of Deployment and Customer Service: Prisma SD-WAN integrates well on-premises and provides flexible hybrid cloud deployments, yet its customer support can be slow. Check Point Harmony SASE simplifies cloud-based deployments but requires improvements in management console intuitiveness and initial configuration complexity. Both need faster support response times.
Pricing and ROI: Prisma SD-WAN is expensive but offers significant ROI by reducing network management costs, making it a preferred choice for financial institutions. Check Point Harmony SASE is competitively priced, providing advanced features such as ZTNA, though some users find licensing options restrictive for smaller organizations.
Centralized security management allows our team to monitor users, manage policies, and investigate security events from one place.
With iboss, whenever you turn on your laptop, the iboss agent automatically connects to the iboss cloud, enforcing all security policies. So with respect to the security side, it strengthens measures.
Deploying iboss leads to good return on investment, estimated around 70% to 80%.
Check Point Harmony SASE (formerly Perimeter 81) blocked access to those URLs at the network level before users could click through.
We are saving 40% of our time, which is good.
Prisma SD-WAN helps reduce network costs.
The quality of the support is fantastic.
We had promising discussions about resolving these issues, but no real action followed.
They do not always reply promptly, but they do try and genuinely want to help us.
I would rate support 10 out of 10.
People working really hard, listening to every issue and request, and replying within hours.
They respond promptly and are good at finding issues.
I would rate the support at minimum eight plus.
Since we are at a premium level, customer service is rated at eight or 8.9 out of ten.
They are also able to meet on-demand requirements based on your contract with them, and can easily provide adequate resources and scalability.
I would rate it a nine out of ten for scalability.
If I start seeing sluggishness or anything like that, I just reach out to my rep, and they connect with their dev team, typically resolving it the same day.
The cloud-native model ensures we are not tied to any specific location or hardware, which has been a great game changer in terms of agility.
I would rate it nine out of ten for scalability.
Check Point Harmony SASE's scalability is good; it can handle growth easily, allowing me to easily add another region and gateway to have more people join in.
Everything is managed by the service provider, Palo Alto Networks, allowing me to manage my infrastructure without overheads or extra costs to adapt the management infrastructure to the actual needs of the field.
I rate it a ten out of ten since we can easily scale by just paying for additional licenses as needed.
Scalability is a significant concern for us due to the poor documentation that limits our ability to understand and utilize their system effectively.
It's been pretty solid; I've never had an outage with them, and if I ever had, it's only been once out of the seven years.
Our biggest problem with their service was it did not recognize the device despite our ClearPass sending information to the iboss box.
I give them full marks for presales and support during the pilot phase, as well as support when we actually went live.
There are some lags and glitches with connectivity, so I would rate the stability as between seven or eight out of ten.
After the last improvement, I can say it is much more stable now.
Check Point Harmony SASE is stable most of the time, but there are still some issues that are hard to troubleshoot.
Stability is high, I rate it 9.8 out of ten.
Prisma SD-WAN is an absolutely stable solution.
Our engineers make the system appear stable through effective management.
iboss's single pane of glass console gives centralized visibility into web traffic, user activity, security policies, and alerts from one dashboard.
Better onboarding documents would make the first week easier for new users.
Enhanced policy management, providing smart alerts with root cause context, and improving support with better troubleshooting documents are crucial areas.
A local data center in Turkey would enhance the product, as currently, our Internet traffic goes to another country, which is problematic for us.
One area for improvement is integration with third-party identity providers.
The product is lacking features that other competitors have, making it quite challenging to migrate customers to this solution because it feels very much unfinished.
Scalability is a significant concern for us due to the poor documentation that limits our ability to understand and utilize their system effectively.
If there were an option to extend management to other firewalls, users could perform staggered migrations.
It would be beneficial if the solution integrated the SD-WAN features of Prisma SD-WAN with the security features of Palo Alto's next-generation firewalls.
The following year, the cost of just licensing was similar to what was paid the previous year for a new appliance along with the implementation and licensing costs.
Regarding pricing, setup costs, and licensing, iboss is not cheap, and that's my only concern.
during that time, the Blue Coat proxies we were using were costly, as Blue Coat was acquired by Symantec, and then Symantec was acquired by Broadcom, which increased costs.
Cost efficiency is a consideration, as SASE products are not the cheapest security products.
The cost is a bit expensive for most users.
It is a bit expensive.
The solution is not cost-effective for smaller environments and is more suitable for medium to large companies.
The price for Prisma is a bit high.
The product could be a bit cheaper for the services it provides.
It's given us a lot more visibility into our computer assets that may be infected with viruses and also shows us people who have unusually large uploads or might be engaging in high-risk activities, such as searches or going to sites not categorized by their web crawler.
iboss was the best solution for us because, no matter what domain you were in, everything is under a single pane of glass, which is exactly what we wanted.
Because of the points of presence, there is no downtime for us. I can move users to different points of presence, so I experience minimal to zero downtime.
The firewall management is the most valuable feature for me.
The Zero Trust Network Access (ZTNA) feature is a major highlight as it gives users seamless and secure access to internal resources without requiring a full-blown VPN, which improves both security and user experience.
The Zero Trust and segmentation have helped my team and our customers significantly because we are able to protect every scope and allow the work-from-home users to access internal resources while passing through a threat prevention gateway, ensuring that everything is safe.
By reducing the need for expensive internet connections, Prisma SD-WAN allows customers to achieve cost savings.
Prisma is a mature platform in terms of security.
The most valuable feature is the single pane of glass, especially since we have Palo Alto firewalls.
| Product | Mindshare (%) |
|---|---|
| iboss | 3.2% |
| Check Point Harmony SASE (formerly Perimeter 81) | 5.1% |
| Prisma SD-WAN | 2.5% |
| Other | 89.2% |


| Company Size | Count |
|---|---|
| Small Business | 15 |
| Midsize Enterprise | 8 |
| Large Enterprise | 16 |
| Company Size | Count |
|---|---|
| Small Business | 53 |
| Midsize Enterprise | 19 |
| Large Enterprise | 14 |
| Company Size | Count |
|---|---|
| Small Business | 5 |
| Midsize Enterprise | 5 |
| Large Enterprise | 13 |
iboss is the Zero Trust SASE platform that gives organizations complete visibility and governance over their AI, data, and applications through one unified platform, one console, one policy engine, and one data lake.
Your endpoints may already stop malware. Your data and application activity can still be invisible. iboss decrypts and understands every connection, then turns that signal into answers security leaders can act on.
The platform leads with three capabilities in this order: AI Security and Visibility, Data Security and Visibility, and App Visibility and Control. Zero Trust Network Access, VPN replacement, and SD-WAN sit underneath as the access fabric that carries those three. Trusted by global enterprises and government agencies.
What are the most important features of Iboss?
- AI Security and Visibility: conversation capture, shadow-AI discovery, AI DLP, and agent governance across Claude, Co-Work, ChatGPT, Gemini, and Grok, and emerging services.
- Data Security and Visibility: full SSL/TLS decryption, deep content inspection, MIP label compliance, and one-click compliance reporting.
- App Visibility and Control: signatureless CASB, dual risk scoring, in-app controls, and SSPM for major SaaS.
- Containerized Zero Trust SASE: dedicated containers, isolated SSL keys, one console, one policy engine, one data lake.
- Access fabric: ZTNA, VPN replacement, and SD-WAN under the same platform.
What benefits should users consider in reviews?
- Complete visibility over AI, data, and applications from one platform instead of separate point tools.
- Encrypted traffic is inspected by default so data decisions use content and context together.
- Shadow SaaS and new web tools appear as they are used, with enforceable controls in one console.
- Native data sovereignty through dedicated containers, in-region inspection, and per-customer SSL key custody.
- Scale proven in published materials: 10M+ users, 100+ countries, 150B+ transactions, 2.5B+ threats blocked.
Economic buyers are CISOs, CIOs, and VPs of Security. Champions include security architects, network and infrastructure leaders, SecOps, and GRC. Primary segments: enterprise and business, financial services, government (including FedRAMP Gov Cloud), healthcare, manufacturing, legal and professional services, retail and hospitality, and MSP/MSSP partners. Education, including K-12, is one vertical among these.
Check Point Harmony SASE, formerly known as Perimeter 81, offers advanced security through Zero Trust Network Access and centralized management that supports seamless remote operations and hybrid infrastructures.
Check Point Harmony SASE provides organizations with a robust platform for securing remote operations and hybrid infrastructure. It integrates cloud and on-premise networks, featuring centralized management for efficient policy control and real-time threat monitoring. With integration capabilities like Citrix SD-WAN, remote branch implementations become straightforward. Network access is secured by advanced anti-phishing and URL filtering. A user-friendly interface combined with strong customer support enhances management while promoting productivity.
What are the key features of Check Point Harmony SASE?For industries managing remote operations, Check Point Harmony SASE is instrumental in securing connectivity across cloud and on-premise networks. By unifying access control, it allows employees worldwide to securely connect to corporate resources, be it from home, public locations, or through various Wi-Fi connections.
Prisma SD-WAN offers centralized management, dynamic routing, and security integration with Palo Alto. It's intuitive for troubleshooting and cost-effective compared to Cisco Viptela, making it suitable for complex organizations needing comprehensive network management.
Prisma SD-WAN stands out with its seamless integration capabilities, enabling efficient application-aware traffic management. Centralized management simplifies operations, while intuitive interfaces enhance deployment and troubleshooting. With features like Zero Touch Provisioning and failover support, it ensures network continuity and remote access resilience. Despite its strengths, users call for improvement in bypass ports, initial setup, and documentation. Pricing strategies and integration with Prisma Access require attention, alongside enhancing transition flexibility and scalability, to maintain competitive edge.
What are Prisma SD-WAN's key features?In industries with extensive site connectivity needs, Prisma SD-WAN is used for connecting multiple sites, improving remote office connectivity, and replacing MPLS lines with cost-effective internet links. Organizations benefit from secure cloud integration and centralized management, facilitating communication between branches and data centers.
We monitor all Secure Access Service Edge (SASE) reviews to prevent fraudulent reviews and keep review quality high. We do not post reviews by company employees or direct competitors. We validate each review for authenticity via cross-reference with LinkedIn, and personal follow-up with the reviewer when necessary.