Cisco Duo vs Prisma Access by Palo Alto Networks comparison

Cisco Duo vs. Prisma Access by Palo Alto Networks

Download the complete report

Helped 886,976 peers since 2012

Review summaries and opinions

We asked business professionals to review the solutions they use. Here are some excerpts of what they said:

Categories and Ranking

iboss

Mindshare comparison

As of April 2026, in the ZTNA as a Service category, the mindshare of iboss is 2.6%, up from 1.8% compared to the previous year. The mindshare of Cisco Duo is 2.4%, up from 2.3% compared to the previous year. The mindshare of Prisma Access by Palo Alto Networks is 10.5%, down from 15.0% compared to the previous year. It is calculated based on PeerSpot user engagement data.

ZTNA as a Service Mindshare Distribution
Product	Mindshare (%)
Cisco Duo	2.4%
Prisma Access by Palo Alto Networks	10.5%
iboss	2.6%
Other	84.5%

ZTNA as a Service

Featured Reviews

Ashok Ananthula

Senior Consultant Proxy Engineering at a financial services firm with 10,001+ employees

Cloud gateway has strengthened remote web security and now needs better Mac and ISP support

The problem our organization had is that iboss failed for the Mac devices. It is not able to give a successful agent for the Mac agents. That is where in 2025, we had to migrate to the Palo Alto-based platform. If your use case is for just Windows laptops,you can consider this platform as an option One issue is the data center resiliency part. In India especially, they are not tied up with the Tier 1 ISPs like Tata or Airtel; they were having Tier 2 ISPs and encountered many issues reaching few major sites that my organization depends on, and they were having problems that they could not fix quickly. They also lack a mechanism to route that traffic within their data center; rather, they ask customers to make a pac file change to route it to Singapore explicitly. It would be better if they route from their backend , i mean even if I send it to India DC, they should be able to route it internally to make that work; however, they fail to do that and ask the customer to route it in the pac file. Another suggestion is that in China, they do not have the proper setup; they used to have numerous problems with slowness and lack of premium circuits in China as well. That leads to multiple sites working slowly with latency-related issues. So the main issue is the ISP-related problems that need to be solved.

Read full review

Charles Slaustas

Information Technology Contractor at Insight global

Supports seamless authentication for users across multiple organizations and personal portals

The features I use in Cisco Duo include Duo Pushes to confirm my identity to the device, and eventually as MFA security was increased, I actually had to use exchange passcodes. Sometimes, I have to go into the site and get into Cisco Duo to retrieve the passcode, and many of them have been two-factor, where the sites send a passcode that I have to enter into Cisco Duo. It has been more of the latter. I have not seen issues with lagging or crashing on Cisco Duo's end; it was usually on the client end, often because someone set up a bad upgrade or there were connection issues with the Cisco Duo cloud through the administrative site.

Read full review

IgorPinter

Director at PULSEC

Zero-trust access has improved remote security and now simplifies cloud-based firewall management

Regarding the integration part for Prisma Access by Palo Alto Networks, the integration with identity providers is pretty much good. It is basically firewall as a service, so it performs well. I completed the integration without any issues. What Palo Alto Networks can do better for Prisma Access by Palo Alto Networks is probably to have the point of presence available in more locations. The point of presence from the Serbia region has the nearest POP in Frankfurt, which is an issue since it is your gateway—when you start browsing the internet, you go through a commercial connection in Germany. They definitely need to spread the service in other countries.

Read full review

Quotes from Members

We asked business professionals to review the solutions they use. Here are some excerpts of what they said:

Pros

"It was a very easy product to install. It can be deployed very fast."

"Granular setup, which was able to set different levels of filters using the OUs in the AD."

"As I mentioned, the return on investment is significant, as it saved our office locations' bandwidth because when you are working remotely at home, your internet traffic routes directly to iboss and will not go to your office building, saving bandwidth bottlenecks and ensuring that issues with our building internet circuits will not impact your internet connectivity because you are directly going to the iboss data center."

"The security aspect of the solution, particularly the malware behind it, is excellent."

"The iboss solution gives me the ability to scan the traffic through all the ports, through all the 131,000 PCP and UDP ports, and with this ability, we have the granularity also for consults over social media and applications on mobile, and this is an advantage that the customers are looking for right now."

"iboss is among the few products providing inline filtering where no application is needed on the device. It operates on the network side and is not device-based. This feature was one of the main reasons why we stayed with them for so long."

"Because of iboss, I did not have to assign web filtering tasks to my techs on a daily basis."

"The console is cloud-based, which is something I really appreciate."

More iboss pros

"In the world of network security, it is outstanding and very strong."

"It's a great solution for securing access to the applications and network because we can integrate the solution with all types of applications."

"My impression of Cisco's identity intelligence capability to detect and respond to identity-based risks effectively is that it's a great product."

"Duo Security gives us an additional layer of security that would give us added confidence that our network will be less likely to get hacked, compromised, or otherwise."

"By deploying Duo, we have virtually eliminated the risk of direct deposit redirection as a result of credentials that have been compromised via phishing."

"The ability for users to authenticate via phone, from any random phone number, has been very helpful for managing a distributed workforce. Using it across a distributed network for securing access to our applications is big for us."

"It's pretty easy for users to figure it out."

"All features of the solution are effective, Duo supports BYOD policies by allowing users to authenticate securely from their personal devices."

More Cisco Duo pros

"For anybody who is looking for a contained-based solution, I definitely recommend this product."

"Prisma Access protects all app traffic, so that users can gain access to all apps and that's very important because we need to be able to access everything. It also allows us to access non-web apps; anything internal that we need access to, we can access."

"Monitoring is the most valuable feature because we can easily monitor all kinds of stuff coming over the network. We can check the dashboard and work accordingly."

"The solution has all its capabilities in a single cloud delivery platform which is great and it provides overall good protection."

"Overall, the security provided by Prisma Access is top-notch."

"It's very stable. Sometimes after installing the boxes, we leave them for one or two years. We would just touch the box in the case of the customer needing new requirements or changes to the setup."

"If you are planning on using the SASE model for your organization, I would recommend Palo Alto Prisma Access."

"The users can securely access any cloud data centers or cloud platforms, and in terms of the features, it has all the features that Palo Alto Next-Generation Firewall has, and it is also very stable and scalable."

More Prisma Access by Palo Alto Networks pros

Cons

"To scale up, a new iboss Node Blade Chassis must be purchased."

"Our iboss subscription access should be more secure with an OTP or VPN etc. It is easy to gain access if, for example, hackers obtain my username and password."

"File integrity monitoring would be very advantageous as an additional feature."

"One thing I would like to see differently with their Zero Trust platform is that some of the AI aspects related to high-risk activities have more false positives."

"If they could implement an extra security layer preventing access to iboss from the open internet, it would be great."

"Its pricing could be better."

"Their on-premise hardware's network interface is capped at one gigabit, which is sort of a problem. If you stand a filter up where all traffic flows through that, according to them, in order to go above a gigabit, you have to have multiple devices, which in today's IT seems a little bit silly. They could easily put in an SFP port into their device that could accommodate 10 gigs or at least offer a box."

"The problem our organization had is that iboss failed for the Mac devices; it is not able to give a successful agent for the Mac agents, and that is where in 2025 we had to migrate to the Palo Alto-based platform."

More iboss cons

"There is another issue with removing the application from your computer. It is difficult to remove the application on Windows."

"Regarding the pricing, setup costs, and licensing, I find that for some companies using Azure, they question why they should switch when they already have Microsoft Authenticator, which can make it commercially challenging when explaining why they need to transition to Cisco Duo."

"There is a little bit of apprehension for some users thinking, well, "How do I know this app is not collecting personal information from my personal device?""

"Regarding the stability and reliability of the Cisco Duo solution, we have experienced some outages over the last few years that are significant because people can't log in."

"When we try to sell Cisco Duo for any license, sometimes customers approach us and say that Cisco Duo is expensive compared to competitors or that the features are not as good."

"I would like to see some features simplified, such as securing, configuring, and implementing Microsoft Remote Desktop. Other than that, the solution was rock solid throughout my time administering it."

"Technical support could be improved. I don't think all support should have to go through an agreement."

"The customer service is okay. However, the response time could be faster."

More Cisco Duo cons

"From any improvement perspective, the product's compatibility issues with Linux need to be resolved."

"Though the monitoring is fine, the solution should improve its application graphs and interface monitoring."

"Prisma would be a stronger solution if it could aggregate resources by project or by application. So say we have an application we've developed in AWS and five applications we've developed in Azure. The platform will group it according to those applications, but it's based on the tags we use in Azure, which means I have to rely on development teams to tag resources properly."

"It is a managed firewall. When you run into issues and have to troubleshoot, there is a fair amount of restriction."

"When it comes to integration mechanisms, Prisma SaaS does not support reverse proxy type of integrations."

"Prisma Access by Palo Alto Networks should consolidate the portals into a single portal. It is slow and takes more than ten seconds to load a page."

"The one point I have deducted is because it is very hard to get support sometimes."

"The user interface could be better. They need to work a little bit on the console. It is similar to their firewalls but not exactly. They need to clean it up a bit."

More Prisma Access by Palo Alto Networks cons

Pricing and Cost Advice

"It is expensive compared to one of its competitors."

"We have not priced the solution recently, but they were competitive with other vendors in the past."

"We had the cost of purchasing a new appliance along with the implementation and licensing costs. However, the following year, the cost of just licensing was similar to what was paid the previous year for a new appliance along with the implementation and licensing costs."

"It is not expensive, and it is also not cheap. iboss is priced right in the sweet spot for the number of features it offers."

"It is probably in line with other solutions, but I do not deal with the financial side."

"The overall pricing for iboss is very competitive and transparent."

"Their pricing model is a little bit weird. Currently, there is no price advantage in signing up for yearly contracts. There are no additional costs to the standard licensing costs."

"The licensing is very good because it does not cost a lot of money. It's affordable for all-sized customers, including enterprises. There is an additional cost for premium support."

"I am not aware of the pricing. There are two departments, and I don't have any information about them."

"Its price is reasonable. It is not highly expensive."

"I believe the licensing model is excellent as it offers flexibility to our customers, allowing them to adopt a crawl, walk, or run approach."

"With regard to pricing, for a small business buying a one off, it's pretty expensive. If it's an enterprise that has thousands of employees, however, it's really nothing to protect your data because if your network goes down or it's breached, you're losing millions of dollars every minute. When it comes to a large enterprise, it's priced where it should be because you're talking business to business. You're not talking business to consumer."

"It falls in line with everything else."

"The cost was reasonable. Licensing was pretty straightforward for a change."

More Cisco Duo pricing and cost advice

"The initial prices of Prisma Access were okay. But as soon as you start deploying Palo Alto gear, the support prices and the recurring prices, which are the major operational costs, tend to increase over time."

"I'm still comparing, but the solution is quite expensive."

"There's no reason not to buy the enterprise version that gives you unlimited PoPs, but you must understand the limitations you impose on yourself if you do that. If you go crazy, that allowlist will be too big for Kubernetes clusters."

"The price has been good for the ROI during these difficult times for the cruise industry. There are no hidden costs; what the product offers is what you get."

"Prisma Access by Palo Alto Networks is an expensive solution, especially when compared to other solutions like Cisco. There are no additional charges apart from the standard licensing costs attached to the solution."

"The licensing model for this product is complicated and changes all the time, making it very hard for the user to comprehend the configuration."

"The pricing for this solution is on the higher end."

"We have to pay additional costs for maintenance and support services."

More Prisma Access by Palo Alto Networks pricing and cost advice

See which vendors are best for you

Use our free recommendation engine to learn which ZTNA as a Service solutions are best for your needs.

See recommendations

886,976 professionals have used our research since 2012.

Top Industries

By visitors reading reviews

Financial Services Firm

11%

Computer Software Company

Manufacturing Company

Construction Company

Financial Services Firm

11%

Manufacturing Company

10%

Comms Service Provider

Educational Organization

Financial Services Firm

12%

Manufacturing Company

10%

Computer Software Company

Government

Company Size

By reviewers

Large Enterprise

Midsize Enterprise

Small Business

By reviewers
Company Size	Count
Small Business	7
Midsize Enterprise	7
Large Enterprise	8

By reviewers
Company Size	Count
Small Business	42
Midsize Enterprise	24
Large Enterprise	57

By reviewers
Company Size	Count
Small Business	24
Midsize Enterprise	21
Large Enterprise	27

Questions from the Community

What needs improvement with iboss?

iboss can increase security in cyberspace. I have heard they are doing DDoS filtering, but I am not certain if they a...

What is your primary use case for iboss?

I use iboss for corporate VPN and all the corporate VRF, with basically all user traffic proxying to the internet.

What is your experience regarding pricing and costs for iboss?

Regarding pricing, setup costs, and licensing, iboss is not cheap, and that's my only concern. There are cheaper alte...

How does Duo Security compare with Microsoft Authenticator?

We switched to Duo Security for identity verification. We’d been using a competitor but got the chance to evaluate Du...

What is your experience regarding pricing and costs for Duo Security?

I cannot speak to the financial planning of the organization, but I can confirm that Cisco Duo falls within the secur...

What needs improvement with Duo Security?

Areas that have room for improvement in Cisco Duo include pricing, as Cisco is quite expensive, and the fact that Cis...

What is the better solution - Prisma Access or Zscaler Private Access?

We looked into Prisma Access before choosing Zscaler Private Access (ZPA). Palo Alto’s Prisma Access is a secure ac...

What do you like most about Prisma Access by Palo Alto Networks?

The most valuable features of the solution are in the areas of the secure remote access it provides while also being ...

What is your experience regarding pricing and costs for Prisma Access by Palo Alto Networks?

From my experience, Palo Alto is more expensive compared to solutions like Netskope and Triscale.

Fortinet FortiGate vs iboss

Comparisons

Netskope vs iboss

Compared 9% of the time

Compared 8% of the time

FortiSASE vs iboss

Compared 7% of the time

Cisco Umbrella vs iboss

Compared 6% of the time

Zscaler Internet Access vs iboss

Compared 5% of the time

More iboss Competitors

Microsoft Entra ID vs Cisco Duo

Compared 8% of the time

Fortinet FortiAuthenticator vs Cisco Duo

Compared 6% of the time

Fortinet FortiToken vs Cisco Duo

Compared 4% of the time

Cisco Identity Services Engine (ISE) vs Cisco Duo

Compared 4% of the time

Yubico YubiKey vs Cisco Duo

Compared 3% of the time

More Cisco Duo Competitors

Netskope vs Prisma Access by Palo Alto Networks

Compared 11% of the time

Zscaler Internet Access vs Prisma Access by Palo Alto Networks

Compared 7% of the time

FortiSASE vs Prisma Access by Palo Alto Networks

Compared 7% of the time

Cato SASE Cloud Platform vs Prisma Access by Palo Alto Networks

Compared 6% of the time

Prisma SD-WAN vs Prisma Access by Palo Alto Networks

Compared 2% of the time

More Prisma Access by Palo Alto Networks Competitors

Product Reports

iboss

Download iboss product report

Cisco Duo

Download Cisco Duo product report

Prisma Access by Palo Alto Networks

Download Prisma Access by Palo Alto Networks product report

Prisma Access by Palo Alto Networks report

Also Known As

iBoss Cloud Platform

Duo Security

Palo Alto Networks Prisma Access, Prisma Access, GlobalProtect, Palo Alto GlobalProtect Mobile Security Manager, Prisma SaaS by Palo Alto Networks, Prisma Access

Overview

Iboss offers a comprehensive cloud-based security platform valued for its scalability and autonomous features, ensuring robust security with easy deployment and management capabilities.

Renowned for its robust security architecture, Iboss integrates seamlessly within diverse networks, delivering efficient granular filtering and advanced content categorization. Its single pane of glass console provides ease of management, allowing rapid scalability suitable for rapidly deploying environments. Operates in BYOD setups due to inline filtering without device installation. Integration with cloud-based applications enhances user control, and features like SASE, SSL inspection, and ChatGPT risk protection stand as highlights. Despite its strengths, users have pointed out areas for enhancement like direct navigation in reports, SSL decryption, and better cloud integration while having room to improve data loss prevention.

What are the most important features of Iboss?

Scalability: Supports rapid deployment across diverse networks.
SASE: A consolidated approach to secure access.
SSL Inspection: Ensures safe data transmission.
Granular Filtering: Detailed control over accessible content.
Single Pane Management: Unifies control through a centralized console.

What benefits should users consider in reviews?

Cost-effectiveness: Offers competitive pricing with robust features.
Autonomous Operation: Reduces management overhead.
Responsive Support: Provides assistance when needed.
Flexible Deployment: Available for both cloud and on-premises environments.

The usage of Iboss spans educational institutions, specifically K-12, to enforce internet policies, protect data, and support remote work environments. It provides web filtering and security frameworks to ensure safe browsing. Its platform-as-a-service model offers flexibility for both cloud-based and on-premises requirements, integrating seamlessly to deliver enhanced security features suitable for various deployment needs including zero trust, CASB, and network security for work-from-home setups.

iboss

Cisco Duo is a cloud-based identity security platform safeguarding critical resources for any user and device worldwide. Known for its ease of use, Duo offers seamless protection across multi-cloud, hybrid, and on-premises environments.

Cisco Duo is designed to secure access with identity-first protection and provides extensive visibility throughout an organization's identity ecosystem. Offering multi-factor authentication, Duo facilitates easy integration and management, allowing teams to protect data effectively on VPNs, applications, and networks. Its single-pane management improves security processes while enhancing trust, making it suitable for diverse IT infrastructures.

What are the key features of Cisco Duo?

Multi-factor Authentication: Strengthens user verification with multiple methods.
Push Notifications: Simplifies authentication with quick approvals.
Single Sign-On: Enhances convenience by allowing one set of credentials.
VPN Access: Secures remote connections with reliable authentication.
User Activity Visibility: Offers comprehensive insights into access patterns.

Which benefits and ROI should users consider?

Quick Deployment: Facilitates rapid integration within existing systems.
Effective Management: Streamlines IT operations with centralized control.
Regulatory Compliance: Aids in meeting industry standards for data protection.
Enhanced Trust: Strengthens security posture across networks.
User-friendly Approach: Simplifies authentication for non-technical users.

In industries like education and finance, Cisco Duo is widely employed to secure multi-factor authentication across platforms such as email, databases, and servers. Its integration capabilities with Microsoft 365, Active Directory, and VPNs like AnyConnect are instrumental in verifying user identities using mobile apps or OTPs, catering effectively to both remote and on-premise environments.

Cisco

Prisma Access by Palo Alto Networks provides consistent security for all users and applications across your remote networks. Prisma Access grants users safe access to the cloud and data center applications and the internet as well. In addition, the solution combines all of your security and networking capabilities into a single cloud-delivered platform, enabling flexible hybrid workforces.

Prisma Access can be managed two ways:

Cloud Managed
Panorama Managed

Prisma Access delivers both networking and security services, including:

SD-WAN
VPN
Zero Trust network access (ZTNA)
Quality of service (QoS)
Clean Pipe
Firewall as a service (FWaaS)
DNS Security
Threat Prevention
Cloud secure web gateway (SWG)
Data loss prevention (DLP)
Cloud access security broker (CASB)

Prisma Access by Palo Alto Networks Features

Prisma Access by Palo Alto Networks has many valuable key features including: App-ID, User-ID, Device-ID, SSL Decryption, Dynamic User Group (DUG) Monitoring, AI/ML-Based Detection, IoT Security, Reporting, URL Filtering, Enterprise Data Loss Prevention (DLP), Digital Experience Monitoring (DEM)*, Logging, Policy Automation, Intrusion Prevention System (IPS), and many more.

Prisma Access by Palo Alto Networks Benefits

Some of the benefits of using Prisma Access by Palo Alto Networks include:

Security: Prisma Access gives you consistent security to protect against cyberattacks, with enforcement of policy at every location. By implementing Prisma Access, you also gain protection that works to prevent known and unknown malware, exploits, credential theft, command and control, and many other attack vectors across all ports and protocols.
Global connectivity: Prisma Access provides global coverage through use of its connectivity layer.
Scalability: With Prisma Access, scaling is automatically managed and is scalable, flexible, and agile.
Instant deployment: Deployment is fast, eliminating wasted time that may otherwise be associated with setting up a solution, operating it, or shipping hardware in order to get started.

Reviews from Real Users

Below are some reviews and helpful feedback written by Microsoft Azure Synapse Analytics

users who are currently using the solution.

PeerSpot user Partha D., Global Network Tech Lead at a computer software company, speaks about his experience using the product, saying, "It protects all app traffic so that users can gain access to all apps. Unlike other solutions that only work from ports 80 and 443, which are predominantly for web traffic, Prisma Access covers all protocols and works on all traffic patterns... The most sophisticated attacks can arise from sources that are not behind 80/443."

Tejas J., a Sr. Cloud Security Architect at a computer software company, mentions that "it is geographically dispersed, and it sits on top of Google and AWS platforms. Therefore, you don't face the standard issues, such as latency or bandwidth issues, that you usually face in the case of on-prem data centers.”

Another PeerSpot reviewer, Max I., Associate Director at Cognizant, comments that "Security is absolutely spot-on, really top-notch. It's the result of all the components that come together, such as the HIP [Host Information Profile] and components like Forcepoint, providing end-user content inspection, and antivirus. It incorporates DLP features and that's fantastic because Prisma Access makes sure that all of the essential prerequisites are in place before a user can log in or can be tunneled into."

Palo Alto Networks

Sample Customers

More than 4,000 global enterprises trust the iboss Cloud Platform to support their modern workforces, including a large number of Fortune 50 companies.

Information Not Available

Concord Hospital, State of Colorado, Essilor International, RheinLand Versicherungsgruppe, University of Westminster, Universidade Nove de Julho, SPAR Austria, CAME Group, ZipRealty, Greenhill & Co., IKT Agder, Aviva Stadium, Animal Logic, Management & Training Corporation, Brigham Young University Hawaii, School District of Chilliwack

Cisco Duo vs. Prisma Access by Palo Alto Networks