Cisco Duo vs Prisma Access by Palo Alto Networks comparison

Cisco Duo vs. Prisma Access by Palo Alto Networks

Download the complete report

Helped 884,706 peers since 2012

Review summaries and opinions

We asked business professionals to review the solutions they use. Here are some excerpts of what they said:

Categories and Ranking

iboss

Mindshare comparison

As of March 2026, in the ZTNA as a Service category, the mindshare of iboss is 2.4%, up from 1.7% compared to the previous year. The mindshare of Cisco Duo is 2.3%, down from 2.3% compared to the previous year. The mindshare of Prisma Access by Palo Alto Networks is 11.3%, down from 15.4% compared to the previous year. It is calculated based on PeerSpot user engagement data.

ZTNA as a Service Mindshare Distribution
Product	Mindshare (%)
Prisma Access by Palo Alto Networks	11.3%
Cisco Duo	2.3%
iboss	2.4%
Other	84.0%

ZTNA as a Service

Featured Reviews

reviewer2701851

Managing Director

Enhances web security with a single pane of glass and flexible deployment

I don't see any need for improvement; one of the really good things about iboss as a company is that they listen to customer feedback. I have suggested enhancements, and they are responsive, making changes for the better, and they do a lot of testing. To improve iboss, although we haven't used it, we considered the VPN solution that comes with the highest tier licensing, which includes DLP and various other add-ons. We prefer using another product which automatically logs you back onto your network when turning on your PC. With iboss, the connection is manual, which doesn't meet our needs. Additionally, sizing can be tricky because, although the initial recommendations may seem adequate, actual usage may require more gateways than anticipated.

Read full review

Charles Slaustas

Information Technology Contractor at Insight global

Supports seamless authentication for users across multiple organizations and personal portals

The features I use in Cisco Duo include Duo Pushes to confirm my identity to the device, and eventually as MFA security was increased, I actually had to use exchange passcodes. Sometimes, I have to go into the site and get into Cisco Duo to retrieve the passcode, and many of them have been two-factor, where the sites send a passcode that I have to enter into Cisco Duo. It has been more of the latter. I have not seen issues with lagging or crashing on Cisco Duo's end; it was usually on the client end, often because someone set up a bad upgrade or there were connection issues with the Cisco Duo cloud through the administrative site.

Read full review

IgorPinter

Director at PULSEC

Zero-trust access has improved remote security and now simplifies cloud-based firewall management

Regarding the integration part for Prisma Access by Palo Alto Networks, the integration with identity providers is pretty much good. It is basically firewall as a service, so it performs well. I completed the integration without any issues. What Palo Alto Networks can do better for Prisma Access by Palo Alto Networks is probably to have the point of presence available in more locations. The point of presence from the Serbia region has the nearest POP in Frankfurt, which is an issue since it is your gateway—when you start browsing the internet, you go through a commercial connection in Germany. They definitely need to spread the service in other countries.

Read full review

Quotes from Members

We asked business professionals to review the solutions they use. Here are some excerpts of what they said:

Pros

"The console is cloud-based, which is something I really appreciate."

"We were impressed by the solution's mental health function, which can detect if someone needs help. It scans what users are browsing and flags warning signs so we can check to see if they are okay. We've had to use it a couple of times."

"Our primary use case for this product is DLP,"

"iboss is easy to use despite its complexity. Multiple engineers manage it, but it's significantly more straightforward to administer than traditional VPNs and web proxies."

"The iboss system is highly reliable. The false positive rates are small compared to some other systems we've experienced through other partner agencies who use competing solutions."

"Technical support is pretty sharp and very responsive."

"We chose iboss for both zero trust and proxy (SWG) because their SWG was superior."

"I would rate the technical support of iboss a solid 10 without a shadow of a doubt."

More iboss pros

"I like the set time that users can log into devices during the day and how many times they can do so. I also like the ability to restrict the regions from which the user can get in. Users outside of our country or even the town cannot log in."

"Cisco Duo seems very scalable; in my last contracting position, it was a large one for a major worldwide airline that had hundreds of thousands of devices that could use Cisco Duo, and it scaled very well."

"The feature of Cisco Duo that I appreciate most is the push notifications. They are great."

"All features of the solution are effective, particularly those involved in identifying vulnerabilities and updates."

"The winning point for Cisco Duo over others is its simplicity; it is just a security solution in a box, and it integrates very easily."

"With Cisco Duo it's checking if you are allowed to submit a request to access this, doing a complete check of you before you access, instead of being just a simple MFA that only asks if you can go in or not."

"We get fewer threats to remediate due to the two-factor authentication, which does not allow as many threats through."

"The ease of deploying Cisco Duo Security and onboarding has greatly benefited our customers."

More Cisco Duo pros

"The solution is not very complex and is easy to manage for people who may or may not have knowledge about Palo Alto Networks."

"GlobalProtect has been beneficial for its cloud security capabilities, which are vital as businesses seek hybrid options and need to support remote workers while addressing latency issues."

"Prisma Access by Palo Alto Networks is a seamless solution."

"We have an application called ADEM that helps us troubleshoot network-related issues. It helps us to isolate an issue whether it is on the ISP level, endpoint level, or system access level."

"It's great that we can make sure a machine meets the minimum requirements before users are allowed to log in."

"Prisma Access gives us security from a single point. It controls mobile users and determines how secure their networks will be, including from where they will get internet access. We can optimize things and add security profiles centrally."

"Prisma Access protects all app traffic, so that users can gain access to all apps and that's very important because we need to be able to access everything. It also allows us to access non-web apps; anything internal that we need access to, we can access."

"It has predefined or preconfigured rules, which are getting periodically updated. They are providing continuous improvements and periodically updating all search queries that they are looking for. That is one thing that helps us to stay vigilant and focused. If we query our AWS account for any breaches or vulnerabilities with any of the cloud tests, and it alerts us based on these predefined rules. It also provides an option to configure our own rules, and based on these rules, it can query the cloud trail logs, pull the information, and trigger alerts in real-time. I haven't explored this feature much because there are multiple accounts, and we don't have enough time to explore this feature. It also provides multiple integrations. When vulnerabilities or breaches are happening, you should be aware of them immediately. It provides integration with tools such as Slack, PagerDuty so that you can get alerted as soon as the high severity stuff comes up. For example, you have a security group that has allowed public traffic on port 22. As TechOps, you should be aware of this immediately. You cannot scan each machine or look into all security groups to identify it. So, Prisma helps us and alerts us when this kind of high-priority stuff comes up. It has different statistics, analytics, and graphs for data. The description of alerts is also pretty good. They describe what are the possible causes for this and what are the solutions. From Prisma Cloud, you can directly go to the AWS account. When you click on an alert, a resource, or a resource ID, it takes you to the AWS console where you need to log in. If you are already logged in, it will take you to that instance directly, and you can fix the issue there. I have found this feature very useful."

More Prisma Access by Palo Alto Networks pros

Cons

"Our biggest problem with their service was it did not recognize the device and filtering did not always work correctly."

"Its pricing could be better."

"To scale up, a new iboss Node Blade Chassis must be purchased."

"File integrity monitoring would be very advantageous as an additional feature."

"Sometimes, obviously, there are bugs."

"Their on-premise hardware's network interface is capped at one gigabit, which is sort of a problem. If you stand a filter up where all traffic flows through that, according to them, in order to go above a gigabit, you have to have multiple devices, which in today's IT seems a little bit silly. They could easily put in an SFP port into their device that could accommodate 10 gigs or at least offer a box."

"The dashboards for local use could be better."

"Our iboss subscription access should be more secure with an OTP or VPN etc. It is easy to gain access if, for example, hackers obtain my username and password."

More iboss cons

"Conversational AI in Cisco Duo is limited in its current application."

"They can make authentication easier. It should be done in a shorter time. Sometimes, it can take a bit more time to get the answer on your phone. You have to wait a bit longer to get the SMS code and other things. There can be some internet or connection issues. They should make it faster because sometimes, it's urgent, and you need to access something as soon as possible."

"The new smart license model doesn't always work. It's very complicated."

"The pricing for Cisco Duo is kind of okay, but most of the time, your competitor is someone like Microsoft who gives it out for free with their offering, making it tough to argue with customers why they should spend additional dollars to also get Duo to improve their setup, but I think the pricing is fair."

"There is another issue with removing the application from your computer. It is difficult to remove the application on Windows."

"I'd like to see it integrated into other applications. I know there are some integrations, but I haven't been able to explore that any further."

"The experience of the deployment with Cisco Duo is pretty rough."

"Cisco can further enhance the integrations, as they possess exceptional integrations with various providers' products and feature sets."

More Cisco Duo cons

"The price can be reduced to make it more competitive."

"There is a lack of integration with third-party solutions like CrowdStrike or SentinelOne in Prisma Access by Palo Alto Networks. Although they have a tight ecosystem with their products, opening up for integration with other solutions would be beneficial."

"If you compare Prisma SaaS against other products, such as Cloud Log, it's a little bit tricky to understand, but it offers different functionality that other products don't have. From a user usability point of view, you need some training for this product, as an admin, you need a couple of demos."

"We've run into some challenges, having hit a lot of bugs over the past year in the deployment of GlobalProtect. We've had our fair share of issues that I haven't been happy with. We're working with the support organization to remediate them and waiting for updated releases. The response on getting the bugs fixed has not been what I would consider adequate for a product like this."

"Their next release should provide solutions for the mobile environment."

"Sometimes, we encountered a portal crash. When we told Palo Alto they said it might be the browser or cache, but I think they need to improve it on their side."

"Palo Alto Prisma 10 came out over a year ago. Palo Alto added this identity management feature. The legacy way Palo Alto selected which user is sitting on an IP address it passes through has been clunky."

"The Cloud Management application has room for improvement. There are a lot of things on the roadmap for that application; things are going to happen soon."

More Prisma Access by Palo Alto Networks cons

Pricing and Cost Advice

"We had the cost of purchasing a new appliance along with the implementation and licensing costs. However, the following year, the cost of just licensing was similar to what was paid the previous year for a new appliance along with the implementation and licensing costs."

"It is probably in line with other solutions, but I do not deal with the financial side."

"We have not priced the solution recently, but they were competitive with other vendors in the past."

"It is expensive compared to one of its competitors."

"The overall pricing for iboss is very competitive and transparent."

"It is not expensive, and it is also not cheap. iboss is priced right in the sweet spot for the number of features it offers."

"The product’s pricing is reasonable."

"It was very reasonable."

"With regard to pricing, for a small business buying a one off, it's pretty expensive. If it's an enterprise that has thousands of employees, however, it's really nothing to protect your data because if your network goes down or it's breached, you're losing millions of dollars every minute. When it comes to a large enterprise, it's priced where it should be because you're talking business to business. You're not talking business to consumer."

"Our licensing fee is currently on an annual basis."

"From a reseller perspective, it's still challenging to explain the whole license strategy to a client, so we really have to be ahead of that for all the true forward conversations."

"I believe the licensing model is excellent as it offers flexibility to our customers, allowing them to adopt a crawl, walk, or run approach."

"Cisco's licensing is always a bit complicated to understand, but the price is fair. It could be more expensive than others, but the way they integrate everything, it has a fair price."

"Price wise, it's not cheap, but it's not expensive at all either. It's in the middle."

More Cisco Duo pricing and cost advice

"In terms of pricing, considering that it is a two or three years old solution, they should apply big discounts for the next two or three years. This approach will be better for them to capture the market."

"They price their products using credit modules."

"It is pretty expensive. We have to balance the cost of some features. They need to work on some of the services and products, price-wise."

"Prisma Access by Palo Alto Networks is an expensive solution, especially when compared to other solutions like Cisco. There are no additional charges apart from the standard licensing costs attached to the solution."

"It's pricey, it's not cheap. But you get what you pay for."

"The pricing is very friendly. It's not confusing to figure out your workload and how much you'd be paying for the solution."

"The solution is expensive."

"Actually the solution is very expensive. I don't know the particulars since the purchasing team dealt with it."

More Prisma Access by Palo Alto Networks pricing and cost advice

See which vendors are best for you

Use our free recommendation engine to learn which ZTNA as a Service solutions are best for your needs.

See recommendations

884,706 professionals have used our research since 2012.

Top Industries

By visitors reading reviews

Financial Services Firm

11%

Computer Software Company

10%

Manufacturing Company

Comms Service Provider

Manufacturing Company

11%

Financial Services Firm

Comms Service Provider

Computer Software Company

Financial Services Firm

11%

Manufacturing Company

11%

Computer Software Company

Government

Company Size

By reviewers

Large Enterprise

Midsize Enterprise

Small Business

By reviewers
Company Size	Count
Small Business	6
Midsize Enterprise	6
Large Enterprise	6

By reviewers
Company Size	Count
Small Business	41
Midsize Enterprise	24
Large Enterprise	54

By reviewers
Company Size	Count
Small Business	24
Midsize Enterprise	21
Large Enterprise	27

Questions from the Community

What needs improvement with iboss?

For zero trust implementation, we encountered complexity issues, especially with a large infrastructure company Exxon...

What is your primary use case for iboss?

Previously when I used iboss, we did the POC for iboss for ExxonMobil. Four or five people wanted to move from our ol...

What is your experience regarding pricing and costs for iboss?

Regarding pricing, setup costs, and licensing, iboss is not cheap, and that's my only concern. There are cheaper alte...

How does Duo Security compare with Microsoft Authenticator?

We switched to Duo Security for identity verification. We’d been using a competitor but got the chance to evaluate Du...

What is your experience regarding pricing and costs for Duo Security?

Compared to other vendors, Cisco Duo is on the pricey end. However, the other vendors do not have the wide range of f...

What needs improvement with Duo Security?

Areas that have room for improvement in Cisco Duo include pricing, as Cisco is quite expensive, and the fact that Cis...

What is the better solution - Prisma Access or Zscaler Private Access?

We looked into Prisma Access before choosing Zscaler Private Access (ZPA). Palo Alto’s Prisma Access is a secure ac...

What do you like most about Prisma Access by Palo Alto Networks?

The most valuable features of the solution are in the areas of the secure remote access it provides while also being ...

What is your experience regarding pricing and costs for Prisma Access by Palo Alto Networks?

From my experience, Palo Alto is more expensive compared to solutions like Netskope and Triscale.

Fortinet FortiGate vs iboss

Comparisons

Netskope vs iboss

Compared 11% of the time

FortiSASE vs iboss

Compared 7% of the time

Compared 7% of the time

Cisco Umbrella vs iboss

Compared 7% of the time

Zscaler Internet Access vs iboss

Compared 6% of the time

More iboss Competitors

Microsoft Entra ID vs Cisco Duo

Compared 8% of the time

Fortinet FortiAuthenticator vs Cisco Duo

Compared 7% of the time

Fortinet FortiToken vs Cisco Duo

Compared 5% of the time

Yubico YubiKey vs Cisco Duo

Compared 4% of the time

Cisco Identity Services Engine (ISE) vs Cisco Duo

Compared 3% of the time

More Cisco Duo Competitors

Netskope vs Prisma Access by Palo Alto Networks

Compared 12% of the time

Zscaler Internet Access vs Prisma Access by Palo Alto Networks

Compared 8% of the time

FortiSASE vs Prisma Access by Palo Alto Networks

Compared 8% of the time

Cato SASE Cloud Platform vs Prisma Access by Palo Alto Networks

Compared 6% of the time

More Prisma Access by Palo Alto Networks Competitors

Product Reports

iboss

Download iboss product report

Cisco Duo

Download Cisco Duo product report

Prisma Access by Palo Alto Networks

Download Prisma Access by Palo Alto Networks product report

Prisma Access by Palo Alto Networks report

Also Known As

iBoss Cloud Platform

Duo Security

Palo Alto Networks Prisma Access, Prisma Access, GlobalProtect, Palo Alto GlobalProtect Mobile Security Manager, Prisma SaaS by Palo Alto Networks, Prisma Access

Overview

Iboss offers a comprehensive cloud-based security platform valued for its scalability and autonomous features, ensuring robust security with easy deployment and management capabilities.

Renowned for its robust security architecture, Iboss integrates seamlessly within diverse networks, delivering efficient granular filtering and advanced content categorization. Its single pane of glass console provides ease of management, allowing rapid scalability suitable for rapidly deploying environments. Operates in BYOD setups due to inline filtering without device installation. Integration with cloud-based applications enhances user control, and features like SASE, SSL inspection, and ChatGPT risk protection stand as highlights. Despite its strengths, users have pointed out areas for enhancement like direct navigation in reports, SSL decryption, and better cloud integration while having room to improve data loss prevention.

What are the most important features of Iboss?

Scalability: Supports rapid deployment across diverse networks.
SASE: A consolidated approach to secure access.
SSL Inspection: Ensures safe data transmission.
Granular Filtering: Detailed control over accessible content.
Single Pane Management: Unifies control through a centralized console.

What benefits should users consider in reviews?

Cost-effectiveness: Offers competitive pricing with robust features.
Autonomous Operation: Reduces management overhead.
Responsive Support: Provides assistance when needed.
Flexible Deployment: Available for both cloud and on-premises environments.

The usage of Iboss spans educational institutions, specifically K-12, to enforce internet policies, protect data, and support remote work environments. It provides web filtering and security frameworks to ensure safe browsing. Its platform-as-a-service model offers flexibility for both cloud-based and on-premises requirements, integrating seamlessly to deliver enhanced security features suitable for various deployment needs including zero trust, CASB, and network security for work-from-home setups.

iboss

Cisco Duo is a cloud-based identity security platform safeguarding critical resources for any user and device worldwide. Known for its ease of use, Duo offers seamless protection across multi-cloud, hybrid, and on-premises environments.

Cisco Duo is designed to secure access with identity-first protection and provides extensive visibility throughout an organization's identity ecosystem. Offering multi-factor authentication, Duo facilitates easy integration and management, allowing teams to protect data effectively on VPNs, applications, and networks. Its single-pane management improves security processes while enhancing trust, making it suitable for diverse IT infrastructures.

What are the key features of Cisco Duo?

Multi-factor Authentication: Strengthens user verification with multiple methods.
Push Notifications: Simplifies authentication with quick approvals.
Single Sign-On: Enhances convenience by allowing one set of credentials.
VPN Access: Secures remote connections with reliable authentication.
User Activity Visibility: Offers comprehensive insights into access patterns.

Which benefits and ROI should users consider?

Quick Deployment: Facilitates rapid integration within existing systems.
Effective Management: Streamlines IT operations with centralized control.
Regulatory Compliance: Aids in meeting industry standards for data protection.
Enhanced Trust: Strengthens security posture across networks.
User-friendly Approach: Simplifies authentication for non-technical users.

In industries like education and finance, Cisco Duo is widely employed to secure multi-factor authentication across platforms such as email, databases, and servers. Its integration capabilities with Microsoft 365, Active Directory, and VPNs like AnyConnect are instrumental in verifying user identities using mobile apps or OTPs, catering effectively to both remote and on-premise environments.

Cisco

Prisma Access by Palo Alto Networks provides consistent security for all users and applications across your remote networks. Prisma Access grants users safe access to the cloud and data center applications and the internet as well. In addition, the solution combines all of your security and networking capabilities into a single cloud-delivered platform, enabling flexible hybrid workforces.

Prisma Access can be managed two ways:

Cloud Managed
Panorama Managed

Prisma Access delivers both networking and security services, including:

SD-WAN
VPN
Zero Trust network access (ZTNA)
Quality of service (QoS)
Clean Pipe
Firewall as a service (FWaaS)
DNS Security
Threat Prevention
Cloud secure web gateway (SWG)
Data loss prevention (DLP)
Cloud access security broker (CASB)

Prisma Access by Palo Alto Networks Features

Prisma Access by Palo Alto Networks has many valuable key features including: App-ID, User-ID, Device-ID, SSL Decryption, Dynamic User Group (DUG) Monitoring, AI/ML-Based Detection, IoT Security, Reporting, URL Filtering, Enterprise Data Loss Prevention (DLP), Digital Experience Monitoring (DEM)*, Logging, Policy Automation, Intrusion Prevention System (IPS), and many more.

Prisma Access by Palo Alto Networks Benefits

Some of the benefits of using Prisma Access by Palo Alto Networks include:

Security: Prisma Access gives you consistent security to protect against cyberattacks, with enforcement of policy at every location. By implementing Prisma Access, you also gain protection that works to prevent known and unknown malware, exploits, credential theft, command and control, and many other attack vectors across all ports and protocols.
Global connectivity: Prisma Access provides global coverage through use of its connectivity layer.
Scalability: With Prisma Access, scaling is automatically managed and is scalable, flexible, and agile.
Instant deployment: Deployment is fast, eliminating wasted time that may otherwise be associated with setting up a solution, operating it, or shipping hardware in order to get started.

Reviews from Real Users

Below are some reviews and helpful feedback written by Microsoft Azure Synapse Analytics

users who are currently using the solution.

PeerSpot user Partha D., Global Network Tech Lead at a computer software company, speaks about his experience using the product, saying, "It protects all app traffic so that users can gain access to all apps. Unlike other solutions that only work from ports 80 and 443, which are predominantly for web traffic, Prisma Access covers all protocols and works on all traffic patterns... The most sophisticated attacks can arise from sources that are not behind 80/443."

Tejas J., a Sr. Cloud Security Architect at a computer software company, mentions that "it is geographically dispersed, and it sits on top of Google and AWS platforms. Therefore, you don't face the standard issues, such as latency or bandwidth issues, that you usually face in the case of on-prem data centers.”

Another PeerSpot reviewer, Max I., Associate Director at Cognizant, comments that "Security is absolutely spot-on, really top-notch. It's the result of all the components that come together, such as the HIP [Host Information Profile] and components like Forcepoint, providing end-user content inspection, and antivirus. It incorporates DLP features and that's fantastic because Prisma Access makes sure that all of the essential prerequisites are in place before a user can log in or can be tunneled into."

Palo Alto Networks

Sample Customers

More than 4,000 global enterprises trust the iboss Cloud Platform to support their modern workforces, including a large number of Fortune 50 companies.

Information Not Available

Concord Hospital, State of Colorado, Essilor International, RheinLand Versicherungsgruppe, University of Westminster, Universidade Nove de Julho, SPAR Austria, CAME Group, ZipRealty, Greenhill & Co., IKT Agder, Aviva Stadium, Animal Logic, Management & Training Corporation, Brigham Young University Hawaii, School District of Chilliwack

Cisco Duo vs. Prisma Access by Palo Alto Networks