Cisco Duo vs Prisma Access by Palo Alto Networks comparison

Cisco Duo vs. Prisma Access by Palo Alto Networks

Download the complete report

Helped 890,071 peers since 2012

Review summaries and opinions

We asked business professionals to review the solutions they use. Here are some excerpts of what they said:

Categories and Ranking

iboss

Mindshare comparison

As of April 2026, in the ZTNA as a Service category, the mindshare of iboss is 2.6%, up from 1.8% compared to the previous year. The mindshare of Cisco Duo is 2.4%, up from 2.3% compared to the previous year. The mindshare of Prisma Access by Palo Alto Networks is 10.5%, down from 15.0% compared to the previous year. It is calculated based on PeerSpot user engagement data.

ZTNA as a Service Mindshare Distribution
Product	Mindshare (%)
Cisco Duo	2.4%
Prisma Access by Palo Alto Networks	10.5%
iboss	2.6%
Other	84.5%

ZTNA as a Service

Featured Reviews

Ashok Ananthula

Senior Consultant Proxy Engineering at a financial services firm with 10,001+ employees

Cloud gateway has strengthened remote web security and now needs better Mac and ISP support

The problem our organization had is that iboss failed for the Mac devices. It is not able to give a successful agent for the Mac agents. That is where in 2025, we had to migrate to the Palo Alto-based platform. If your use case is for just Windows laptops,you can consider this platform as an option One issue is the data center resiliency part. In India especially, they are not tied up with the Tier 1 ISPs like Tata or Airtel; they were having Tier 2 ISPs and encountered many issues reaching few major sites that my organization depends on, and they were having problems that they could not fix quickly. They also lack a mechanism to route that traffic within their data center; rather, they ask customers to make a pac file change to route it to Singapore explicitly. It would be better if they route from their backend , i mean even if I send it to India DC, they should be able to route it internally to make that work; however, they fail to do that and ask the customer to route it in the pac file. Another suggestion is that in China, they do not have the proper setup; they used to have numerous problems with slowness and lack of premium circuits in China as well. That leads to multiple sites working slowly with latency-related issues. So the main issue is the ISP-related problems that need to be solved.

Read full review

Charles Slaustas

Information Technology Contractor at Insight global

Supports seamless authentication for users across multiple organizations and personal portals

The features I use in Cisco Duo include Duo Pushes to confirm my identity to the device, and eventually as MFA security was increased, I actually had to use exchange passcodes. Sometimes, I have to go into the site and get into Cisco Duo to retrieve the passcode, and many of them have been two-factor, where the sites send a passcode that I have to enter into Cisco Duo. It has been more of the latter. I have not seen issues with lagging or crashing on Cisco Duo's end; it was usually on the client end, often because someone set up a bad upgrade or there were connection issues with the Cisco Duo cloud through the administrative site.

Read full review

IgorPinter

Director at PULSEC

Zero-trust access has improved remote security and now simplifies cloud-based firewall management

Regarding the integration part for Prisma Access by Palo Alto Networks, the integration with identity providers is pretty much good. It is basically firewall as a service, so it performs well. I completed the integration without any issues. What Palo Alto Networks can do better for Prisma Access by Palo Alto Networks is probably to have the point of presence available in more locations. The point of presence from the Serbia region has the nearest POP in Frankfurt, which is an issue since it is your gateway—when you start browsing the internet, you go through a commercial connection in Germany. They definitely need to spread the service in other countries.

Read full review

Quotes from Members

We asked business professionals to review the solutions they use. Here are some excerpts of what they said:

Pros

"We were impressed by the solution's mental health function, which can detect if someone needs help. It scans what users are browsing and flags warning signs so we can check to see if they are okay. We've had to use it a couple of times."

"Its initial setup was straightforward."

"Technical support is pretty sharp and very responsive."

"I would rate the technical support of iboss a solid 10 without a shadow of a doubt."

"This product is solid, fairly easy to use, and reliable."

"As I mentioned, the return on investment is significant, as it saved our office locations' bandwidth because when you are working remotely at home, your internet traffic routes directly to iboss and will not go to your office building, saving bandwidth bottlenecks and ensuring that issues with our building internet circuits will not impact your internet connectivity because you are directly going to the iboss data center."

"iboss is definitely very good in terms of service."

"From a corporate perspective, I understand that it's important to keep the company data safe."

More iboss pros

"Cisco Duo is quick to deploy and easy to start."

"I can recommend Cisco Duo because it is very easy to accept and understand."

"From the front end, it's very fast and it hasn't missed a beat, so to say."

"Duo is a cloud-based product and it is a good product to maintain the security for the VPN."

"Compared with other products, Duo Security is excellent; I'm very impressed, and so are my colleagues."

"We like the different ways that it allows you to push notifications to people. It can do text, a phone call, and email. We liked the versatility for all of our different end-users, regardless of their level of understanding of the technology."

"The biggest return on investment for me when using Cisco Duo is gaining time, as I don't have to look at ten different MFA apps, and I know it will work."

"As a former employee, I think it's top-notch when it comes to protecting internal and external threats and preventing unauthorized access to the network."

More Cisco Duo pros

"The product's initial setup phase is simple."

"The protection for web-based applications was helpful for my colleagues who didn't want a particular application on their devices. And the non-web access protection was more for our developers because they were writing and building code on their computers. Prisma Access was able to protect them."

"The valuable features are that it is easy to use, easy to integrate, and is stable; it's scalable as well."

"It is geographically dispersed, and it sits on top of Google and AWS platforms. Therefore, you don't face the standard issues, such as latency or bandwidth issues, that you usually face in the case of on-prem data centers."

"Ultimately, Palo Alto is a very advanced firewall."

"Prisma Access protects all app traffic, so that users can gain access to all apps and that's very important because we need to be able to access everything. It also allows us to access non-web apps; anything internal that we need access to, we can access."

"They told us that this was the best thing we'd ever used."

"Palo Alto Firewall is one of the best firewalls in the world."

More Prisma Access by Palo Alto Networks pros

Cons

"The area I would like to see improvement in is the ability within the reporter to navigate directly to the content the user is traversing."

"The solution could be stronger on the integration side and offer more cloud applications like G Suite or Oracle."

"The area I would like to see improvement in is the ability with in the reporter to navigate directly to the content the user is traversing. It is kind of there, but it's not perfect. Quite frequently, I receive links that lead me to pages with error messages."

"The dashboards for local use could be better."

"The solution could be stronger on the integration side and offer more cloud applications like G Suite or Oracle."

"For zero trust implementation, we encountered complexity issues, especially with a large infrastructure company ExxonMobil."

"Its pricing could be better."

"The dashboards for local use could be better."

More iboss cons

"Regarding the pricing, setup costs, and licensing, I find that for some companies using Azure, they question why they should switch when they already have Microsoft Authenticator, which can make it commercially challenging when explaining why they need to transition to Cisco Duo."

"Cisco Duo could be improved if there were a way to make two-factor authentication quicker."

"Certain customers can not use this product because it is cloud-based."

"More automation and device insights would be helpful in achieving a seamless single pane of glass. Having the additional capability to streamline processes would also make things better."

"They can make authentication easier. It should be done in a shorter time. Sometimes, it can take a bit more time to get the answer on your phone. You have to wait a bit longer to get the SMS code and other things. There can be some internet or connection issues. They should make it faster because sometimes, it's urgent, and you need to access something as soon as possible."

"The pricing for Cisco Duo is kind of okay, but most of the time, your competitor is someone like Microsoft who gives it out for free with their offering, making it tough to argue with customers why they should spend additional dollars to also get Duo to improve their setup, but I think the pricing is fair."

"Areas that have room for improvement in Cisco Duo include pricing, as Cisco is quite expensive, and the fact that Cisco Duo relies heavily on external identity providers such as Active Directory or Entra ID and does not offer full identity lifecycle management on its own, which leads organizations to often pair Cisco Duo with another IAM solution for complete identity governance."

"Cisco Duo could be improved with more interesting rules or correlation rules between all the data sources such as Windows and Azure."

More Cisco Duo cons

"The Cloud Management application has room for improvement. There are a lot of things on the roadmap for that application; things are going to happen soon."

"I would like the solution to support a different type of authentication. We can't configure a secondary method for our portal."

"The BGP filtering options on Prisma Access should be improved."

"The Prisma Access could improve in terms of adding more machine learning and AI capabilities to automate tasks such as incident response."

"The solution needs to be more compatible with other solutions. This is specifically a problem for us when it comes to healthcare applications."

"When we deploy firewall rules via Panorama, we find it's a little bit slow. We have a global environment and might have 100 gateways or VPNs in the cloud. When we deploy something, it tries to deploy it one-by-one, and that can be slow."

"It is a managed firewall. When you run into issues and have to troubleshoot, there is a fair amount of restriction. You run into a couple of restrictions where you don't have any visibility on what is happening on the Palo Alto managed infrastructure, and you need to get on a call to get technical assistance from Palo Alto's technical support. You have to get them to work with you to fix the problem. I would definitely like them to work on the visibility into what happens inside Palo Alto's infrastructure. It is not about getting our hands onto their infrastructure to do troubleshooting or fixing problems; it is just about getting more visibility. This will help us in guiding technical support folks to the area where they need to work."

"I haven't seen any SD-WAN configuration capability. If Prisma Access would support SD-WAN, that would help... SD-WAN devices should be able to reach Prisma Access, and Palo Alto should support different, vendor-specific devices, not just Palo Alto devices, for SD-WAN configuration."

More Prisma Access by Palo Alto Networks cons

Pricing and Cost Advice

"We had the cost of purchasing a new appliance along with the implementation and licensing costs. However, the following year, the cost of just licensing was similar to what was paid the previous year for a new appliance along with the implementation and licensing costs."

"It is probably in line with other solutions, but I do not deal with the financial side."

"The overall pricing for iboss is very competitive and transparent."

"It is not expensive, and it is also not cheap. iboss is priced right in the sweet spot for the number of features it offers."

"It is expensive compared to one of its competitors."

"We have not priced the solution recently, but they were competitive with other vendors in the past."

"Our licensing fee is currently on an annual basis."

"Duo Security is free."

"My experience with pricing, setup costs, and licensing has been good, with no issues. I am pleased that the prices remained stable after Cisco acquired the solution."

"Cisco has the most expensive products because market leaders tend to charge a lot."

"Overall, the pricing is fair. Customers can wrap it into their Enterprise Agreement, making it easier for them to solve their issues."

"I believe the licensing model is excellent as it offers flexibility to our customers, allowing them to adopt a crawl, walk, or run approach."

"The pricing is pretty competitive. It's pretty cheap. Anybody can adopt it."

"Its price is reasonable. It is not highly expensive."

More Cisco Duo pricing and cost advice

"Compared to other products, the price is slightly high."

"Palo Alto is the Cadillac solution, so their products are pretty expensive. That's just the way it is. Their solution surpasses anything else. Cisco AnyConnect, Zscaler, and all of the other products don't compare. Palo Alto is the market leader with the most features. It saves you work, and you don't have to worry about it."

"Prisma Access by Palo Alto Networks is an expensive solution, especially when compared to other solutions like Cisco. There are no additional charges apart from the standard licensing costs attached to the solution."

"The pricing is very friendly. It's not confusing to figure out your workload and how much you'd be paying for the solution."

"It is a little expensive. Because it is one of the best in the market, it is a little bit more expensive than other vendors."

"It is not cheap. It is expensive. The good thing is that you are able to pay for what you need, but overall, it is not cheap. The pricing is not based on packages. You pay based on the features. If you want DLP, you only pay for DLP. They are very flexible. It is not cheap, but the licensing is flexible. There are no additional costs in addition to the standard licensing fees."

"It is pretty expensive. We have to balance the cost of some features. They need to work on some of the services and products, price-wise."

"Actually the solution is very expensive. I don't know the particulars since the purchasing team dealt with it."

More Prisma Access by Palo Alto Networks pricing and cost advice

See which vendors are best for you

Use our free recommendation engine to learn which ZTNA as a Service solutions are best for your needs.

See recommendations

890,071 professionals have used our research since 2012.

Top Industries

By visitors reading reviews

Financial Services Firm

11%

Computer Software Company

Manufacturing Company

Construction Company

Financial Services Firm

11%

Manufacturing Company

10%

Comms Service Provider

Educational Organization

Financial Services Firm

12%

Manufacturing Company

10%

Computer Software Company

Government

Company Size

By reviewers

Large Enterprise

Midsize Enterprise

Small Business

By reviewers
Company Size	Count
Small Business	7
Midsize Enterprise	7
Large Enterprise	8

By reviewers
Company Size	Count
Small Business	42
Midsize Enterprise	24
Large Enterprise	57

By reviewers
Company Size	Count
Small Business	24
Midsize Enterprise	21
Large Enterprise	27

Questions from the Community

What needs improvement with iboss?

iboss can increase security in cyberspace. I have heard they are doing DDoS filtering, but I am not certain if they a...

What is your primary use case for iboss?

I use iboss for corporate VPN and all the corporate VRF, with basically all user traffic proxying to the internet.

What is your experience regarding pricing and costs for iboss?

Regarding pricing, setup costs, and licensing, iboss is not cheap, and that's my only concern. There are cheaper alte...

How does Duo Security compare with Microsoft Authenticator?

We switched to Duo Security for identity verification. We’d been using a competitor but got the chance to evaluate Du...

What is your experience regarding pricing and costs for Duo Security?

I cannot speak to the financial planning of the organization, but I can confirm that Cisco Duo falls within the secur...

What needs improvement with Duo Security?

Areas that have room for improvement in Cisco Duo include pricing, as Cisco is quite expensive, and the fact that Cis...

What is the better solution - Prisma Access or Zscaler Private Access?

We looked into Prisma Access before choosing Zscaler Private Access (ZPA). Palo Alto’s Prisma Access is a secure ac...

What do you like most about Prisma Access by Palo Alto Networks?

The most valuable features of the solution are in the areas of the secure remote access it provides while also being ...

What is your experience regarding pricing and costs for Prisma Access by Palo Alto Networks?

From my experience, Palo Alto is more expensive compared to solutions like Netskope and Triscale.

Fortinet FortiGate vs iboss

Comparisons

Netskope vs iboss

Compared 9% of the time

Compared 8% of the time

FortiSASE vs iboss

Compared 7% of the time

Cisco Umbrella vs iboss

Compared 6% of the time

Zscaler Internet Access vs iboss

Compared 5% of the time

More iboss Competitors

Microsoft Entra ID vs Cisco Duo

Compared 8% of the time

Fortinet FortiAuthenticator vs Cisco Duo

Compared 6% of the time

Fortinet FortiToken vs Cisco Duo

Compared 4% of the time

Cisco Identity Services Engine (ISE) vs Cisco Duo

Compared 3% of the time

Yubico YubiKey vs Cisco Duo

Compared 3% of the time

More Cisco Duo Competitors

Netskope vs Prisma Access by Palo Alto Networks

Compared 11% of the time

Zscaler Internet Access vs Prisma Access by Palo Alto Networks

Compared 7% of the time

FortiSASE vs Prisma Access by Palo Alto Networks

Compared 7% of the time

Cato SASE Cloud Platform vs Prisma Access by Palo Alto Networks

Compared 6% of the time

Prisma SD-WAN vs Prisma Access by Palo Alto Networks

Compared 2% of the time

More Prisma Access by Palo Alto Networks Competitors

Product Reports

iboss

Download iboss product report

Cisco Duo

Download Cisco Duo product report

Prisma Access by Palo Alto Networks

Download Prisma Access by Palo Alto Networks product report

Prisma Access by Palo Alto Networks report

Also Known As

iBoss Cloud Platform

Duo Security

Palo Alto Networks Prisma Access, Prisma Access, GlobalProtect, Palo Alto GlobalProtect Mobile Security Manager, Prisma SaaS by Palo Alto Networks, Prisma Access

Overview

Iboss offers a comprehensive cloud-based security platform valued for its scalability and autonomous features, ensuring robust security with easy deployment and management capabilities.

Renowned for its robust security architecture, Iboss integrates seamlessly within diverse networks, delivering efficient granular filtering and advanced content categorization. Its single pane of glass console provides ease of management, allowing rapid scalability suitable for rapidly deploying environments. Operates in BYOD setups due to inline filtering without device installation. Integration with cloud-based applications enhances user control, and features like SASE, SSL inspection, and ChatGPT risk protection stand as highlights. Despite its strengths, users have pointed out areas for enhancement like direct navigation in reports, SSL decryption, and better cloud integration while having room to improve data loss prevention.

What are the most important features of Iboss?

Scalability: Supports rapid deployment across diverse networks.
SASE: A consolidated approach to secure access.
SSL Inspection: Ensures safe data transmission.
Granular Filtering: Detailed control over accessible content.
Single Pane Management: Unifies control through a centralized console.

What benefits should users consider in reviews?

Cost-effectiveness: Offers competitive pricing with robust features.
Autonomous Operation: Reduces management overhead.
Responsive Support: Provides assistance when needed.
Flexible Deployment: Available for both cloud and on-premises environments.

The usage of Iboss spans educational institutions, specifically K-12, to enforce internet policies, protect data, and support remote work environments. It provides web filtering and security frameworks to ensure safe browsing. Its platform-as-a-service model offers flexibility for both cloud-based and on-premises requirements, integrating seamlessly to deliver enhanced security features suitable for various deployment needs including zero trust, CASB, and network security for work-from-home setups.

iboss

Cisco Duo is a cloud-based identity security platform safeguarding critical resources for any user and device worldwide. Known for its ease of use, Duo offers seamless protection across multi-cloud, hybrid, and on-premises environments.

Cisco Duo is designed to secure access with identity-first protection and provides extensive visibility throughout an organization's identity ecosystem. Offering multi-factor authentication, Duo facilitates easy integration and management, allowing teams to protect data effectively on VPNs, applications, and networks. Its single-pane management improves security processes while enhancing trust, making it suitable for diverse IT infrastructures.

What are the key features of Cisco Duo?

Multi-factor Authentication: Strengthens user verification with multiple methods.
Push Notifications: Simplifies authentication with quick approvals.
Single Sign-On: Enhances convenience by allowing one set of credentials.
VPN Access: Secures remote connections with reliable authentication.
User Activity Visibility: Offers comprehensive insights into access patterns.

Which benefits and ROI should users consider?

Quick Deployment: Facilitates rapid integration within existing systems.
Effective Management: Streamlines IT operations with centralized control.
Regulatory Compliance: Aids in meeting industry standards for data protection.
Enhanced Trust: Strengthens security posture across networks.
User-friendly Approach: Simplifies authentication for non-technical users.

In industries like education and finance, Cisco Duo is widely employed to secure multi-factor authentication across platforms such as email, databases, and servers. Its integration capabilities with Microsoft 365, Active Directory, and VPNs like AnyConnect are instrumental in verifying user identities using mobile apps or OTPs, catering effectively to both remote and on-premise environments.

Cisco

Prisma Access by Palo Alto Networks provides consistent security for all users and applications across your remote networks. Prisma Access grants users safe access to the cloud and data center applications and the internet as well. In addition, the solution combines all of your security and networking capabilities into a single cloud-delivered platform, enabling flexible hybrid workforces.

Prisma Access can be managed two ways:

Cloud Managed
Panorama Managed

Prisma Access delivers both networking and security services, including:

SD-WAN
VPN
Zero Trust network access (ZTNA)
Quality of service (QoS)
Clean Pipe
Firewall as a service (FWaaS)
DNS Security
Threat Prevention
Cloud secure web gateway (SWG)
Data loss prevention (DLP)
Cloud access security broker (CASB)

Prisma Access by Palo Alto Networks Features

Prisma Access by Palo Alto Networks has many valuable key features including: App-ID, User-ID, Device-ID, SSL Decryption, Dynamic User Group (DUG) Monitoring, AI/ML-Based Detection, IoT Security, Reporting, URL Filtering, Enterprise Data Loss Prevention (DLP), Digital Experience Monitoring (DEM)*, Logging, Policy Automation, Intrusion Prevention System (IPS), and many more.

Prisma Access by Palo Alto Networks Benefits

Some of the benefits of using Prisma Access by Palo Alto Networks include:

Security: Prisma Access gives you consistent security to protect against cyberattacks, with enforcement of policy at every location. By implementing Prisma Access, you also gain protection that works to prevent known and unknown malware, exploits, credential theft, command and control, and many other attack vectors across all ports and protocols.
Global connectivity: Prisma Access provides global coverage through use of its connectivity layer.
Scalability: With Prisma Access, scaling is automatically managed and is scalable, flexible, and agile.
Instant deployment: Deployment is fast, eliminating wasted time that may otherwise be associated with setting up a solution, operating it, or shipping hardware in order to get started.

Reviews from Real Users

Below are some reviews and helpful feedback written by Microsoft Azure Synapse Analytics

users who are currently using the solution.

PeerSpot user Partha D., Global Network Tech Lead at a computer software company, speaks about his experience using the product, saying, "It protects all app traffic so that users can gain access to all apps. Unlike other solutions that only work from ports 80 and 443, which are predominantly for web traffic, Prisma Access covers all protocols and works on all traffic patterns... The most sophisticated attacks can arise from sources that are not behind 80/443."

Tejas J., a Sr. Cloud Security Architect at a computer software company, mentions that "it is geographically dispersed, and it sits on top of Google and AWS platforms. Therefore, you don't face the standard issues, such as latency or bandwidth issues, that you usually face in the case of on-prem data centers.”

Another PeerSpot reviewer, Max I., Associate Director at Cognizant, comments that "Security is absolutely spot-on, really top-notch. It's the result of all the components that come together, such as the HIP [Host Information Profile] and components like Forcepoint, providing end-user content inspection, and antivirus. It incorporates DLP features and that's fantastic because Prisma Access makes sure that all of the essential prerequisites are in place before a user can log in or can be tunneled into."

Palo Alto Networks

Sample Customers

More than 4,000 global enterprises trust the iboss Cloud Platform to support their modern workforces, including a large number of Fortune 50 companies.

Information Not Available

Concord Hospital, State of Colorado, Essilor International, RheinLand Versicherungsgruppe, University of Westminster, Universidade Nove de Julho, SPAR Austria, CAME Group, ZipRealty, Greenhill & Co., IKT Agder, Aviva Stadium, Animal Logic, Management & Training Corporation, Brigham Young University Hawaii, School District of Chilliwack

Cisco Duo vs. Prisma Access by Palo Alto Networks