Cisco Duo vs Prisma Access by Palo Alto Networks comparison

Cisco Duo vs. Prisma Access by Palo Alto Networks

Download the complete report

Helped 889,955 peers since 2012

Review summaries and opinions

We asked business professionals to review the solutions they use. Here are some excerpts of what they said:

Categories and Ranking

iboss

Mindshare comparison

As of April 2026, in the ZTNA as a Service category, the mindshare of iboss is 2.6%, up from 1.8% compared to the previous year. The mindshare of Cisco Duo is 2.4%, up from 2.3% compared to the previous year. The mindshare of Prisma Access by Palo Alto Networks is 10.5%, down from 15.0% compared to the previous year. It is calculated based on PeerSpot user engagement data.

ZTNA as a Service Mindshare Distribution
Product	Mindshare (%)
Cisco Duo	2.4%
Prisma Access by Palo Alto Networks	10.5%
iboss	2.6%
Other	84.5%

ZTNA as a Service

Featured Reviews

Ashok Ananthula

Senior Consultant Proxy Engineering at a financial services firm with 10,001+ employees

Cloud gateway has strengthened remote web security and now needs better Mac and ISP support

The problem our organization had is that iboss failed for the Mac devices. It is not able to give a successful agent for the Mac agents. That is where in 2025, we had to migrate to the Palo Alto-based platform. If your use case is for just Windows laptops,you can consider this platform as an option One issue is the data center resiliency part. In India especially, they are not tied up with the Tier 1 ISPs like Tata or Airtel; they were having Tier 2 ISPs and encountered many issues reaching few major sites that my organization depends on, and they were having problems that they could not fix quickly. They also lack a mechanism to route that traffic within their data center; rather, they ask customers to make a pac file change to route it to Singapore explicitly. It would be better if they route from their backend , i mean even if I send it to India DC, they should be able to route it internally to make that work; however, they fail to do that and ask the customer to route it in the pac file. Another suggestion is that in China, they do not have the proper setup; they used to have numerous problems with slowness and lack of premium circuits in China as well. That leads to multiple sites working slowly with latency-related issues. So the main issue is the ISP-related problems that need to be solved.

Read full review

Charles Slaustas

Information Technology Contractor at Insight global

Supports seamless authentication for users across multiple organizations and personal portals

The features I use in Cisco Duo include Duo Pushes to confirm my identity to the device, and eventually as MFA security was increased, I actually had to use exchange passcodes. Sometimes, I have to go into the site and get into Cisco Duo to retrieve the passcode, and many of them have been two-factor, where the sites send a passcode that I have to enter into Cisco Duo. It has been more of the latter. I have not seen issues with lagging or crashing on Cisco Duo's end; it was usually on the client end, often because someone set up a bad upgrade or there were connection issues with the Cisco Duo cloud through the administrative site.

Read full review

IgorPinter

Director at PULSEC

Zero-trust access has improved remote security and now simplifies cloud-based firewall management

Regarding the integration part for Prisma Access by Palo Alto Networks, the integration with identity providers is pretty much good. It is basically firewall as a service, so it performs well. I completed the integration without any issues. What Palo Alto Networks can do better for Prisma Access by Palo Alto Networks is probably to have the point of presence available in more locations. The point of presence from the Serbia region has the nearest POP in Frankfurt, which is an issue since it is your gateway—when you start browsing the internet, you go through a commercial connection in Germany. They definitely need to spread the service in other countries.

Read full review

Quotes from Members

We asked business professionals to review the solutions they use. Here are some excerpts of what they said:

Pros

"iboss has significantly lowered the number of security incidents. It is crazy how much it blocks and how much it is aware of the outside danger."

"iboss is definitely very good in terms of service."

"The security aspect of the solution, particularly the malware behind it, is excellent. That's something that really helped us out. It's not just a simple proxy that just blocks the insights of potential threats that come on behind it. They do malware detection and that helps us a lot."

"Because of iboss, I did not have to assign web filtering tasks to my techs on a daily basis."

"Granular setup, which was able to set different levels of filters using the OUs in the AD."

"Technical support is pretty sharp and very responsive."

"Our primary use case for this product is DLP,"

"We were impressed by the solution's mental health function, which can detect if someone needs help. It scans what users are browsing and flags warning signs so we can check to see if they are okay. We've had to use it a couple of times."

More iboss pros

"You can do online and offline authentication."

"The push notifications and the integrations they offer are valuable. Their mobile app is very useful. It is very easy to use."

"Duo allowed us to greatly enhance our security."

"My impression of Cisco's identity intelligence capability to detect and respond to identity-based risks effectively is that it's a great product."

"As a former employee, I think it's top-notch when it comes to protecting internal and external threats and preventing unauthorized access to the network."

"Cisco Duo seems very scalable—in my experience, I started with a small-medium business, and in my last contracting position, it was a large one for a major worldwide airline that had hundreds of thousands of devices that could use Cisco Duo, and it scaled very well."

"It has definitely made our company more secure."

"Looking back at my initial investment in Cisco Duo versus the total value it has delivered over time, I see that it has paid more than what we invested, so we are getting a good return and a good service with improved security."

More Cisco Duo pros

"It is easy to use, easy to integrate, and is stable. It's scalable as well."

"Palo Alto Firewall is one of the best firewalls in the world."

"The solution also provides traffic analysis, threat prevention, URL filtering, and segmentation. That combination is important because it enhances the protection and makes the traffic more secure. It also keeps things more up-to-date, enabling us to deal with more of the current threats."

"We have an application called ADEM that helps us troubleshoot network-related issues. It helps us to isolate an issue whether it is on the ISP level, endpoint level, or system access level."

"To quarantine and clean a malware file provides a lot of security."

"The most valuable feature of Prisma Cloud-native, in my opinion, is that it assists in identifying, analyzing, and remediating vulnerabilities."

"From an audit or security perspective, the solution has been very stable so far."

"It shows the alerts in real-time, and we are pretty happy with the service it offers."

More Prisma Access by Palo Alto Networks pros

Cons

"To scale up, a new iboss Node Blade Chassis must be purchased."

"The dashboards for local use could be better."

"Sometimes, obviously, there are bugs."

"If they could implement an extra security layer preventing access to iboss from the open internet, it would be great."

"The reporting feature needs improvement. It doesn't give you the expected results. It is quite difficult to get the specific reports needed, and it is not as intuitive as the rest of the platform."

"The solution could be stronger on the integration side and offer more cloud applications like G Suite or Oracle."

"One thing I would like to see differently with their Zero Trust platform is that some of the AI aspects related to high-risk activities have more false positives."

"Our iboss subscription access should be more secure with an OTP or VPN etc. It is easy to gain access if, for example, hackers obtain my username and password."

More iboss cons

"I believe Cisco Duo needs to be improved on the delay process because there is a delay when we send a Duo Push or when we are signing into any applications."

"It took me a while to figure it out. I went to every user and forced them to set it up. I might have done it the long way."

"For the back-end, there could be a few more security features applied."

"We already have Active Directory enabled in our routers and switches. However, if we could do two-factor authentication, then it could go a long way since no one's getting into them unless you want them to."

"The pain point for us at one point was the Duo Authentication Proxy since we're on-premises and not in the cloud. We had to have a proxy machine that's in our DMZ to talk to Duo for us. The configuration of that was a little complicated."

"The only thing I can think of to improve for tech support is to have a dedicated engineer but then I would get an engineer that has priorities in one area or another and maybe not the scope I need."

"Cisco Duo is a modern product that does not support older applications, lacking backward compatibility. It should work on supporting legacy applications and legacy approaches."

"There was an issue related to integration with third parties."

More Cisco Duo cons

"They automatically update and they should give us time to fully understand what they're updating so that we can make sure it doesn't impact production."

"It is a managed firewall. When you run into issues and have to troubleshoot, there is a fair amount of restriction."

"I would like to see better pricing and an easier logging process. Also, if there was a way to log a global log, everything could go onto the system. It would be better if there was a third log, otherwise one would have to do everything manually."

"Sometimes, we encountered a portal crash. When we told Palo Alto they said it might be the browser or cache, but I think they need to improve it on their side."

"Their next release should provide solutions for the mobile environment."

"I would like to see better pricing and an easier logging process. Also, if there was a way to log a global log, everything could go onto the system."

"GlobalProtect can face challenges with latency, especially when remote workers connect to centralized locations."

"The user interface could be better. They need to work a little bit on the console. It is similar to their firewalls but not exactly. They need to clean it up a bit."

More Prisma Access by Palo Alto Networks cons

Pricing and Cost Advice

"The overall pricing for iboss is very competitive and transparent."

"We have not priced the solution recently, but they were competitive with other vendors in the past."

"We had the cost of purchasing a new appliance along with the implementation and licensing costs. However, the following year, the cost of just licensing was similar to what was paid the previous year for a new appliance along with the implementation and licensing costs."

"It is expensive compared to one of its competitors."

"It is probably in line with other solutions, but I do not deal with the financial side."

"It is not expensive, and it is also not cheap. iboss is priced right in the sweet spot for the number of features it offers."

"Duo Security's pricing is good, fair, and very comparable to today's market."

"You pay per user when using this solution and the pricing is fair."

"I am not aware of the pricing. There are two departments, and I don't have any information about them."

"It's very simple. Its price is fair. We use the hardware tokens as well. You get what you pay for. In terms of licensing, Cisco has very complicated products, but Duo Security was surprisingly easy."

"Price wise, it's not cheap, but it's not expensive at all either. It's in the middle."

"Its price is reasonable. It is not highly expensive."

"It's a bit confusing because we're on a three-year plan with a certain number of licenses, and we've gone over that number. They told us that when we renew, they will add all these licenses. We've expanded quickly, so everyone's kind of scared because no one knows what the bill is with the long pricing cycle."

"Cisco has the most expensive products because market leaders tend to charge a lot."

More Cisco Duo pricing and cost advice

"The licensing fees are paid on a yearly basis and for what we get, the price is good."

"Prisma is in the middle of the road. It's not the most expensive, but it's not the cheapest. There aren't any additional costs, to my knowledge. I know they have some extra modules, but we didn't use them."

"As compared to other solutions, Prisma Access is much cheaper. It is probably 30% to 40% cheaper than other solutions, but I do not know the exact cost."

"This is not an expensive product and everything is included with one license."

"It is not cheap. It is expensive. The good thing is that you are able to pay for what you need, but overall, it is not cheap. The pricing is not based on packages. You pay based on the features. If you want DLP, you only pay for DLP. They are very flexible. It is not cheap, but the licensing is flexible. There are no additional costs in addition to the standard licensing fees."

"Actually the solution is very expensive. I don't know the particulars since the purchasing team dealt with it."

"I'm still comparing, but the solution is quite expensive."

"We have to pay additional costs for maintenance and support services."

More Prisma Access by Palo Alto Networks pricing and cost advice

See which vendors are best for you

Use our free recommendation engine to learn which ZTNA as a Service solutions are best for your needs.

See recommendations

889,955 professionals have used our research since 2012.

Top Industries

By visitors reading reviews

Financial Services Firm

11%

Computer Software Company

Manufacturing Company

Construction Company

Financial Services Firm

11%

Manufacturing Company

10%

Comms Service Provider

Educational Organization

Financial Services Firm

12%

Manufacturing Company

10%

Computer Software Company

Government

Company Size

By reviewers

Large Enterprise

Midsize Enterprise

Small Business

By reviewers
Company Size	Count
Small Business	7
Midsize Enterprise	7
Large Enterprise	8

By reviewers
Company Size	Count
Small Business	42
Midsize Enterprise	24
Large Enterprise	57

By reviewers
Company Size	Count
Small Business	24
Midsize Enterprise	21
Large Enterprise	27

Questions from the Community

What needs improvement with iboss?

iboss can increase security in cyberspace. I have heard they are doing DDoS filtering, but I am not certain if they a...

What is your primary use case for iboss?

I use iboss for corporate VPN and all the corporate VRF, with basically all user traffic proxying to the internet.

What is your experience regarding pricing and costs for iboss?

Regarding pricing, setup costs, and licensing, iboss is not cheap, and that's my only concern. There are cheaper alte...

How does Duo Security compare with Microsoft Authenticator?

We switched to Duo Security for identity verification. We’d been using a competitor but got the chance to evaluate Du...

What is your experience regarding pricing and costs for Duo Security?

I cannot speak to the financial planning of the organization, but I can confirm that Cisco Duo falls within the secur...

What needs improvement with Duo Security?

Areas that have room for improvement in Cisco Duo include pricing, as Cisco is quite expensive, and the fact that Cis...

What is the better solution - Prisma Access or Zscaler Private Access?

We looked into Prisma Access before choosing Zscaler Private Access (ZPA). Palo Alto’s Prisma Access is a secure ac...

What do you like most about Prisma Access by Palo Alto Networks?

The most valuable features of the solution are in the areas of the secure remote access it provides while also being ...

What is your experience regarding pricing and costs for Prisma Access by Palo Alto Networks?

From my experience, Palo Alto is more expensive compared to solutions like Netskope and Triscale.

Fortinet FortiGate vs iboss

Comparisons

Netskope vs iboss

Compared 9% of the time

Compared 8% of the time

FortiSASE vs iboss

Compared 7% of the time

Cisco Umbrella vs iboss

Compared 6% of the time

Zscaler Internet Access vs iboss

Compared 5% of the time

More iboss Competitors

Microsoft Entra ID vs Cisco Duo

Compared 8% of the time

Fortinet FortiAuthenticator vs Cisco Duo

Compared 6% of the time

Fortinet FortiToken vs Cisco Duo

Compared 4% of the time

Cisco Identity Services Engine (ISE) vs Cisco Duo

Compared 3% of the time

Yubico YubiKey vs Cisco Duo

Compared 3% of the time

More Cisco Duo Competitors

Netskope vs Prisma Access by Palo Alto Networks

Compared 11% of the time

Zscaler Internet Access vs Prisma Access by Palo Alto Networks

Compared 7% of the time

FortiSASE vs Prisma Access by Palo Alto Networks

Compared 7% of the time

Cato SASE Cloud Platform vs Prisma Access by Palo Alto Networks

Compared 6% of the time

Prisma SD-WAN vs Prisma Access by Palo Alto Networks

Compared 2% of the time

More Prisma Access by Palo Alto Networks Competitors

Product Reports

iboss

Download iboss product report

Cisco Duo

Download Cisco Duo product report

Prisma Access by Palo Alto Networks

Download Prisma Access by Palo Alto Networks product report

Prisma Access by Palo Alto Networks report

Also Known As

iBoss Cloud Platform

Duo Security

Palo Alto Networks Prisma Access, Prisma Access, GlobalProtect, Palo Alto GlobalProtect Mobile Security Manager, Prisma SaaS by Palo Alto Networks, Prisma Access

Overview

Iboss offers a comprehensive cloud-based security platform valued for its scalability and autonomous features, ensuring robust security with easy deployment and management capabilities.

Renowned for its robust security architecture, Iboss integrates seamlessly within diverse networks, delivering efficient granular filtering and advanced content categorization. Its single pane of glass console provides ease of management, allowing rapid scalability suitable for rapidly deploying environments. Operates in BYOD setups due to inline filtering without device installation. Integration with cloud-based applications enhances user control, and features like SASE, SSL inspection, and ChatGPT risk protection stand as highlights. Despite its strengths, users have pointed out areas for enhancement like direct navigation in reports, SSL decryption, and better cloud integration while having room to improve data loss prevention.

What are the most important features of Iboss?

Scalability: Supports rapid deployment across diverse networks.
SASE: A consolidated approach to secure access.
SSL Inspection: Ensures safe data transmission.
Granular Filtering: Detailed control over accessible content.
Single Pane Management: Unifies control through a centralized console.

What benefits should users consider in reviews?

Cost-effectiveness: Offers competitive pricing with robust features.
Autonomous Operation: Reduces management overhead.
Responsive Support: Provides assistance when needed.
Flexible Deployment: Available for both cloud and on-premises environments.

The usage of Iboss spans educational institutions, specifically K-12, to enforce internet policies, protect data, and support remote work environments. It provides web filtering and security frameworks to ensure safe browsing. Its platform-as-a-service model offers flexibility for both cloud-based and on-premises requirements, integrating seamlessly to deliver enhanced security features suitable for various deployment needs including zero trust, CASB, and network security for work-from-home setups.

iboss

Cisco Duo is a cloud-based identity security platform safeguarding critical resources for any user and device worldwide. Known for its ease of use, Duo offers seamless protection across multi-cloud, hybrid, and on-premises environments.

Cisco Duo is designed to secure access with identity-first protection and provides extensive visibility throughout an organization's identity ecosystem. Offering multi-factor authentication, Duo facilitates easy integration and management, allowing teams to protect data effectively on VPNs, applications, and networks. Its single-pane management improves security processes while enhancing trust, making it suitable for diverse IT infrastructures.

What are the key features of Cisco Duo?

Multi-factor Authentication: Strengthens user verification with multiple methods.
Push Notifications: Simplifies authentication with quick approvals.
Single Sign-On: Enhances convenience by allowing one set of credentials.
VPN Access: Secures remote connections with reliable authentication.
User Activity Visibility: Offers comprehensive insights into access patterns.

Which benefits and ROI should users consider?

Quick Deployment: Facilitates rapid integration within existing systems.
Effective Management: Streamlines IT operations with centralized control.
Regulatory Compliance: Aids in meeting industry standards for data protection.
Enhanced Trust: Strengthens security posture across networks.
User-friendly Approach: Simplifies authentication for non-technical users.

In industries like education and finance, Cisco Duo is widely employed to secure multi-factor authentication across platforms such as email, databases, and servers. Its integration capabilities with Microsoft 365, Active Directory, and VPNs like AnyConnect are instrumental in verifying user identities using mobile apps or OTPs, catering effectively to both remote and on-premise environments.

Cisco

Prisma Access by Palo Alto Networks provides consistent security for all users and applications across your remote networks. Prisma Access grants users safe access to the cloud and data center applications and the internet as well. In addition, the solution combines all of your security and networking capabilities into a single cloud-delivered platform, enabling flexible hybrid workforces.

Prisma Access can be managed two ways:

Cloud Managed
Panorama Managed

Prisma Access delivers both networking and security services, including:

SD-WAN
VPN
Zero Trust network access (ZTNA)
Quality of service (QoS)
Clean Pipe
Firewall as a service (FWaaS)
DNS Security
Threat Prevention
Cloud secure web gateway (SWG)
Data loss prevention (DLP)
Cloud access security broker (CASB)

Prisma Access by Palo Alto Networks Features

Prisma Access by Palo Alto Networks has many valuable key features including: App-ID, User-ID, Device-ID, SSL Decryption, Dynamic User Group (DUG) Monitoring, AI/ML-Based Detection, IoT Security, Reporting, URL Filtering, Enterprise Data Loss Prevention (DLP), Digital Experience Monitoring (DEM)*, Logging, Policy Automation, Intrusion Prevention System (IPS), and many more.

Prisma Access by Palo Alto Networks Benefits

Some of the benefits of using Prisma Access by Palo Alto Networks include:

Security: Prisma Access gives you consistent security to protect against cyberattacks, with enforcement of policy at every location. By implementing Prisma Access, you also gain protection that works to prevent known and unknown malware, exploits, credential theft, command and control, and many other attack vectors across all ports and protocols.
Global connectivity: Prisma Access provides global coverage through use of its connectivity layer.
Scalability: With Prisma Access, scaling is automatically managed and is scalable, flexible, and agile.
Instant deployment: Deployment is fast, eliminating wasted time that may otherwise be associated with setting up a solution, operating it, or shipping hardware in order to get started.

Reviews from Real Users

Below are some reviews and helpful feedback written by Microsoft Azure Synapse Analytics

users who are currently using the solution.

PeerSpot user Partha D., Global Network Tech Lead at a computer software company, speaks about his experience using the product, saying, "It protects all app traffic so that users can gain access to all apps. Unlike other solutions that only work from ports 80 and 443, which are predominantly for web traffic, Prisma Access covers all protocols and works on all traffic patterns... The most sophisticated attacks can arise from sources that are not behind 80/443."

Tejas J., a Sr. Cloud Security Architect at a computer software company, mentions that "it is geographically dispersed, and it sits on top of Google and AWS platforms. Therefore, you don't face the standard issues, such as latency or bandwidth issues, that you usually face in the case of on-prem data centers.”

Another PeerSpot reviewer, Max I., Associate Director at Cognizant, comments that "Security is absolutely spot-on, really top-notch. It's the result of all the components that come together, such as the HIP [Host Information Profile] and components like Forcepoint, providing end-user content inspection, and antivirus. It incorporates DLP features and that's fantastic because Prisma Access makes sure that all of the essential prerequisites are in place before a user can log in or can be tunneled into."

Palo Alto Networks

Sample Customers

More than 4,000 global enterprises trust the iboss Cloud Platform to support their modern workforces, including a large number of Fortune 50 companies.

Information Not Available

Concord Hospital, State of Colorado, Essilor International, RheinLand Versicherungsgruppe, University of Westminster, Universidade Nove de Julho, SPAR Austria, CAME Group, ZipRealty, Greenhill & Co., IKT Agder, Aviva Stadium, Animal Logic, Management & Training Corporation, Brigham Young University Hawaii, School District of Chilliwack

Cisco Duo vs. Prisma Access by Palo Alto Networks