Cisco Duo vs Prisma Access by Palo Alto Networks comparison

Cisco Duo vs. Prisma Access by Palo Alto Networks

Download the complete report

Helped 886,011 peers since 2012

Review summaries and opinions

We asked business professionals to review the solutions they use. Here are some excerpts of what they said:

Categories and Ranking

iboss

Mindshare comparison

As of April 2026, in the ZTNA as a Service category, the mindshare of iboss is 2.4%, up from 1.7% compared to the previous year. The mindshare of Cisco Duo is 2.3%, down from 2.3% compared to the previous year. The mindshare of Prisma Access by Palo Alto Networks is 11.3%, down from 15.4% compared to the previous year. It is calculated based on PeerSpot user engagement data.

ZTNA as a Service Mindshare Distribution
Product	Mindshare (%)
Prisma Access by Palo Alto Networks	11.3%
Cisco Duo	2.3%
iboss	2.4%
Other	84.0%

ZTNA as a Service

Featured Reviews

reviewer2701851

Managing Director

Enhances web security with a single pane of glass and flexible deployment

I don't see any need for improvement; one of the really good things about iboss as a company is that they listen to customer feedback. I have suggested enhancements, and they are responsive, making changes for the better, and they do a lot of testing. To improve iboss, although we haven't used it, we considered the VPN solution that comes with the highest tier licensing, which includes DLP and various other add-ons. We prefer using another product which automatically logs you back onto your network when turning on your PC. With iboss, the connection is manual, which doesn't meet our needs. Additionally, sizing can be tricky because, although the initial recommendations may seem adequate, actual usage may require more gateways than anticipated.

Read full review

Charles Slaustas

Information Technology Contractor at Insight global

Supports seamless authentication for users across multiple organizations and personal portals

The features I use in Cisco Duo include Duo Pushes to confirm my identity to the device, and eventually as MFA security was increased, I actually had to use exchange passcodes. Sometimes, I have to go into the site and get into Cisco Duo to retrieve the passcode, and many of them have been two-factor, where the sites send a passcode that I have to enter into Cisco Duo. It has been more of the latter. I have not seen issues with lagging or crashing on Cisco Duo's end; it was usually on the client end, often because someone set up a bad upgrade or there were connection issues with the Cisco Duo cloud through the administrative site.

Read full review

IgorPinter

Director at PULSEC

Zero-trust access has improved remote security and now simplifies cloud-based firewall management

Regarding the integration part for Prisma Access by Palo Alto Networks, the integration with identity providers is pretty much good. It is basically firewall as a service, so it performs well. I completed the integration without any issues. What Palo Alto Networks can do better for Prisma Access by Palo Alto Networks is probably to have the point of presence available in more locations. The point of presence from the Serbia region has the nearest POP in Frankfurt, which is an issue since it is your gateway—when you start browsing the internet, you go through a commercial connection in Germany. They definitely need to spread the service in other countries.

Read full review

Quotes from Members

We asked business professionals to review the solutions they use. Here are some excerpts of what they said:

Pros

"We were impressed by the solution's mental health function, which can detect if someone needs help. It scans what users are browsing and flags warning signs so we can check to see if they are okay. We've had to use it a couple of times."

"Iboss is a solution that prevents advanced persistent threats, and has a zero tolerance for attacks."

"iboss is easy to use despite its complexity. Multiple engineers manage it, but it's significantly more straightforward to administer than traditional VPNs and web proxies."

"From a use-case scenario, what I like the most is the plug-in. I like the fact that we can do the filtering of these devices offsite independent of the network they are connected to, and we do not have to have traffic coming back inside our network."

"Its initial setup was straightforward."

"iboss has significantly lowered the number of security incidents. It is crazy how much it blocks and how much it is aware of the outside danger."

"iboss is definitely very good in terms of service."

"The solution has massively improved our security posture, giving us full visibility into what our staff does online."

More iboss pros

"My overall rating for the solution is ten out of ten."

"Cisco Duo benefits my organization because we do not have too many logins since everything is in one place and we can use Cisco Duo for VPN, applications, and cloud solutions."

"It is very easy. Having just wrapped up my tenure at Cisco, it was used day in and day out for security. It was always easy to log in and not have to worry about logging in multiple times."

"The anti-phishing feature is the most valuable."

"Duo Security simplified establishing trusted connections, making it easier to implement distributed network solutions."

"Clients I implemented Cisco Duo at immediately feel more confident in their security environment, and we can see a lot of illegal attempts to get in, giving me faith in the product."

"My advice to others looking into using Cisco Duo is that it is a great product, and I recommend it for everyone, specifically for those using Cisco Secure Client."

"We're working remotely. It helps us keep people more safe. Its adoption has been fine. I like the fact that you can bypass it if you need to because there are situations where the internet doesn't work, etc."

More Cisco Duo pros

"The most valuable feature is the ability to change the gateway. For example, if there's a problem with a specific region or vendor, we can make modifications. The solution is scalable, and there are different gateways that can be created depending on the demand."

"We're now able to go after contracts that require a Zero Trust solution and Prisma's other technology solutions."

"If you are planning on using the SASE model for your organization, I would recommend Palo Alto Prisma Access."

"It protects all app traffic so that users can gain access to all apps. Unlike other solutions that only work from ports 80 and 443, which are predominantly for web traffic, Prisma Access covers all protocols and works on all traffic patterns... The most sophisticated attacks can arise from sources that are not behind 80/443."

"The most valuable feature is the ability to join your network and provide access through the VPN."

"It's much faster and more secure than legacy solutions. It is also quite stable and scalable as well. We are able to see all the traffic in one place."

"My advice for those who are looking for a SaaS solution is to use Prisma; it's one of the best solutions in the industry at the moment, simpler and really easy to deploy, with a very trustworthy support team from Palo Alto."

"Overall, the security provided by Prisma Access is top-notch."

More Prisma Access by Palo Alto Networks pros

Cons

"File integrity monitoring would be very advantageous as an additional feature."

"Our biggest problem with their service was it did not recognize the device and filtering did not always work correctly."

"I'd like to see them accelerate development on the security side, particularly around data loss prevention."

"If they could implement an extra security layer preventing access to iboss from the open internet, it would be great."

"The solution could be stronger on the integration side and offer more cloud applications like G Suite or Oracle."

"The dashboards for local use could be better."

"The reporting feature needs improvement."

"Fold that in with the risk intelligence they're getting from all of the different subscriptions they are a part of. Now, these security companies subscribe to things like emerging threats, databases, etc. You can fold all this intelligence to decide what's happening on an endpoint. I would love to see them start moving into that space. That would compete directly with Microsoft. Maybe that's why they haven't. Having that ability native within the solution would be great. The other area in which I would love to see improvement is more detailed descriptions of why they block websites."

More iboss cons

"To improve Cisco Duo, the biggest consideration is the licensing standpoint; the most common issue I've found is customers not setting up the Active Directory sync properly, leading to inflated licensing usage when they try to delete inactive users that are still being charged."

"For the back-end, there could be a few more security features applied."

"Cisco Duo did not help reduce the cost of the overall authentication method that we have in our company; instead, it increased, obviously."

"We found it difficult to integrate it into our broader product family of Microsoft tools and other applications used across our organization."

"Technical support seems to be lacking. It takes a long time for them to come back to the customer."

"While two-factor authentication with mobile devices provides a high level of security, it's still not foolproof, as someone could potentially steal your phone. It would be beneficial to have information about the authentication location."

"Cisco Duo is a modern product that does not support older applications, lacking backward compatibility. It should work on supporting legacy applications and legacy approaches."

"I think that the dashboard needs to be improved."

More Cisco Duo cons

"The user interface could be better. They need to work a little bit on the console. It is similar to their firewalls but not exactly. They need to clean it up a bit."

"Dependencies of applications sometimes is a bit confusing."

"There is room for improvement in the multi-environment visibility, especially around containers."

"Palo Alto Prisma 10 came out over a year ago. Palo Alto added this identity management feature. The legacy way Palo Alto selected which user is sitting on an IP address it passes through has been clunky."

"I haven't seen any SD-WAN configuration capability. If Prisma Access would support SD-WAN, that would help."

"Its integration with non-Palo Alto products can be improved. Currently, it is easy to integrate it with other Palo Alto products such as Cortex XDR. It integrates well with other Palo Alto products. A major part of our network is based on Palo Alto products, but for those companies that use multi-vendor products in their infrastructure, Palo Alto should optimize the integration of Prisma Access with the network devices from other vendors."

"One thing that would help is if we could get a guide. With Cisco, for example, you can just type the problem regarding your Cisco product and you will easily get your solution. In Palo Alto, however, it's not easy to find the solutions."

"It would be nice to manage Prisma Access through the cloud instead of through Panorama. You can use the cloud version to monitor Prisma Access, but it doesn't have all the features yet, and it's not 100% done."

More Prisma Access by Palo Alto Networks cons

Pricing and Cost Advice

"It is probably in line with other solutions, but I do not deal with the financial side."

"We have not priced the solution recently, but they were competitive with other vendors in the past."

"It is expensive compared to one of its competitors."

"We had the cost of purchasing a new appliance along with the implementation and licensing costs. However, the following year, the cost of just licensing was similar to what was paid the previous year for a new appliance along with the implementation and licensing costs."

"The overall pricing for iboss is very competitive and transparent."

"It is not expensive, and it is also not cheap. iboss is priced right in the sweet spot for the number of features it offers."

"From a reseller perspective, it's still challenging to explain the whole license strategy to a client, so we really have to be ahead of that for all the true forward conversations."

"I only need the solution for IT staff, which makes it relatively cheap. If I deployed it for the whole company, it would be costly, so it depends on the number of users. Duo Security is affordable compared to other products in the segment."

"Price-wise, the solution has been very, very reasonable...Licensing is the last thing I think about Duo Security because it's so easy, and I had no problems with it."

"The pricing was a lot more than what we were paying for our previous solution."

"I am not aware of the pricing. There are two departments, and I don't have any information about them."

"Price wise, it's not cheap, but it's not expensive at all either. It's in the middle."

"I haven't seen any information on the pricing in four years, so I can't comment on that."

"With regard to pricing, for a small business buying a one off, it's pretty expensive. If it's an enterprise that has thousands of employees, however, it's really nothing to protect your data because if your network goes down or it's breached, you're losing millions of dollars every minute. When it comes to a large enterprise, it's priced where it should be because you're talking business to business. You're not talking business to consumer."

More Cisco Duo pricing and cost advice

"Prisma Access is a little bit expensive."

"The pricing for this solution is on the higher end."

"The licensing cost is about 18,000 euros."

"Based on what I have heard from others, it is a pricey solution as compared to its peers, but I am not sure. However, considering the features that it offers, it is a break-even point. You get whatever they are promising."

"The licensing fees are paid on a yearly basis and for what we get, the price is good."

"It is not cheap. It is expensive. The good thing is that you are able to pay for what you need, but overall, it is not cheap. The pricing is not based on packages. You pay based on the features. If you want DLP, you only pay for DLP. They are very flexible. It is not cheap, but the licensing is flexible. There are no additional costs in addition to the standard licensing fees."

"This is not an expensive product and everything is included with one license."

"The initial prices of Prisma Access were okay. But as soon as you start deploying Palo Alto gear, the support prices and the recurring prices, which are the major operational costs, tend to increase over time."

More Prisma Access by Palo Alto Networks pricing and cost advice

See which vendors are best for you

Use our free recommendation engine to learn which ZTNA as a Service solutions are best for your needs.

See recommendations

886,011 professionals have used our research since 2012.

Top Industries

By visitors reading reviews

Financial Services Firm

11%

Computer Software Company

Manufacturing Company

Construction Company

Financial Services Firm

11%

Manufacturing Company

10%

Comms Service Provider

Computer Software Company

Financial Services Firm

12%

Manufacturing Company

10%

Computer Software Company

Government

Company Size

By reviewers

Large Enterprise

Midsize Enterprise

Small Business

By reviewers
Company Size	Count
Small Business	6
Midsize Enterprise	7
Large Enterprise	6

By reviewers
Company Size	Count
Small Business	42
Midsize Enterprise	24
Large Enterprise	57

By reviewers
Company Size	Count
Small Business	24
Midsize Enterprise	21
Large Enterprise	27

Questions from the Community

What needs improvement with iboss?

For zero trust implementation, we encountered complexity issues, especially with a large infrastructure company Exxon...

What is your primary use case for iboss?

Previously when I used iboss, we did the POC for iboss for ExxonMobil. Four or five people wanted to move from our ol...

What is your experience regarding pricing and costs for iboss?

Regarding pricing, setup costs, and licensing, iboss is not cheap, and that's my only concern. There are cheaper alte...

How does Duo Security compare with Microsoft Authenticator?

We switched to Duo Security for identity verification. We’d been using a competitor but got the chance to evaluate Du...

What is your experience regarding pricing and costs for Duo Security?

I cannot speak to the financial planning of the organization, but I can confirm that Cisco Duo falls within the secur...

What needs improvement with Duo Security?

Areas that have room for improvement in Cisco Duo include pricing, as Cisco is quite expensive, and the fact that Cis...

What is the better solution - Prisma Access or Zscaler Private Access?

We looked into Prisma Access before choosing Zscaler Private Access (ZPA). Palo Alto’s Prisma Access is a secure ac...

What do you like most about Prisma Access by Palo Alto Networks?

The most valuable features of the solution are in the areas of the secure remote access it provides while also being ...

What is your experience regarding pricing and costs for Prisma Access by Palo Alto Networks?

From my experience, Palo Alto is more expensive compared to solutions like Netskope and Triscale.

Fortinet FortiGate vs iboss

Comparisons

Netskope vs iboss

Compared 9% of the time

Compared 8% of the time

FortiSASE vs iboss

Compared 7% of the time

Cisco Umbrella vs iboss

Compared 6% of the time

Zscaler Internet Access vs iboss

Compared 5% of the time

More iboss Competitors

Microsoft Entra ID vs Cisco Duo

Compared 8% of the time

Fortinet FortiAuthenticator vs Cisco Duo

Compared 6% of the time

Fortinet FortiToken vs Cisco Duo

Compared 4% of the time

Yubico YubiKey vs Cisco Duo

Compared 4% of the time

Cisco Identity Services Engine (ISE) vs Cisco Duo

Compared 4% of the time

More Cisco Duo Competitors

Netskope vs Prisma Access by Palo Alto Networks

Compared 12% of the time

Zscaler Internet Access vs Prisma Access by Palo Alto Networks

Compared 8% of the time

FortiSASE vs Prisma Access by Palo Alto Networks

Compared 7% of the time

Cato SASE Cloud Platform vs Prisma Access by Palo Alto Networks

Compared 6% of the time

Fortinet FortiGate vs Prisma Access by Palo Alto Networks

Compared 2% of the time

More Prisma Access by Palo Alto Networks Competitors

Product Reports

iboss

Download iboss product report

Download Cisco Duo product report

Cisco Duo

April 2026

Prisma Access by Palo Alto Networks

Download Prisma Access by Palo Alto Networks product report

Prisma Access by Palo Alto Networks report

Also Known As

iBoss Cloud Platform

Duo Security

Palo Alto Networks Prisma Access, Prisma Access, GlobalProtect, Palo Alto GlobalProtect Mobile Security Manager, Prisma SaaS by Palo Alto Networks, Prisma Access

Overview

Iboss offers a comprehensive cloud-based security platform valued for its scalability and autonomous features, ensuring robust security with easy deployment and management capabilities.

Renowned for its robust security architecture, Iboss integrates seamlessly within diverse networks, delivering efficient granular filtering and advanced content categorization. Its single pane of glass console provides ease of management, allowing rapid scalability suitable for rapidly deploying environments. Operates in BYOD setups due to inline filtering without device installation. Integration with cloud-based applications enhances user control, and features like SASE, SSL inspection, and ChatGPT risk protection stand as highlights. Despite its strengths, users have pointed out areas for enhancement like direct navigation in reports, SSL decryption, and better cloud integration while having room to improve data loss prevention.

What are the most important features of Iboss?

Scalability: Supports rapid deployment across diverse networks.
SASE: A consolidated approach to secure access.
SSL Inspection: Ensures safe data transmission.
Granular Filtering: Detailed control over accessible content.
Single Pane Management: Unifies control through a centralized console.

What benefits should users consider in reviews?

Cost-effectiveness: Offers competitive pricing with robust features.
Autonomous Operation: Reduces management overhead.
Responsive Support: Provides assistance when needed.
Flexible Deployment: Available for both cloud and on-premises environments.

The usage of Iboss spans educational institutions, specifically K-12, to enforce internet policies, protect data, and support remote work environments. It provides web filtering and security frameworks to ensure safe browsing. Its platform-as-a-service model offers flexibility for both cloud-based and on-premises requirements, integrating seamlessly to deliver enhanced security features suitable for various deployment needs including zero trust, CASB, and network security for work-from-home setups.

iboss

Cisco Duo is a cloud-based identity security platform safeguarding critical resources for any user and device worldwide. Known for its ease of use, Duo offers seamless protection across multi-cloud, hybrid, and on-premises environments.

Cisco Duo is designed to secure access with identity-first protection and provides extensive visibility throughout an organization's identity ecosystem. Offering multi-factor authentication, Duo facilitates easy integration and management, allowing teams to protect data effectively on VPNs, applications, and networks. Its single-pane management improves security processes while enhancing trust, making it suitable for diverse IT infrastructures.

What are the key features of Cisco Duo?

Multi-factor Authentication: Strengthens user verification with multiple methods.
Push Notifications: Simplifies authentication with quick approvals.
Single Sign-On: Enhances convenience by allowing one set of credentials.
VPN Access: Secures remote connections with reliable authentication.
User Activity Visibility: Offers comprehensive insights into access patterns.

Which benefits and ROI should users consider?

Quick Deployment: Facilitates rapid integration within existing systems.
Effective Management: Streamlines IT operations with centralized control.
Regulatory Compliance: Aids in meeting industry standards for data protection.
Enhanced Trust: Strengthens security posture across networks.
User-friendly Approach: Simplifies authentication for non-technical users.

In industries like education and finance, Cisco Duo is widely employed to secure multi-factor authentication across platforms such as email, databases, and servers. Its integration capabilities with Microsoft 365, Active Directory, and VPNs like AnyConnect are instrumental in verifying user identities using mobile apps or OTPs, catering effectively to both remote and on-premise environments.

Cisco

Prisma Access by Palo Alto Networks provides consistent security for all users and applications across your remote networks. Prisma Access grants users safe access to the cloud and data center applications and the internet as well. In addition, the solution combines all of your security and networking capabilities into a single cloud-delivered platform, enabling flexible hybrid workforces.

Prisma Access can be managed two ways:

Cloud Managed
Panorama Managed

Prisma Access delivers both networking and security services, including:

SD-WAN
VPN
Zero Trust network access (ZTNA)
Quality of service (QoS)
Clean Pipe
Firewall as a service (FWaaS)
DNS Security
Threat Prevention
Cloud secure web gateway (SWG)
Data loss prevention (DLP)
Cloud access security broker (CASB)

Prisma Access by Palo Alto Networks Features

Prisma Access by Palo Alto Networks has many valuable key features including: App-ID, User-ID, Device-ID, SSL Decryption, Dynamic User Group (DUG) Monitoring, AI/ML-Based Detection, IoT Security, Reporting, URL Filtering, Enterprise Data Loss Prevention (DLP), Digital Experience Monitoring (DEM)*, Logging, Policy Automation, Intrusion Prevention System (IPS), and many more.

Prisma Access by Palo Alto Networks Benefits

Some of the benefits of using Prisma Access by Palo Alto Networks include:

Security: Prisma Access gives you consistent security to protect against cyberattacks, with enforcement of policy at every location. By implementing Prisma Access, you also gain protection that works to prevent known and unknown malware, exploits, credential theft, command and control, and many other attack vectors across all ports and protocols.
Global connectivity: Prisma Access provides global coverage through use of its connectivity layer.
Scalability: With Prisma Access, scaling is automatically managed and is scalable, flexible, and agile.
Instant deployment: Deployment is fast, eliminating wasted time that may otherwise be associated with setting up a solution, operating it, or shipping hardware in order to get started.

Reviews from Real Users

Below are some reviews and helpful feedback written by Microsoft Azure Synapse Analytics

users who are currently using the solution.

PeerSpot user Partha D., Global Network Tech Lead at a computer software company, speaks about his experience using the product, saying, "It protects all app traffic so that users can gain access to all apps. Unlike other solutions that only work from ports 80 and 443, which are predominantly for web traffic, Prisma Access covers all protocols and works on all traffic patterns... The most sophisticated attacks can arise from sources that are not behind 80/443."

Tejas J., a Sr. Cloud Security Architect at a computer software company, mentions that "it is geographically dispersed, and it sits on top of Google and AWS platforms. Therefore, you don't face the standard issues, such as latency or bandwidth issues, that you usually face in the case of on-prem data centers.”

Another PeerSpot reviewer, Max I., Associate Director at Cognizant, comments that "Security is absolutely spot-on, really top-notch. It's the result of all the components that come together, such as the HIP [Host Information Profile] and components like Forcepoint, providing end-user content inspection, and antivirus. It incorporates DLP features and that's fantastic because Prisma Access makes sure that all of the essential prerequisites are in place before a user can log in or can be tunneled into."

Palo Alto Networks

Sample Customers

More than 4,000 global enterprises trust the iboss Cloud Platform to support their modern workforces, including a large number of Fortune 50 companies.

Information Not Available

Concord Hospital, State of Colorado, Essilor International, RheinLand Versicherungsgruppe, University of Westminster, Universidade Nove de Julho, SPAR Austria, CAME Group, ZipRealty, Greenhill & Co., IKT Agder, Aviva Stadium, Animal Logic, Management & Training Corporation, Brigham Young University Hawaii, School District of Chilliwack

Cisco Duo vs. Prisma Access by Palo Alto Networks