Try our new research platform with insights from 80,000+ expert users

Cisco Web Security Appliance vs Prisma Access by Palo Alto Networks comparison

Sponsored
 

Comparison Buyer's Guide

Executive SummaryUpdated on Dec 4, 2024

Review summaries and opinions

We asked business professionals to review the solutions they use. Here are some excerpts of what they said:
 

Categories and Ranking

iboss
Sponsored
Ranking in Secure Web Gateways (SWG)
10th
Average Rating
8.4
Reviews Sentiment
7.1
Number of Reviews
17
Ranking in other categories
Internet Security (4th), Web Content Filtering (3rd), Cloud Access Security Brokers (CASB) (8th), ZTNA as a Service (11th), Secure Access Service Edge (SASE) (10th)
Cisco Web Security Appliance
Ranking in Secure Web Gateways (SWG)
14th
Average Rating
7.8
Reviews Sentiment
6.7
Number of Reviews
31
Ranking in other categories
No ranking in other categories
Prisma Access by Palo Alto ...
Ranking in Secure Web Gateways (SWG)
3rd
Average Rating
8.4
Reviews Sentiment
7.1
Number of Reviews
63
Ranking in other categories
Cloud Access Security Brokers (CASB) (1st), Enterprise Infrastructure VPN (5th), ZTNA as a Service (2nd), Secure Access Service Edge (SASE) (1st)
 

Mindshare comparison

As of May 2025, in the Secure Web Gateways (SWG) category, the mindshare of iboss is 2.1%, up from 1.7% compared to the previous year. The mindshare of Cisco Web Security Appliance is 2.5%, down from 2.9% compared to the previous year. The mindshare of Prisma Access by Palo Alto Networks is 11.1%, up from 9.4% compared to the previous year. It is calculated based on PeerSpot user engagement data.
Secure Web Gateways (SWG)
 

Featured Reviews

Matt Crockford - PeerSpot reviewer
It's easy to roll out, and their understanding of our business made it seamless
One aspect we value about iboss is its simplicity. Their customer service is brilliant, and they are super responsive and knowledgeable. It's easy to roll out, and their understanding of our business made it seamless. We were impressed by the solution's mental health function, which can detect if someone needs help. It scans what users are browsing and flags warning signs so we can check to see if they are okay. We've had to use it a couple of times. The user interface is highly intuitive. Our IT team picked it up with minimal training. It's arranged so that it's easy to find where things are. Another advantage is the single pane of glass console, which gives you visibility into what's happening. We're not fully there yet because we haven't implemented zero trust, but we're excited about the possibilities from the demos we've seen. We launched a POC of iboss' ChatGPT Risk Protection feature two weeks ago. AI is a great tool, but you need to be careful what you put into it. My biggest fear is employees inputting sensitive corporate information or customer PII data into one of these chatbots. I was impressed by our trial of the feature. It's exactly what we wanted. Now, when a user goes to ChatGPT, there's a banner warning them not to share information, and we can block conversations containing customer data like bank details and email addresses. I don't want to stop people from using it, but we need visibility. We've only tried it on a test group of 15 people. You can configure it to look for specific keywords or integrate it with your DLP policy if you have that configured
IgnitiusMolepo - PeerSpot reviewer
Ensures security for remote workers
The Cisco Web Security Appliance provides DLP to organizations. It helps prevent the unauthorized transmission of sensitive information by blocking such attempts. Additionally, it safeguards against malware attacks, particularly on websites not authorized by our company. Its role in protecting us from malware is pivotal. The organization itself handles the configuration and management of Cisco Web Security Appliance. Cisco assists in deploying and configuring the appliance and managing all associated services. Integrating the Cisco Web Security Appliance with other solutions is quite challenging. For instance, when we tried to integrate Netscape KSP, we encountered difficulties retrieving logs. Additionally, our solution failed to interact with the Web Security Appliance. Overall, the integration process remains problematic, hindering the effectiveness of our security infrastructure. We have both the cloud version and the on-premises version. For clients who require data sovereignty, we offer the on-premises version, which includes a data sovereignty tool. This allows them to enforce policies that prevent the transfer of logs to third-party data centres, ensuring compliance with their country's regulations. Overall, I rate the solution a nine out of ten.
Partha Dash - PeerSpot reviewer
Makes us part of a bigger security ecosystem with updates taken care of for us, but pricing and support need work
There are definitely a number of things that could be improved. One of them is geographic coverage. China is still an issue because the solution does not operate there properly due to government regulations. I believe Palo Alto is trying pretty hard to get into partnerships with Alibaba and other cloud providers, but they do not have the same compelling offering in China that they have in the rest of the world. Businesses that are operating within China have to be very sure to evaluate the solution before making a buying decision. It is not an issue with Palo Alto, rather it is predominantly the result of government rules, but it's something that Palo Alto needs to work on. There is also room for improvement when it comes to latency in a couple of regions, including India and South America. They might have to increase their presence in those locations and come up with more modern cloud architectures. The third area is that, while Palo Alto has understood the essence of building capabilities around cloud technology and have come up with a CASB offering, that is a very new product. There are other companies that have better offerings for understanding cloud applications and have more graceful controls. That's something that Palo Alto needs to work on.

Quotes from Members

We asked business professionals to review the solutions they use. Here are some excerpts of what they said:
 

Pros

"First of all, the security policies are essential. I do not have to rely solely on Active Directory for our users."
"The solution has massively improved our security posture, giving us full visibility into what our staff does online."
"Its initial setup was straightforward."
"Content filtering is the most useful feature of iboss."
"The security aspect of the solution, particularly the malware behind it, is excellent. That's something that really helped us out. It's not just a simple proxy that just blocks the insights of potential threats that come on behind it. They do malware detection and that helps us a lot."
"iboss is among the few products providing inline filtering where no application is needed on the device. It operates on the network side and is not device-based. This feature was one of the main reasons why we stayed with them for so long."
"The console is cloud-based, which is something I really appreciate."
"Because of iboss, I did not have to assign web filtering tasks to my techs on a daily basis."
"Cisco Web Security Appliance has very good security benefits for any company and is easy to integrate."
"The most valuable feature of Cisco Web Security Appliance is the provided anti-malware functionality and URL categorization. I can block access to malicious websites. 99 percent of the cases are related to a malicious website. If I cannot browse those malicious websites, then we are 99 percent protected."
"The features I like most are the DLP functionality for web security and malware protection."
"The tool has good Umbrella DNS security."
"The best feature of Cisco Web Security Appliance is its policy framing. It also has a good UI and it can handle traffic well. Cisco Web Security Appliance is a good product."
"Cisco Web Security Appliance is user-friendly and easy to manage. It protects your environment while accessing the internet."
"The initial setup is straightforward."
"What we liked best about it was the ability to apply policy to either a user ID or an IP-based network."
"The features I find most valuable is WildFire, user integration, and the basic technology features."
"A feature I've found very helpful is run time security because most of the products on the market will look at security during the build time, and they don't really look at what happens once you're going into production."
"We're now able to go after contracts that require a Zero Trust solution and Prisma's other technology solutions."
"Its frontend is user-friendly. It is easy to use for us."
"I like it because it's very easy to use. You install the client and you have to know your gateway, but that's something we give to our users. Beyond that, it takes about three seconds to train them on how to use it. And it just works well. That's great for us because it means less administrative time."
"The always-on feature is fantastic for the users. They don't have to think about it. When they go to a coffee shop to do work, there's no need to remember to toggle the VPN on. We'll protect them. URL filtering is the same at home as it is in the office."
"Monitoring is the most valuable feature because we can easily monitor all kinds of stuff coming over the network. We can check the dashboard and work accordingly."
"Security is absolutely spot-on, really top-notch. It's the result of all the components that come together, such as the HIP [Host Information Profile] and components like Forcepoint, providing end-user content inspection, and antivirus. It incorporates DLP features and that's fantastic because Prisma Access makes sure that all of the essential prerequisites are in place before a user can log in or can be tunneled into."
 

Cons

"I am currently doing a PoC of the zero trust aspect of it. Compared to other similar solutions, it is hard to get around each feature. It takes a while to get used to it."
"If they could implement an extra security layer preventing access to iboss from the open internet, it would be great."
"To scale up, a new iboss Node Blade Chassis must be purchased."
"Fold that in with the risk intelligence they're getting from all of the different subscriptions they are a part of. Now, these security companies subscribe to things like emerging threats, databases, etc. You can fold all this intelligence to decide what's happening on an endpoint. I would love to see them start moving into that space. That would compete directly with Microsoft. Maybe that's why they haven't. Having that ability native within the solution would be great. The other area in which I would love to see improvement is more detailed descriptions of why they block websites."
"Their on-premise hardware's network interface is capped at one gigabit, which is sort of a problem. If you stand a filter up where all traffic flows through that, according to them, in order to go above a gigabit, you have to have multiple devices, which in today's IT seems a little bit silly. They could easily put in an SFP port into their device that could accommodate 10 gigs or at least offer a box."
"SSL decryption: We had issues with learners using apps instead of using web browsers. This type of encryption is tough for any appliance in a BYOD environment."
"I'd like to see them accelerate development on the security side, particularly around data loss prevention."
"Iboss is growing so fast that it is often hard for them to keep up with the challenges."
"As Cisco Web Security Appliance is eight years old, though it's simple to access its UI, the UI needs a little bit of updating. If it could be more interactive similar to the latest gen solutions, that would improve the product. Adding a few more integrations would also make Cisco Web Security Appliance better."
"With the WebAssign integration, it is not easy when I am integrating policies within the company, especially with NAND and wireless policies."
"It should have a user-based quota, per-user quota, that can be defined on the appliance."
"WSA is lacking firewall features."
"I would like more automation."
"Cisco lacks a GUI-based troubleshooting feature compared to products by other vendors."
"The solution is priced high."
"The solution needs to be more user-friendly and easier to navigate."
"The licensing model isn't flexible enough. It's an all-or-nothing model. Other providers in the market allow you to buy modules or add-ons separately. With Prisma Access, you have to purchase the same module for all users."
"They could add more flexibility and improve product performance."
"My clients would like to see a more feature-rich product."
"They automatically update and they should give us time to fully understand what they're updating so that we can make sure it doesn't impact production."
"Its integration with non-Palo Alto products can be improved. Currently, it is easy to integrate it with other Palo Alto products such as Cortex XDR. It integrates well with other Palo Alto products. A major part of our network is based on Palo Alto products, but for those companies that use multi-vendor products in their infrastructure, Palo Alto should optimize the integration of Prisma Access with the network devices from other vendors."
"I would like to see better pricing and an easier logging process. Also, if there was a way to log a global log, everything could go onto the system. It would be better if there was a third log, otherwise one would have to do everything manually."
"We would like to see improvements in the licensing; currently, Palo Alto provides 500 to 1000 licenses for users, and we want to see 1500 to 2000 licenses for one version."
"I haven't seen any SD-WAN configuration capability. If Prisma Access would support SD-WAN, that would help... SD-WAN devices should be able to reach Prisma Access, and Palo Alto should support different, vendor-specific devices, not just Palo Alto devices, for SD-WAN configuration."
 

Pricing and Cost Advice

"It is not expensive, and it is also not cheap. iboss is priced right in the sweet spot for the number of features it offers."
"We had the cost of purchasing a new appliance along with the implementation and licensing costs. However, the following year, the cost of just licensing was similar to what was paid the previous year for a new appliance along with the implementation and licensing costs."
"We have not priced the solution recently, but they were competitive with other vendors in the past."
"It is expensive compared to one of its competitors."
"The overall pricing for iboss is very competitive and transparent."
"It is probably in line with other solutions, but I do not deal with the financial side."
"Regarding Cisco price-wise, it is always on a bit on the higher side."
"The pricing is too high."
"This is an expensive solution."
"The solution's cost depends on how many users you purchase. It was maybe $3 or $5 per user, which is a bit expensive."
"At the time, licensing fees were paid on an annual basis."
"I rate Cisco WSA a seven out of ten since it is costly."
"There is a subscription-based license needed to use this solution."
"I know from the manager that the price is too high and that other solutions offer the same features for less."
"I'm still comparing, but the solution is quite expensive."
"Based on what I have heard from others, it is a pricey solution as compared to its peers, but I am not sure. However, considering the features that it offers, it is a break-even point. You get whatever they are promising."
"It is not cheap. It is expensive. The good thing is that you are able to pay for what you need, but overall, it is not cheap. The pricing is not based on packages. You pay based on the features. If you want DLP, you only pay for DLP. They are very flexible. It is not cheap, but the licensing is flexible. There are no additional costs in addition to the standard licensing fees."
"This is not an expensive product and everything is included with one license."
"The pricing for this solution is on the higher end."
"It is pretty expensive. We have to balance the cost of some features. They need to work on some of the services and products, price-wise."
"Prisma Access by Palo Alto Networks has flexible licensing models with different categories. It comes with different features which can be removed if not needed. However, its pricing is high."
"There's no reason not to buy the enterprise version that gives you unlimited PoPs, but you must understand the limitations you impose on yourself if you do that. If you go crazy, that allowlist will be too big for Kubernetes clusters."
report
Use our free recommendation engine to learn which Secure Web Gateways (SWG) solutions are best for your needs.
850,028 professionals have used our research since 2012.
 

Top Industries

By visitors reading reviews
Computer Software Company
13%
Financial Services Firm
12%
Manufacturing Company
9%
Government
6%
Computer Software Company
19%
Financial Services Firm
16%
Non Profit
9%
Government
7%
Computer Software Company
14%
Manufacturing Company
13%
Financial Services Firm
12%
Government
6%
 

Company Size

By reviewers
Large Enterprise
Midsize Enterprise
Small Business
 

Questions from the Community

What do you like most about iboss?
Content filtering is the most useful feature of iboss.
What needs improvement with iboss?
Our biggest problem with their service was it did not recognize the device and filtering did not always work correctl...
What is your primary use case for iboss?
We used it for student and faculty filtering on campus.
What do you like most about Cisco Web Security Appliance?
The most valuable features of the solution are the functions of proxy for the users who use the internet and the secu...
What is your experience regarding pricing and costs for Cisco Web Security Appliance?
Comparing with other products, Cisco has more functionality, but pricing is a challenge. Cisco is not a product for s...
What needs improvement with Cisco Web Security Appliance?
With the WebAssign integration, it is not easy when I am integrating policies within the company, especially with NAN...
What is the better solution - Prisma Access or Zscaler Private Access?
We looked into Prisma Access before choosing Zscaler Private Access (ZPA). Palo Alto’s Prisma Access is a secure ac...
What do you like most about Prisma Access by Palo Alto Networks?
The most valuable features of the solution are in the areas of the secure remote access it provides while also being ...
What is your experience regarding pricing and costs for Prisma Access by Palo Alto Networks?
From my experience, Palo Alto is more expensive compared to solutions like Netskope and Triscale.
 

Also Known As

iBoss Cloud Platform
Cisco WSA, Cisco Web Security
Palo Alto Networks Prisma Access, Prisma Access, GlobalProtect, Palo Alto GlobalProtect Mobile Security Manager, Prisma SaaS by Palo Alto Networks, Prisma Access
 

Overview

 

Sample Customers

More than 4,000 global enterprises trust the iboss Cloud Platform to support their modern workforces, including a large number of Fortune 50 companies.
New South Wales Rural Fire Service, Caixa Seguradora
Concord Hospital, State of Colorado, Essilor International, RheinLand Versicherungsgruppe, University of Westminster, Universidade Nove de Julho, SPAR Austria, CAME Group, ZipRealty, Greenhill & Co., IKT Agder, Aviva Stadium, Animal Logic, Management & Training Corporation, Brigham Young University Hawaii, School District of Chilliwack
Find out what your peers are saying about Cisco Web Security Appliance vs. Prisma Access by Palo Alto Networks and other solutions. Updated: April 2025.
850,028 professionals have used our research since 2012.