Fortinet FortiGate vs Prisma Access by Palo Alto Networks comparison

Fortinet FortiGate vs. Prisma Access by Palo Alto Networks

Download the complete report

Helped 872,837 peers since 2012

Review summaries and opinions

We asked business professionals to review the solutions they use. Here are some excerpts of what they said:

Categories and Ranking

iboss

Mindshare comparison

As of November 2025, in the Secure Web Gateways (SWG) category, the mindshare of iboss is 2.2%, up from 1.9% compared to the previous year. The mindshare of Fortinet FortiGate is 6.3%, down from 7.5% compared to the previous year. The mindshare of Prisma Access by Palo Alto Networks is 10.3%, down from 10.8% compared to the previous year. It is calculated based on PeerSpot user engagement data.

Secure Web Gateways (SWG) Market Share Distribution
Product	Market Share (%)
Fortinet FortiGate	6.3%
Prisma Access by Palo Alto Networks	10.3%
iboss	2.2%
Other	81.2%

Secure Web Gateways (SWG)

Featured Reviews

Matt Crockford

Head of Cybersecurity at SES Water

It's easy to roll out, and their understanding of our business made it seamless

One aspect we value about iboss is its simplicity. Their customer service is brilliant, and they are super responsive and knowledgeable. It's easy to roll out, and their understanding of our business made it seamless. We were impressed by the solution's mental health function, which can detect if someone needs help. It scans what users are browsing and flags warning signs so we can check to see if they are okay. We've had to use it a couple of times. The user interface is highly intuitive. Our IT team picked it up with minimal training. It's arranged so that it's easy to find where things are. Another advantage is the single pane of glass console, which gives you visibility into what's happening. We're not fully there yet because we haven't implemented zero trust, but we're excited about the possibilities from the demos we've seen. We launched a POC of iboss' ChatGPT Risk Protection feature two weeks ago. AI is a great tool, but you need to be careful what you put into it. My biggest fear is employees inputting sensitive corporate information or customer PII data into one of these chatbots. I was impressed by our trial of the feature. It's exactly what we wanted. Now, when a user goes to ChatGPT, there's a banner warning them not to share information, and we can block conversations containing customer data like bank details and email addresses. I don't want to stop people from using it, but we need visibility. We've only tried it on a test group of 15 people. You can configure it to look for specific keywords or integrate it with your DLP policy if you have that configured

A stable solution with an intuitive interface and quick customer service

Vasu Gala

Manager, Information Technology Operation/Presales at TechMonarch

I have been working with Fortinet FortiGate, WatchGuard, Sophos, and SonicWall. I'm not as comfortable with SonicWall because of their UI and limitations. I prefer Fortinet above all other options. When it comes to configuration, I am confident in my ability to handle various tasks, including creating policies such as firewall rules, web policies, and application policies. Additionally, I can configure VPNs and implement load balancing, among other tasks. Overall, I feel much more comfortable working with Fortinet. Fortinet has made significant improvements by integrating AI with firewalls for threat analysis and prevention. In the past 2-3 years, they have launched FortiSASE and SIEM, and they also provide SOC services. Both Palo Alto and Fortinet FortiGate are excellent. While Fortinet FortiGate comes at higher prices, the functionality and support justify the cost. They promptly resolve firmware issues and inform all support providers about configuration changes.

Have supported client adoption of security solutions but need more control over infrastructure

Roberto Pastorino

Network and Cybersecurity Consultant at a tech services company with 11-50 employees

It's a working solution. It's not the easiest, but no DLP solution is easy. With Netskope, the whole infrastructure is proprietary. Prisma Access by Palo Alto Networks is using a service in AWS, and it's not totally a proprietary infrastructure. Sometimes a third-party outage could impact the whole operability. I'm not certain if the vendor is moving towards sovereignty of infrastructure at this moment, but from what I saw in the past, there was this reliance on third parties for the infrastructure: AWS, GCP, Oracle, and others. This is one point of attention for me. I would prefer more proprietary infrastructure.

More Fortinet FortiGate pros

Quotes from Members

We asked business professionals to review the solutions they use. Here are some excerpts of what they said:

Pros

"Granular setup, which was able to set different levels of filters using the OUs in the AD."

"The iboss system is highly reliable. The false positive rates are small compared to some other systems we've experienced through other partner agencies who use competing solutions."

"We were impressed by the solution's mental health function, which can detect if someone needs help. It scans what users are browsing and flags warning signs so we can check to see if they are okay. We've had to use it a couple of times."

"It was a very easy product to install. It can be deployed very fast."

"First of all, the security policies are essential. I do not have to rely solely on Active Directory for our users."

"iboss is among the few products providing inline filtering where no application is needed on the device."

"From a use-case scenario, what I like the most is the plug-in. I like the fact that we can do the filtering of these devices offsite independent of the network they are connected to, and we do not have to have traffic coming back inside our network."

"Content filtering is the most useful feature of iboss."

More iboss pros

"Regionally, we are well covered. Technical support is good in this area."

"The solution is user-friendly and easy to operate."

"It's simple to operate and use."

"It offers web filtering capabilities at a more affordable price compared to other solutions like PSMs or NETGEAR."

"The solution has improved my organization significantly, with impactful capabilities such as sandboxing and cloud solutions, such as XDR, MDR, and EDR."

"The user interface is intuitive. Anyone can configure the firewall with little knowledge of the product. The back-end is robust with good security."

"A strong point of FortiGate is that the graphical interface is complete and easy to use, especially if we think there is a list of operations that we are able to perform inside."

"It is a good product. It does what we want it to do so. I didn't find many false-positives or things like that. We mainly use the IPS and URL filtering features, and they are pretty good."

"The most valuable features of the solution stem from the fact that it offers stability and scalability while being a very secure product."

"The setup is relatively straightforward."

"The solution improved the consistency of our security controls and the BCP. There has been a 20 percent reduction in TCO. Prisma Access also enabled us to deliver better applications by centralizing security management."

"Prisma helped us build a moat around our production systems. It's now impossible to log into our production from a non-MDM laptop. Prisma Access provides decent security overall."

"The solution's most valuable features were the model's reduced complexity on the client side and its capability to provide security."

"It's much faster and more secure than legacy solutions. It is also quite stable and scalable as well. We are able to see all the traffic in one place."

"There is a system for monitoring the traffic. You can monitor the traffic of the connected people and point out any issues on the connection part."

"Monitoring is the most valuable feature because we can easily monitor all kinds of stuff coming over the network. We can check the dashboard and work accordingly."

More Prisma Access by Palo Alto Networks pros

Cons

"Sometimes when you call in support, you get someone who is just following a sheet. It feels like a runaround. You feel that you are running into that support wall."

"For zero trust implementation, we encountered complexity issues, especially with a large infrastructure company ExxonMobil."

"Iboss is growing so fast that it is often hard for them to keep up with the challenges."

"Their on-premise hardware's network interface is capped at one gigabit, which is sort of a problem. If you stand a filter up where all traffic flows through that, according to them, in order to go above a gigabit, you have to have multiple devices, which in today's IT seems a little bit silly. They could easily put in an SFP port into their device that could accommodate 10 gigs or at least offer a box."

"If they could implement an extra security layer preventing access to iboss from the open internet, it would be great."

"The reporting feature needs improvement."

"The reporting feature needs improvement. It doesn't give you the expected results. It is quite difficult to get the specific reports needed, and it is not as intuitive as the rest of the platform."

"Our biggest problem with their service was it did not recognize the device and filtering did not always work correctly."

More iboss cons

"The issue lies with features available in GUI versus CLI during configuration. When using GUI, I want to accomplish everything there, but sometimes it requires using CLI to ensure proper configuration."

"In my case, the 101F is not scalable. I faced problems with scalability related to memory. When we hit 100% memory usage, it stops the internet connection, so we need to control the traffic. We cannot increase the memory."

"The configuration part was challenging, especially converting configurations from another OEM to FortiGate."

"There is an area for improvement in vulnerability management."

"Fortinet FortiGate could improve by adding enhancements to FortiMail, FortiSOAR, and FortiDeceptor."

"There is one big configuration file with no separations for the unique VDOMs. Maybe they could separate individual VDOM configuration files with the root VDOM configuration file referencing the individual VDOM config files."

"FortiGate needs to be elastic to the market's trends. It should be easy for SMBs to get the solution."

"The solution could be improved by addressing limited local reporting. It requires obtaining the FortiAnalyzer for proper visibility because you can't do much from a reporting perspective with just the firewall alone."

More Fortinet FortiGate cons

"There is a lack of integration with third-party solutions like CrowdStrike or SentinelOne in Prisma Access by Palo Alto Networks. Although they have a tight ecosystem with their products, opening up for integration with other solutions would be beneficial."

"My clients would like to see a more feature-rich product."

"There should be a dedicated portal or SASE-based solution. They're trying to add a plugin but it needs a dedicated portal because it is now an enterprise solution for multiple organizations. People should be able to directly log in to a dedicated page for Prisma Access, rather than going into a Panorama plugin, and always having to update the plugin."

"It wasn't so satisfying to work with it. There is room for improvement in the policy management. It is difficult to cover the entire scenery through Palo Alto products."

"We are using the SaaS offering. We use our applications for microservices. We use Twistlock to scan containers, and it displays these results in Prisma, which is a good feature because we can see vulnerabilities with respect to these containers. We can see everything in a very detailed manner. However, when you have different environments for a single application, such as DEV, QA, PROD, and TEST, all these environments run multiple containers, which can lead to a very high number of containers. In such a scenario, it shows you the alerts for all those containers that have vulnerabilities. If you show the results of all the containers that share the same image, it is not going to add any value. Therefore, they should narrow down the alerts based on a container. It should show information for a single container. Otherwise, the person who is looking at the results gets the impression that he has to fix all these issues. This is something that they can improve."

"While Palo Alto has understood the essence of building capabilities around cloud technology and have come up with a CASB offering, that is a very new product. There are other companies that have better offerings for understanding cloud applications and have more graceful controls. That's something that Palo Alto needs to work on."

"Their next release should provide solutions for the mobile environment."

"Palo Alto Prisma 10 came out over a year ago. Palo Alto added this identity management feature. The legacy way Palo Alto selected which user is sitting on an IP address it passes through has been clunky."

More Prisma Access by Palo Alto Networks cons

Pricing and Cost Advice

"It is expensive compared to one of its competitors."

"We had the cost of purchasing a new appliance along with the implementation and licensing costs. However, the following year, the cost of just licensing was similar to what was paid the previous year for a new appliance along with the implementation and licensing costs."

"The overall pricing for iboss is very competitive and transparent."

"It is probably in line with other solutions, but I do not deal with the financial side."

"It is not expensive, and it is also not cheap. iboss is priced right in the sweet spot for the number of features it offers."

"We have not priced the solution recently, but they were competitive with other vendors in the past."

"The price is highly competitive when compared to other brands that offer similar functionality."

"Fortinet's pricing is more straightforward than other solutions. If Fortinet doesn't stick out when you're searching for a solution, you are a glutton for punishment. You only need to know two things when purchasing a Fortinet solution: your total bandwidth and bandwidth at the site. You need to estimate the future bandwidth with other solutions if your customer plans to upgrade."

"Fortinet FortiGate IPS is cheaper than other solutions like Cisco or Check Point."

"I rate the product's pricing a seven out of ten. The additional cost depends on the extra feature requirements."

"Fortinet Secure SD-WAN delivered the lowest total cost of ownership (TCO) per Mbps among all other vendors."

"Fortinet has one or two license types, and the VPN numbers are only limited by the hardware chassis make."

"The solution is very expensive so pricing is rated a one out of ten."

"Its pricing is good. The advantages of Fortinet FortiGate over its competitors include good pricing and meeting our requirements at a lower cost."

More Fortinet FortiGate pricing and cost advice

"It is not cheap. It is expensive. The good thing is that you are able to pay for what you need, but overall, it is not cheap. The pricing is not based on packages. You pay based on the features. If you want DLP, you only pay for DLP. They are very flexible. It is not cheap, but the licensing is flexible. There are no additional costs in addition to the standard licensing fees."

"Prisma SaaS is more expensive than similar solutions but I think it's worth it."

"Compared to other products, the price is slightly high."

"Prisma Access by Palo Alto Networks is an expensive solution, especially when compared to other solutions like Cisco. There are no additional charges apart from the standard licensing costs attached to the solution."

"It is pretty expensive. We have to balance the cost of some features. They need to work on some of the services and products, price-wise."

"This is not an expensive product and everything is included with one license."

"The price has been good for the ROI during these difficult times for the cruise industry. There are no hidden costs; what the product offers is what you get."

"Actually the solution is very expensive. I don't know the particulars since the purchasing team dealt with it."

More Prisma Access by Palo Alto Networks pricing and cost advice

See which vendors are best for you

Use our free recommendation engine to learn which Secure Web Gateways (SWG) solutions are best for your needs.

See recommendations

872,837 professionals have used our research since 2012.

Comparison Review

it_user216600

Senior Technical Consultant with 51-200 employees

Jan 3, 2016

Sophos UTM vs. Fortinet FortiGate

I have used both Sophos and Fortinet products in production and I have found the Sophos UTM appliances (hardware and virtual) to be a better fit most of the time -- with a few caveats which I will touch on below. In both instances, the transition from TMG will be mostly straightforward. The main…

What needs improvement with iboss?

Top Industries

By visitors reading reviews

Financial Services Firm

11%

Computer Software Company

11%

Manufacturing Company

Comms Service Provider

Computer Software Company

14%

Comms Service Provider

Manufacturing Company

Financial Services Firm

Computer Software Company

12%

Financial Services Firm

12%

Manufacturing Company

11%

Government

Company Size

By reviewers

Large Enterprise

Midsize Enterprise

Small Business

By reviewers
Company Size	Count
Small Business	6
Midsize Enterprise	6
Large Enterprise	5

By reviewers
Company Size	Count
Small Business	350
Midsize Enterprise	130
Large Enterprise	187

By reviewers
Company Size	Count
Small Business	23
Midsize Enterprise	21
Large Enterprise	27

Questions from the Community

For zero trust implementation, we encountered complexity issues, especially with a large infrastructure company Exxon...

What is your primary use case for iboss?

Previously when I used iboss, we did the POC for iboss for ExxonMobil. Four or five people wanted to move from our ol...

What is your experience regarding pricing and costs for iboss?

Regarding pricing, setup costs, and licensing, iboss is not cheap, and that's my only concern. There are cheaper alte...

Which is the better NGFW: Fortinet Fortigate or Cisco Firepower?

When you compare these firewalls you can identify them with different features, advantages, practices and usage a...

What is the biggest difference between Sophos XG and FortiGate?

From my experience regarding both the Sophos and FortiGate firewalls, I personally would rather use FortiGate. I know...

What are the biggest technical differences between Sophos UTM and Fortinet FortiGate?

As a solution, Sophos UTM offers a lot of functionality, it scales well, and the stability and performance are quite ...

What is the better solution - Prisma Access or Zscaler Private Access?

We looked into Prisma Access before choosing Zscaler Private Access (ZPA). Palo Alto’s Prisma Access is a secure ac...

What do you like most about Prisma Access by Palo Alto Networks?

The most valuable features of the solution are in the areas of the secure remote access it provides while also being ...

What is your experience regarding pricing and costs for Prisma Access by Palo Alto Networks?

From my experience, Palo Alto is more expensive compared to solutions like Netskope and Triscale.

Zscaler Internet Access vs iboss

Comparisons

Netskope vs iboss

Compared 14% of the time

Compared 13% of the time

Cisco Umbrella vs iboss

Compared 13% of the time

Check Point Harmony SASE (formerly Perimeter 81) vs iboss

Compared 8% of the time

More iboss Competitors

Sophos XG vs Fortinet FortiGate

Compared 18% of the time

Cisco Secure Firewall vs Fortinet FortiGate

Compared 11% of the time

Netgate pfSense vs Fortinet FortiGate

Compared 8% of the time

OPNsense vs Fortinet FortiGate

Compared 4% of the time

Cisco Meraki MX vs Fortinet FortiGate

Compared 4% of the time

More Fortinet FortiGate Competitors

Netskope vs Prisma Access by Palo Alto Networks

Compared 13% of the time

Zscaler Internet Access vs Prisma Access by Palo Alto Networks

Compared 12% of the time

Cisco Umbrella vs Prisma Access by Palo Alto Networks

Compared 8% of the time

FortiSASE vs Prisma Access by Palo Alto Networks

Compared 6% of the time

Cato SASE Cloud Platform vs Prisma Access by Palo Alto Networks

Compared 6% of the time

More Prisma Access by Palo Alto Networks Competitors

Product Reports

iboss

Download iboss product report

Fortinet FortiGate

Download Fortinet FortiGate product report

Prisma Access by Palo Alto Networks

Download Prisma Access by Palo Alto Networks product report

Prisma Access by Palo Alto Networks report

Also Known As

iBoss Cloud Platform

No data available

Palo Alto Networks Prisma Access, Prisma Access, GlobalProtect, Palo Alto GlobalProtect Mobile Security Manager, Prisma SaaS by Palo Alto Networks, Prisma Access

Overview

Iboss offers a comprehensive cloud-based security platform valued for its scalability and autonomous features, ensuring robust security with easy deployment and management capabilities.

Renowned for its robust security architecture, Iboss integrates seamlessly within diverse networks, delivering efficient granular filtering and advanced content categorization. Its single pane of glass console provides ease of management, allowing rapid scalability suitable for rapidly deploying environments. Operates in BYOD setups due to inline filtering without device installation. Integration with cloud-based applications enhances user control, and features like SASE, SSL inspection, and ChatGPT risk protection stand as highlights. Despite its strengths, users have pointed out areas for enhancement like direct navigation in reports, SSL decryption, and better cloud integration while having room to improve data loss prevention.

What are the most important features of Iboss?

Scalability: Supports rapid deployment across diverse networks.
SASE: A consolidated approach to secure access.
SSL Inspection: Ensures safe data transmission.
Granular Filtering: Detailed control over accessible content.
Single Pane Management: Unifies control through a centralized console.

What benefits should users consider in reviews?

Cost-effectiveness: Offers competitive pricing with robust features.
Autonomous Operation: Reduces management overhead.
Responsive Support: Provides assistance when needed.
Flexible Deployment: Available for both cloud and on-premises environments.

The usage of Iboss spans educational institutions, specifically K-12, to enforce internet policies, protect data, and support remote work environments. It provides web filtering and security frameworks to ensure safe browsing. Its platform-as-a-service model offers flexibility for both cloud-based and on-premises requirements, integrating seamlessly to deliver enhanced security features suitable for various deployment needs including zero trust, CASB, and network security for work-from-home setups.

iboss

Fortinet FortiGate excels in providing integrated VPN, firewalling, and Unified Threat Management (UTM) with centralized management and high availability. It supports remote access and comprehensive threat protection, making it a preferred choice for securing networks.

Fortinet FortiGate offers a robust security platform with features such as strong intrusion prevention, application control, and web filtering. Its integration with Active Directory and SD-WAN functionality provides scalable solutions for large networks. Users appreciate its ease of use through centralized management interfaces, ensuring robust security with flexible configurations. However, FortiGate could enhance its graphical interface and technical support responsiveness, address firmware bugs and costly licensing, improve logging, integrate better with third-party tools, and strengthen scalability and memory for log storage. Complexity in configuration and the need for intuitive features are noted challenges, and there's a demand for advanced security, zero-trust capabilities, and AI integration.

What are the key features of Fortinet FortiGate?

VPN: Secure remote access and connectivity.
Firewalling: Protects networks from unauthorized access and attacks.
UTM: Offers a comprehensive approach to threat management.
SD-WAN: Optimizes traffic routing for efficient network performance.
Web Filtering: Controls and monitors web access and ensures Internet security.

What benefits or ROI should be considered?

Centralized Management: Simplifies administration and monitoring.
High Availability: Ensures consistent security and network availability.
Scalability: Adapts to the needs of growing networks.
Comprehensive Threat Protection: Provides robust security measures.
Ease of Use: Minimizes the complexity of security management.

Fortinet FortiGate is widely implemented across industries like education, finance, and government. Companies use it for firewall protection, VPN, and SD-WAN capabilities, ensuring secure perimeter and data center security. It facilitates remote access management and traffic routing optimization, offering reliable security and connectivity solutions.

Fortinet

Prisma Access by Palo Alto Networks provides consistent security for all users and applications across your remote networks. Prisma Access grants users safe access to the cloud and data center applications and the internet as well. In addition, the solution combines all of your security and networking capabilities into a single cloud-delivered platform, enabling flexible hybrid workforces.

Prisma Access can be managed two ways:

Cloud Managed
Panorama Managed

Prisma Access delivers both networking and security services, including:

SD-WAN
VPN
Zero Trust network access (ZTNA)
Quality of service (QoS)
Clean Pipe
Firewall as a service (FWaaS)
DNS Security
Threat Prevention
Cloud secure web gateway (SWG)
Data loss prevention (DLP)
Cloud access security broker (CASB)

Prisma Access by Palo Alto Networks Features

Prisma Access by Palo Alto Networks has many valuable key features including: App-ID, User-ID, Device-ID, SSL Decryption, Dynamic User Group (DUG) Monitoring, AI/ML-Based Detection, IoT Security, Reporting, URL Filtering, Enterprise Data Loss Prevention (DLP), Digital Experience Monitoring (DEM)*, Logging, Policy Automation, Intrusion Prevention System (IPS), and many more.

Prisma Access by Palo Alto Networks Benefits

Some of the benefits of using Prisma Access by Palo Alto Networks include:

Security: Prisma Access gives you consistent security to protect against cyberattacks, with enforcement of policy at every location. By implementing Prisma Access, you also gain protection that works to prevent known and unknown malware, exploits, credential theft, command and control, and many other attack vectors across all ports and protocols.
Global connectivity: Prisma Access provides global coverage through use of its connectivity layer.
Scalability: With Prisma Access, scaling is automatically managed and is scalable, flexible, and agile.
Instant deployment: Deployment is fast, eliminating wasted time that may otherwise be associated with setting up a solution, operating it, or shipping hardware in order to get started.

Reviews from Real Users

Below are some reviews and helpful feedback written by Microsoft Azure Synapse Analytics

users who are currently using the solution.

PeerSpot user Partha D., Global Network Tech Lead at a computer software company, speaks about his experience using the product, saying, "It protects all app traffic so that users can gain access to all apps. Unlike other solutions that only work from ports 80 and 443, which are predominantly for web traffic, Prisma Access covers all protocols and works on all traffic patterns... The most sophisticated attacks can arise from sources that are not behind 80/443."

Tejas J., a Sr. Cloud Security Architect at a computer software company, mentions that "it is geographically dispersed, and it sits on top of Google and AWS platforms. Therefore, you don't face the standard issues, such as latency or bandwidth issues, that you usually face in the case of on-prem data centers.”

Another PeerSpot reviewer, Max I., Associate Director at Cognizant, comments that "Security is absolutely spot-on, really top-notch. It's the result of all the components that come together, such as the HIP [Host Information Profile] and components like Forcepoint, providing end-user content inspection, and antivirus. It incorporates DLP features and that's fantastic because Prisma Access makes sure that all of the essential prerequisites are in place before a user can log in or can be tunneled into."

Palo Alto Networks

Sample Customers

More than 4,000 global enterprises trust the iboss Cloud Platform to support their modern workforces, including a large number of Fortune 50 companies.

Amazon Web Services, Microsoft, IBM, Cisco, Dell, HP, Oracle, Verizon, AT&T, T-Mobile, Sprint, Vodafone, Orange, BT Group, Telstra, Deutsche Telekom, Comcast, Time Warner Cable, CenturyLink, NTT Communications, Tata Communications, SoftBank, China Mobile, Singtel, Telus, Rogers Communications, Bell Canada, Telkom Indonesia, Telkom South Africa, Telmex, Telia Company, Telkom Kenya

Concord Hospital, State of Colorado, Essilor International, RheinLand Versicherungsgruppe, University of Westminster, Universidade Nove de Julho, SPAR Austria, CAME Group, ZipRealty, Greenhill & Co., IKT Agder, Aviva Stadium, Animal Logic, Management & Training Corporation, Brigham Young University Hawaii, School District of Chilliwack

Fortinet FortiGate vs. Prisma Access by Palo Alto Networks