Cloudflare One vs Palo Alto Networks Advanced Threat Prevention comparison

The compared Cloudflare and Palo Alto Networks solutions aren't in the same category. Cloudflare is ranked #10 in SASE , with an average rating of 9.0, and holds a 6.1% mindshare in the category. Palo Alto Networks is ranked #7 in ID , with an average rating of 6.3, and holds a 5.1% mindshare. Additionally, 100% of Cloudflare users are willing to recommend the solution, compared to 95% of Palo Alto Networks users who would recommend it.

Comparison Buyer's Guide

Download the report

Executive Summary

We performed a comparison between Cloudflare One and Palo Alto Networks Advanced Threat Prevention based on real PeerSpot user reviews.

Find out what your peers are saying about Palo Alto Networks, Cato Networks, Netskope and others in Secure Access Service Edge (SASE).

To learn more, read our detailed Secure Access Service Edge (SASE) Report (Updated: March 2026).

Buyer's Guide

Secure Access Service Edge (SASE)

March 2026

Download the complete report

Helped 885,789 peers since 2012

Review summaries and opinions

We asked business professionals to review the solutions they use. Here are some excerpts of what they said:

Categories and Ranking

iboss

Mindshare comparison

Secure Access Service Edge (SASE) Mindshare Distribution
Product	Mindshare (%)
Cloudflare One	6.1%
Prisma Access by Palo Alto Networks	11.8%
Cato SASE Cloud Platform	9.8%
Other	72.3%

Secure Access Service Edge (SASE)

Intrusion Detection and Prevention Software (IDPS) Mindshare Distribution
Product	Mindshare (%)
Palo Alto Networks Advanced Threat Prevention	5.1%
Fortinet FortiGate	12.6%
Darktrace	11.2%
Other	71.1%

Intrusion Detection and Prevention Software (IDPS)

Featured Reviews

reviewer2701851

Managing Director

Enhances web security with a single pane of glass and flexible deployment

I don't see any need for improvement; one of the really good things about iboss as a company is that they listen to customer feedback. I have suggested enhancements, and they are responsive, making changes for the better, and they do a lot of testing. To improve iboss, although we haven't used it, we considered the VPN solution that comes with the highest tier licensing, which includes DLP and various other add-ons. We prefer using another product which automatically logs you back onto your network when turning on your PC. With iboss, the connection is manual, which doesn't meet our needs. Additionally, sizing can be tricky because, although the initial recommendations may seem adequate, actual usage may require more gateways than anticipated.

Read full review

Cobe Van Coller

Network Architect at IP Dimension

Cloud security has improved remote access and has reduced costs for smaller client sites

I have used Cloudflare One's Identity-Aware Proxy, and it is quite straightforward from what I have seen so far. The app registration on the Azure side integrates fully into Cloudflare, and I am very satisfied with that part because it is easy to set up. The integration of Cloudflare One's Secure Web Gateway and Zero Trust Network Access works without any issues. That part is pretty automatic, and if you complete the rest of the setup, it comes together by itself with no issues from my side. What makes it nice is that we can actually start replacing on-site firewalls at this stage for the smaller clients because it does not matter if they go to a coffee shop or work from home; they are still secured by the same connection. The hops get shorter and you get better latency. We have done testing to see if it is better. One thing that we did notice with our proof of concept with our current client is that they have people connecting from the UK. When they used their previous VPN solution, uploading CAD drawings and other files to the server took a long time. They mentioned that it is much quicker on Cloudflare One's solution. I definitely believe that is part of the improved performance, and I am satisfied with that as well. What is nice about Cloudflare One is that it makes the setup easier and also easier to train technicians to maintain it. Compared to legacy systems, we do not need to get fancy firewalls in place that are costly. That is definitely also a cost-saver with Cloudflare One.

Read full review

Partha Dash

Global Network Tech Lead at a tech vendor with 10,001+ employees

Advanced protection enables us to confidently secure against evolving threats

Palo Alto Networks can improve Advanced Threat Prevention by catering to the growing adoption of AI and agentic tooling. The Threat Protection modules should have the necessary intelligence to protect against those types of threats, as AI will be there to do a human job; this is an evolving area. From an Advanced Threat Protection perspective, the technology associated with Palo Alto Networks, such as their sandboxing environment, is quite good. However, Palo Alto needs to focus on how to bring that technology to end users and how easy it is to use, especially in a hybrid environment where users work from various locations. While Palo Alto excels in certain setups, they need to improve the user experience in distributed working conditions.

Read full review

Quotes from Members

We asked business professionals to review the solutions they use. Here are some excerpts of what they said:

Pros

"Because of iboss, I did not have to assign web filtering tasks to my techs on a daily basis."

"We were impressed by the solution's mental health function, which can detect if someone needs help. It scans what users are browsing and flags warning signs so we can check to see if they are okay. We've had to use it a couple of times."

"iboss is among the few products providing inline filtering where no application is needed on the device."

"Iboss is a solution that prevents advanced persistent threats, and has a zero tolerance for attacks."

"The console is cloud-based, which is something I really appreciate."

"I would definitely recommend iboss for web filtering purposes to other organizations or individuals."

"iboss is definitely very good in terms of service."

"Because of iboss, I did not have to assign web filtering tasks to my techs on a daily basis."

More iboss pros

"This solution is easy to understand and easy to configure."

"I'm very satisfied with the environment and the dashboard."

"Cloudflare Access is part of the Zero Trust philosophy."

"It is a stable solution."

"It's the endpoint exposition. We don't need to expose our VPN server to the internet and need a zero-test solution. I can apply some conditional access to the endpoint that's connecting to our network to check their security policies or the security condition of their workstation. Once the workstation is trying to connect to my internal network, then I would like to check the discrete condition of these endpoints that are trying to access my internal network. We created some conditional access. We have CrowdStrike, to check if the CrowdStrike is installed, to check if it's updated, and to check for Windows updates. We created some conditional policies to check it."

"Cloudflare is simple to use."

"Cloudflare Zero Trust Platform removes the risk of exposing the applications to the public."

"Cloudflare is simple to use."

More Cloudflare One pros

"The user interface is a bit more professional than some free products."

"It is a stable product."

"It protects us from cyber attacks."

"The solution is very good, especially compared to other solutions."

"The most valuable feature is its use of machine learning to detect potentially unknown threats."

"It's a monster, it's got so many beautiful features. We do deal with other firewalls and we've got a better idea of what other firewalls' capabilities are, any comparison with the Palo Alto I liked the quality of service on the applications that you can control the amount of bandwidth an application is allowed to consume. The best feature is the quality of the application quality of service."

"You can scale the product."

"It's very easy to use and configure. What is nice about Palo Alto is that even if you don't understand how to use it, you can just click on upload and upload everything that needs to be blocked."

More Palo Alto Networks Advanced Threat Prevention pros

Cons

"Sometimes, obviously, there are bugs."

"The dashboards for local use could be better."

"Our biggest problem with their service was it did not recognize the device and filtering did not always work correctly."

"Its pricing could be better."

"Fold that in with the risk intelligence they're getting from all of the different subscriptions they are a part of. Now, these security companies subscribe to things like emerging threats, databases, etc. You can fold all this intelligence to decide what's happening on an endpoint. I would love to see them start moving into that space. That would compete directly with Microsoft. Maybe that's why they haven't. Having that ability native within the solution would be great. The other area in which I would love to see improvement is more detailed descriptions of why they block websites."

"It is stable, but due to growth, it can sometimes be less stable than wanted."

"I have heard they are doing DDoS filtering, but I am not certain if they are implementing it correctly."

"Our biggest problem with their service was it did not recognize the device and filtering did not always work correctly."

More iboss cons

"Lacks a VPN feature to provide a secure connection to the data center."

"The pricing is an area that can be improved. Pricing, as far as I recall, was the source of our problems."

"The initial onboarding was causing us some confusion."

"When there are any dynamic changes in complex applications, the tool takes a lot of time, making its analytics-related area a major matter of concern where improvements are needed."

"I would like them to include a VPN feature to provide a secure connection to the data center."

"Our customers no longer use Cloudflare because its service is subpar."

"The software has automated alerts, but the automated alerts are not available in the mobile app."

"They don't have a person to provide support for customers using the solution under their free plan."

More Cloudflare One cons

"It's not so easy to set up a test environment, because it's not so easy to get the test license. The vendor only gives you 90 days for a test license; it's a tough license to get."

"Sometimes when you want to group a set of ports, and communicate with Palo Alto, you cannot group TCP and UDP ports together. This needs to be adjusted."

"The behavioral detection capabilities could be expanded to address all threats at the perimeter, reducing the reliance on endpoint detection and response systems."

"The organization mail security solutions could be improved. There is no mail security solution available."

"Generally, to deploy it will take some downtime, about a day."

"It's not so easy to set up a test environment because it's not so easy to get the test license."

"Palo Alto's maintenance needs to be improved."

"The application’s pricing and dashboard need improvement. It could be user-friendly."

More Palo Alto Networks Advanced Threat Prevention cons

Pricing and Cost Advice

"It is probably in line with other solutions, but I do not deal with the financial side."

"It is not expensive, and it is also not cheap. iboss is priced right in the sweet spot for the number of features it offers."

"We have not priced the solution recently, but they were competitive with other vendors in the past."

"The overall pricing for iboss is very competitive and transparent."

"It is expensive compared to one of its competitors."

"We had the cost of purchasing a new appliance along with the implementation and licensing costs. However, the following year, the cost of just licensing was similar to what was paid the previous year for a new appliance along with the implementation and licensing costs."

"The pricing of the solution is cheap. The licensing cost is also very low. I rate the cost and pricing a three out of ten."

"Cloudflare Zero Trust Platform's pricing is good."

"The solution is not that expensive."

"The pricing is somewhere in the middle. I would rate the pricing a seven out of ten."

"The solution's pricing lacks transparency."

"The prices are slightly expensive."

"The price tag is no longer $200,000, but rather $300,000 to $400,000. It's twice."

"My company has to make yearly payments towards the licensing costs attached to the solution. There are no hidden charges apart from the licensing costs of the solution."

"There is an initial, expensive investment but the return is good."

"It's not too expensive."

"If you want to have all of the good features then you have to pay extra for licensing."

"The pricing could be lower."

"The cost involves the price of the hardware, which is expensive. However, most of the Palo Alto solutions are expensive."

"The pricing has improved with the newer generation of their Firewalls, but the price could always be lower."

"It is an expensive solution and I would like to see a drop in price."

"The pricing and the licensing are pretty competitive at this stage. As a reseller, I would like to see the price come down a little bit so I can compete better against other firewalls because we do that all the time."

More Palo Alto Networks Advanced Threat Prevention pricing and cost advice

See which vendors are best for you

Use our free recommendation engine to learn which Secure Access Service Edge (SASE) solutions are best for your needs.

See recommendations

885,789 professionals have used our research since 2012.

Top Industries

By visitors reading reviews

Financial Services Firm

11%

Computer Software Company

Manufacturing Company

Construction Company

23%

Comms Service Provider

10%

Financial Services Firm

Computer Software Company

Financial Services Firm

Performing Arts

Manufacturing Company

Government

Company Size

By reviewers

Large Enterprise

Midsize Enterprise

Small Business

By reviewers
Company Size	Count
Small Business	6
Midsize Enterprise	7
Large Enterprise	6

By reviewers
Company Size	Count
Small Business	10
Midsize Enterprise	2
Large Enterprise	11

By reviewers
Company Size	Count
Small Business	9
Midsize Enterprise	4
Large Enterprise	14

Questions from the Community

What needs improvement with iboss?

For zero trust implementation, we encountered complexity issues, especially with a large infrastructure company Exxon...

See all answers

What is your primary use case for iboss?

Previously when I used iboss, we did the POC for iboss for ExxonMobil. Four or five people wanted to move from our ol...

See all answers

What is your experience regarding pricing and costs for iboss?

Regarding pricing, setup costs, and licensing, iboss is not cheap, and that's my only concern. There are cheaper alte...

See all answers

What needs improvement with Cloudflare Access?

Cloudflare Access has strong integration with Microsoft, among other platforms. However, when it comes to Kaspersky, ...

See all answers

What is your primary use case for Cloudflare Access?

Cloudflare Access provides secure access to internal applications for employees, external members of the organization...

See all answers

What advice do you have for others considering Cloudflare Access?

Cloudflare Access is one of the best integrations available. While about two hundred vendors offer similar services, ...

See all answers

Which is the best DDoS protection solution for a big ISP for monitoring and mitigating?

Arbor would be the best bid, apart from Arbor, Palo Alto and Fortinet have good solutions. As this is an ISP, I would...

See all answers

What is your experience regarding pricing and costs for Palo Alto Networks Threat Prevention?

Palo Alto Networks Advanced Threat Prevention requires an add-on license and is considered expensive compared to comp...

See all answers

What needs improvement with Palo Alto Networks Threat Prevention?

Palo Alto Networks can improve Advanced Threat Prevention by catering to the growing adoption of AI and agentic tooli...

See all answers

Comparisons

Netskope vs iboss

Compared 10% of the time

Prisma Access by Palo Alto Networks vs iboss

Compared 9% of the time

Fortinet FortiGate vs iboss

Compared 8% of the time

FortiSASE vs iboss

Compared 7% of the time

Cisco Secure Access vs iboss

Compared 3% of the time

More iboss Competitors

Cato SASE Cloud Platform vs Cloudflare One

Compared 5% of the time

Zscaler Zero Trust Exchange Platform vs Cloudflare One

Compared 4% of the time

Prisma Access by Palo Alto Networks vs Cloudflare One

Compared 3% of the time

FortiSASE vs Cloudflare One

Compared 3% of the time

Twingate vs Cloudflare One

Compared 3% of the time

More Cloudflare One Competitors

Darktrace vs Palo Alto Networks Advanced Threat Prevention

Compared 11% of the time

Vectra AI vs Palo Alto Networks Advanced Threat Prevention

Compared 8% of the time

Fortinet FortiGate vs Palo Alto Networks Advanced Threat Prevention

Compared 7% of the time

Forcepoint Next Generation Firewall vs Palo Alto Networks Advanced Threat Prevention

Compared 7% of the time

TrendAI Tipping Point vs Palo Alto Networks Advanced Threat Prevention

Compared 7% of the time

More Palo Alto Networks Advanced Threat Prevention Competitors

Product Reports

Buyer's Guide

iboss

March 2026

Download iboss product report

Buyer's Guide

Cloudflare One

March 2026

Download Cloudflare One product report

Buyer's Guide

Palo Alto Networks Advanced Threat Prevention

March 2026

Palo Alto Networks Advanced Threat Prevention report

Download Palo Alto Networks Advanced Threat Prevention product report

Also Known As

iBoss Cloud Platform

Cloudflare Area 1 Email Security, Cloudflare Bot Management, Cloudflare Gateway, Cloudflare Zero Trust Platform, Cloudflare DDoS, Cloudflare SASE & SSE Platform

No data available

Overview

Iboss offers a comprehensive cloud-based security platform valued for its scalability and autonomous features, ensuring robust security with easy deployment and management capabilities.

Renowned for its robust security architecture, Iboss integrates seamlessly within diverse networks, delivering efficient granular filtering and advanced content categorization. Its single pane of glass console provides ease of management, allowing rapid scalability suitable for rapidly deploying environments. Operates in BYOD setups due to inline filtering without device installation. Integration with cloud-based applications enhances user control, and features like SASE, SSL inspection, and ChatGPT risk protection stand as highlights. Despite its strengths, users have pointed out areas for enhancement like direct navigation in reports, SSL decryption, and better cloud integration while having room to improve data loss prevention.

What are the most important features of Iboss?

Scalability: Supports rapid deployment across diverse networks.
SASE: A consolidated approach to secure access.
SSL Inspection: Ensures safe data transmission.
Granular Filtering: Detailed control over accessible content.
Single Pane Management: Unifies control through a centralized console.

What benefits should users consider in reviews?

Cost-effectiveness: Offers competitive pricing with robust features.
Autonomous Operation: Reduces management overhead.
Responsive Support: Provides assistance when needed.
Flexible Deployment: Available for both cloud and on-premises environments.

The usage of Iboss spans educational institutions, specifically K-12, to enforce internet policies, protect data, and support remote work environments. It provides web filtering and security frameworks to ensure safe browsing. Its platform-as-a-service model offers flexibility for both cloud-based and on-premises requirements, integrating seamlessly to deliver enhanced security features suitable for various deployment needs including zero trust, CASB, and network security for work-from-home setups.

iboss

Cloudflare One is a comprehensive platform for security, performance, and connectivity. It provides features like rate limiting, DDoS protection, and application access, tailored to enhance user experience while securing internet access and accelerating communications.

Designed to integrate security measures with ease of use and scalability, Cloudflare One offers a secure web gateway and zero trust network access. These features ensure seamless setup and operation, making connectivity reliable and protected. Users appreciate its integrated console, intuitive interface, and the ability to manage risk effectively. It offers straightforward deployment, improves latency, and boasts cost-effectiveness. While its onboarding process and documentation need enhancement, its value in content delivery and application shielding is notable. Despite challenges in integrating Cloudflare Access with existing VPNs and the need for better automation and support, it remains vital for DNS and infrastructure protection.

What features make Cloudflare One stand out?

Rate Limiting: Controls the traffic rate to prevent abuse.
DDoS Protection: Shields applications from distributed denial-of-service attacks.
Secure Web Gateway: Provides secure internet access with seamless operation.
Zero Trust Network Access: Ensures secure, application-based connectivity without relying on traditional VPNs.
Access for Connectivity: Facilitates access to internal applications securely.

What benefits should users look for in reviews?

Security: Robust measures for DNS and browsing protection.
Performance: Enhanced site accessibility and communication speed.
Cost-Effectiveness: Offers competitive pricing for its features.
Ease of Deployment: Straightforward and efficient setup process.

In industries like finance, retail, and technology, Cloudflare One is crucial for enabling secure remote access and protecting web applications against dynamic threats. It supports compliance access policies and enhances content delivery, playing a key role in safeguarding digital infrastructure.

Cloudflare

Palo Alto Networks Advanced Threat Prevention is a cloud-based security service that combines cutting-edge technologies, including machine learning, artificial intelligence, and expert human monitoring, to effectively thwart advanced threats like malware, zero-day attacks, and command-and-control threats. It offers inline protection, scrutinizing all network traffic irrespective of port, protocol, or encryption. An integral component of Palo Alto Networks' security platform, it enjoys widespread adoption across diverse organizations. With its robust security capabilities, it's an ideal choice for entities of all sizes, particularly those in high-risk sectors such as finance, healthcare, and government agencies, seeking to safeguard their networks from a broad spectrum of advanced threats.

Palo Alto Networks

Sample Customers

More than 4,000 global enterprises trust the iboss Cloud Platform to support their modern workforces, including a large number of Fortune 50 companies.

23andMe

University of Arkansas, JBG SMITH, SkiStar AB, TRI-AD, Temple University, Telkom Indonesia

Buyer's Guide

Secure Access Service Edge (SASE)

March 2026

Download Free Report

Find out what your peers are saying about Palo Alto Networks, Cato Networks, Netskope and others in Secure Access Service Edge (SASE). Updated: March 2026.

DOWNLOAD NOW

885,789 professionals have used our research since 2012.

We monitor all Secure Access Service Edge (SASE) reviews to prevent fraudulent reviews and keep review quality high. We do not post reviews by company employees or direct competitors. We validate each review for authenticity via cross-reference with LinkedIn, and personal follow-up with the reviewer when necessary.