Fortinet FortiProxy vs Prisma Access by Palo Alto Networks comparison

Fortinet FortiProxy vs. Prisma Access by Palo Alto Networks

Download the complete report

Helped 914,109 peers since 2012

Review summaries and opinions

We asked business professionals to review the solutions they use. Here are some excerpts of what they said:

Categories and Ranking

iboss

Mindshare comparison

As of September 2026, in the Secure Web Gateways (SWG) category, the mindshare of iboss is 3.4%, up from 2.2% compared to the previous year. The mindshare of Fortinet FortiProxy is 2.1%, down from 5.1% compared to the previous year. The mindshare of Prisma Access by Palo Alto Networks is 7.1%, down from 11.1% compared to the previous year. It is calculated based on PeerSpot user engagement data.

Secure Web Gateways (SWG) Mindshare Distribution
Product	Mindshare (%)
Prisma Access by Palo Alto Networks	7.1%
iboss	3.4%
Fortinet FortiProxy	2.1%
Other	87.4%

Secure Web Gateways (SWG)

Featured Reviews

Ashok Ananthula

Senior Consultant Proxy Engineering at a financial services firm with 10,001+ employees

Cloud gateway has strengthened remote web security and now needs better Mac and ISP support

The problem our organization had is that iboss failed for the Mac devices. It is not able to give a successful agent for the Mac agents. That is where in 2025, we had to migrate to the Palo Alto-based platform. If your use case is for just Windows laptops,you can consider this platform as an option One issue is the data center resiliency part. In India especially, they are not tied up with the Tier 1 ISPs like Tata or Airtel; they were having Tier 2 ISPs and encountered many issues reaching few major sites that my organization depends on, and they were having problems that they could not fix quickly. They also lack a mechanism to route that traffic within their data center; rather, they ask customers to make a pac file change to route it to Singapore explicitly. It would be better if they route from their backend , i mean even if I send it to India DC, they should be able to route it internally to make that work; however, they fail to do that and ask the customer to route it in the pac file. Another suggestion is that in China, they do not have the proper setup; they used to have numerous problems with slowness and lack of premium circuits in China as well. That leads to multiple sites working slowly with latency-related issues. So the main issue is the ISP-related problems that need to be solved.

Read full review

Emmanuel Dasho

Cyber Security Engineer | Network/Security at GCET

Ease of configuration and seamless integration enhance operational efficiency

The App Control feature in the Fortinet FortiProx * Deep Packet Inspection (DPI): FortiProxy analyzes traffic at the application layer to detect applications even if they use non-standard ports or are encrypted. * Application Signatures: Uses FortiGuard’s application signature database (constantly updated) to recognize thousands of applications. * Policy Enforcement: You can create policies to Allow, Block, Monitor, or Shape (QoS) based on application type, category, or specific apps.

Read full review

IgorPinter

Director at PULSEC

Zero-trust access has improved remote security and now simplifies cloud-based firewall management

Regarding the integration part for Prisma Access by Palo Alto Networks, the integration with identity providers is pretty much good. It is basically firewall as a service, so it performs well. I completed the integration without any issues. What Palo Alto Networks can do better for Prisma Access by Palo Alto Networks is probably to have the point of presence available in more locations. The point of presence from the Serbia region has the nearest POP in Frankfurt, which is an issue since it is your gateway—when you start browsing the internet, you go through a commercial connection in Germany. They definitely need to spread the service in other countries.

Read full review

Quotes from Members

We asked business professionals to review the solutions they use. Here are some excerpts of what they said:

Pros

"Deploying iboss leads to good return on investment, estimated around 70% to 80%."

"iboss has significantly lowered the number of security incidents. It is crazy how much it blocks and how much it is aware of the outside danger."

"Valuable features: Within the filter: Controls (Web categories, applications, and Allow/Block list) and Network (local Subnets). Within the reporter: Logs (Event Log) and Reports."

"We chose iboss for both zero trust and proxy (SWG) because their SWG was superior."

"The security aspect of the solution, particularly the malware behind it, is excellent. That's something that really helped us out. It's not just a simple proxy that just blocks the insights of potential threats that come on behind it. They do malware detection and that helps us a lot."

"Iboss is a solution that prevents advanced persistent threats, and has a zero tolerance for attacks."

"The solution has massively improved our security posture, giving us full visibility into what our staff does online."

"The iboss system is highly reliable. The false positive rates are small compared to some other systems we've experienced through other partner agencies who use competing solutions."

More iboss pros

"The most valuable features of Fortinet FortiProxy are its simplicity and performance."

"It helps to secure the networks at the DNA level and ensure proper identification and filtering of DNS traffic."

"It seamlessly integrates with various security products, enhancing threat intelligence and improving indicators of compromise."

"We can use Fortinet FortiProxy configuration for your network."

"The most valuable feature is intrusion prevention (IPS) and antivirus profiles. These features help control user activity, ensuring that they access only permitted websites and protects from downloading viruses."

"The solution's stability is good."

"The App Control feature in the Fortinet FortiProxy Deep Packet Inspection (DPI): FortiProxy analyzes traffic at the application layer to detect applications even if they use non-standard ports or are encrypted."

"I liked the tool's ability to provide detailed access control. For example, we could allow users to watch YouTube videos but not post comments. This level of control wasn't available in FortiGate."

More Fortinet FortiProxy pros

"From an audit or security perspective, the solution has been very stable so far."

"The product's initial setup phase is simple."

"It's great that we can make sure a machine meets the minimum requirements before users are allowed to log in."

"Palo Alto Firewall is one of the best firewalls in the world."

"It has predefined or preconfigured rules, which are getting periodically updated. They are providing continuous improvements and periodically updating all search queries that they are looking for. That is one thing that helps us to stay vigilant and focused. If we query our AWS account for any breaches or vulnerabilities with any of the cloud tests, and it alerts us based on these predefined rules. It also provides an option to configure our own rules, and based on these rules, it can query the cloud trail logs, pull the information, and trigger alerts in real-time. I haven't explored this feature much because there are multiple accounts, and we don't have enough time to explore this feature. It also provides multiple integrations. When vulnerabilities or breaches are happening, you should be aware of them immediately. It provides integration with tools such as Slack, PagerDuty so that you can get alerted as soon as the high severity stuff comes up. For example, you have a security group that has allowed public traffic on port 22. As TechOps, you should be aware of this immediately. You cannot scan each machine or look into all security groups to identify it. So, Prisma helps us and alerts us when this kind of high-priority stuff comes up. It has different statistics, analytics, and graphs for data. The description of alerts is also pretty good. They describe what are the possible causes for this and what are the solutions. From Prisma Cloud, you can directly go to the AWS account. When you click on an alert, a resource, or a resource ID, it takes you to the AWS console where you need to log in. If you are already logged in, it will take you to that instance directly, and you can fix the issue there. I have found this feature very useful."

"Prisma integrates pretty nicely even if you aren't using other Palo Alto products, is very effective for a CSP solution, and the time to value is almost instant because as soon as you stand it up, it shows value by telling you all the vulnerabilities or risks in that environment."

"The performance is good."

"This solution provides a DLP on the cloud and very few people have a scanning device for data at rest."

More Prisma Access by Palo Alto Networks pros

Cons

"If they could implement an extra security layer preventing access to iboss from the open internet, it would be great."

"Fold that in with the risk intelligence they're getting from all of the different subscriptions they are a part of. Now, these security companies subscribe to things like emerging threats, databases, etc. You can fold all this intelligence to decide what's happening on an endpoint. I would love to see them start moving into that space. That would compete directly with Microsoft. Maybe that's why they haven't. Having that ability native within the solution would be great. The other area in which I would love to see improvement is more detailed descriptions of why they block websites."

"I appreciate that iboss's single pane of glass console gives centralized visibility into web traffic, user activity, security policies, and alerts from one dashboard, allowing us to quickly investigate incidents and monitor policy violations without switching between multiple tools, improving operational efficiency; however, the dashboard customization and reporting could be more flexible."

"Iboss is growing so fast that it is often hard for them to keep up with the challenges."

"The dashboards for local use could be better."

"The solution could be stronger on the integration side and offer more cloud applications like G Suite or Oracle."

"Our biggest problem with their service was it did not recognize the device and filtering did not always work correctly."

"It is stable, but due to growth, it can sometimes be less stable than wanted."

More iboss cons

"The hardware version is stable, but the VM version is not stable and contains bugs that cause issues."

"I see that the solution's interface is not in French...It would be good for our company if we could have the tool interface in French."

"For me it may be the wildcards for URLs whitelist or blacklist, somehow the page loads."

"Fortinet FortiProxy should integrate AI/ML technologies. Its pricing needs to be more flexible."

"Integration with existing infrastructure was generally easy, especially if you had tools like LDAP. However, I had to go through a lot of documentation as it was my first time working with a proxy server. We did experience some issues with certain web applications not working properly after implementing Fortinet FortiProxy."

"The tool's most valuable feature is its granular access control. For example, users can browse the main site if you allow access to Amazon, but it stops them from visiting secondary Amazon websites without specific permission. This granular control is really helpful."

"Its web filtering capabilities could be improved."

"Fortinet FortiProxy should improve by adding more documentation and guides."

More Fortinet FortiProxy cons

"The product's current price is an area of shortcoming where improvements are required."

"I haven't seen any SD-WAN configuration capability. If Prisma Access would support SD-WAN, that would help... SD-WAN devices should be able to reach Prisma Access, and Palo Alto should support different, vendor-specific devices, not just Palo Alto devices, for SD-WAN configuration."

"Though the monitoring is fine, the solution should improve its application graphs and interface monitoring."

"The only drawback at the moment is that a cloud solution like Prisma Access requires Palo Alto Panorama, which is normally a VM that sits in your data center."

"It applies commits to the firewalls slowly. There isn't an API you can use for anything. We've previously had trouble with the egress IP addresses though we expressed to engineering that those mustn't change. They changed several times without warning, causing a lot of headaches."

"It is a managed firewall. When you run into issues and have to troubleshoot, there is a fair amount of restriction. You run into a couple of restrictions where you don't have any visibility on what is happening on the Palo Alto managed infrastructure, and you need to get on a call to get technical assistance from Palo Alto's technical support. You have to get them to work with you to fix the problem. I would definitely like them to work on the visibility into what happens inside Palo Alto's infrastructure. It is not about getting our hands onto their infrastructure to do troubleshooting or fixing problems; it is just about getting more visibility. This will help us in guiding technical support folks to the area where they need to work."

"It is a managed firewall. When you run into issues and have to troubleshoot, there is a fair amount of restriction."

"It's not really Prisma's fault, but when you try to create exceptions you don't really have those abilities."

More Prisma Access by Palo Alto Networks cons

Pricing and Cost Advice

"We had the cost of purchasing a new appliance along with the implementation and licensing costs. However, the following year, the cost of just licensing was similar to what was paid the previous year for a new appliance along with the implementation and licensing costs."

"We have not priced the solution recently, but they were competitive with other vendors in the past."

"It is not expensive, and it is also not cheap. iboss is priced right in the sweet spot for the number of features it offers."

"It is probably in line with other solutions, but I do not deal with the financial side."

"The overall pricing for iboss is very competitive and transparent."

"It is expensive compared to one of its competitors."

"It is a cost-effective solution."

"Price-wise, Fortinet FortiProxy is moderate - not the highest among competitors, but not cheap either."

"The tool's pricing is in the middle."

"The solution is neither too expensive nor very cheap."

"It can be considered expensive, with a limited lifespan and support that eventually requires updating to newer solutions."

"It offers a more cost-effective solution than alternatives like FortiMail, FortiGate, and various Barracuda devices."

"The licensing fees are paid on a yearly basis and for what we get, the price is good."

"The price has been good for the ROI during these difficult times for the cruise industry. There are no hidden costs; what the product offers is what you get."

"It is pretty expensive. We have to balance the cost of some features. They need to work on some of the services and products, price-wise."

"Actually the solution is very expensive. I don't know the particulars since the purchasing team dealt with it."

"Prisma is in the middle of the road. It's not the most expensive, but it's not the cheapest. There aren't any additional costs, to my knowledge. I know they have some extra modules, but we didn't use them."

"We have to pay additional costs for maintenance and support services."

"Prisma Access by Palo Alto Networks is an expensive solution, especially when compared to other solutions like Cisco. There are no additional charges apart from the standard licensing costs attached to the solution."

"The pricing can be difficult because it came to us with another agreement, but it can be negotiated. I highly recommend people to compare this product's performance and pricing against BetterCloud, because I feel BetterCloud is better than Prisma SaaS if they're starting from scratch."

More Prisma Access by Palo Alto Networks pricing and cost advice

See which vendors are best for you

Use our free recommendation engine to learn which Secure Web Gateways (SWG) solutions are best for your needs.

See recommendations

914,109 professionals have used our research since 2012.

Top Industries

By visitors reading reviews

Financial Services Firm

11%

Manufacturing Company

Comms Service Provider

Construction Company

Financial Services Firm

12%

Computer Software Company

11%

Government

Comms Service Provider

Financial Services Firm

12%

Manufacturing Company

10%

Outsourcing Company

Computer Software Company

Company Size

By reviewers

Large Enterprise

Midsize Enterprise

Small Business

By reviewers
Company Size	Count
Small Business	12
Midsize Enterprise	8
Large Enterprise	10

By reviewers
Company Size	Count
Small Business	7
Midsize Enterprise	1
Large Enterprise	3

By reviewers
Company Size	Count
Small Business	26
Midsize Enterprise	20
Large Enterprise	27

Questions from the Community

What needs improvement with iboss?

I think iboss could be improved by making reporting and dashboard customization more flexible, and simplifying troubl...

What is your primary use case for iboss?

I use iboss as a cloud-based secure web gateway to provide secure internet access, web filtering, and protect remote ...

What is your experience regarding pricing and costs for iboss?

My experience with iboss's pricing structure, setup cost, and licensing model has been positive, straightforward, and...

What needs improvement with Fortinet FortiProxy?

For me it may be the wildcards for urls whitelist or blacklist, somehow the page loads. Aside from that there no other..

What advice do you have for others considering Fortinet FortiProxy?

My advice to others who are considering Fortinet FortiProxy is that it is seamless, easy to use, and quite straightfo...

What is your experience regarding pricing and costs for Fortinet FortiProxy?

Fortinet FortiProxy is much cheaper compared to other products like Cisco, Palo Alto, and others. It is reasonably pr...

What is the better solution - Prisma Access or Zscaler Private Access?

We looked into Prisma Access before choosing Zscaler Private Access (ZPA). Palo Alto’s Prisma Access is a secure ac...

What is your experience regarding pricing and costs for Prisma Access by Palo Alto Networks?

From my experience, Palo Alto is more expensive compared to solutions like Netskope and Triscale.

What needs improvement with Prisma Access by Palo Alto Networks?

Regarding the integration part for Prisma Access by Palo Alto Networks, the integration with identity providers is pr...

Fortinet FortiGate vs iboss

Comparisons

Netskope vs iboss

Compared 9% of the time

Compared 7% of the time

Cisco Umbrella vs iboss

Compared 6% of the time

FortiSASE vs iboss

Compared 6% of the time

Zscaler Internet Access vs iboss

Compared 5% of the time

More iboss Competitors

Fortinet FortiGate vs Fortinet FortiProxy

Compared 17% of the time

Forcepoint Secure Web Gateway vs Fortinet FortiProxy

Compared 16% of the time

Cisco Web Security Appliance vs Fortinet FortiProxy

Compared 11% of the time

Blue Coat Secure Web Gateway Virtual Appliance vs Fortinet FortiProxy

Compared 6% of the time

More Fortinet FortiProxy Competitors

Netskope vs Prisma Access by Palo Alto Networks

Compared 12% of the time

FortiSASE vs Prisma Access by Palo Alto Networks

Compared 5% of the time

Check Point Harmony SASE (formerly Perimeter 81) vs Prisma Access by Palo Alto Networks

Compared 4% of the time

Cato SASE Cloud Platform vs Prisma Access by Palo Alto Networks

Compared 4% of the time

Fortinet FortiGate vs Prisma Access by Palo Alto Networks

Compared 2% of the time

More Prisma Access by Palo Alto Networks Competitors

Product Reports

iboss

Download iboss product report

Fortinet FortiProxy

Download Fortinet FortiProxy product report

Prisma Access by Palo Alto Networks

Download Prisma Access by Palo Alto Networks product report

Prisma Access by Palo Alto Networks report

Also Known As

iBoss Cloud Platform

FortiProxy

Palo Alto Networks Prisma Access, Prisma Access, GlobalProtect, Palo Alto GlobalProtect Mobile Security Manager, Prisma SaaS by Palo Alto Networks, Prisma Access

Overview

Iboss offers a comprehensive cloud-based security platform valued for its scalability and autonomous features, ensuring robust security with easy deployment and management capabilities.

Renowned for its robust security architecture, Iboss integrates seamlessly within diverse networks, delivering efficient granular filtering and advanced content categorization. Its single pane of glass console provides ease of management, allowing rapid scalability suitable for rapidly deploying environments. Operates in BYOD setups due to inline filtering without device installation. Integration with cloud-based applications enhances user control, and features like SASE, SSL inspection, and ChatGPT risk protection stand as highlights. Despite its strengths, users have pointed out areas for enhancement like direct navigation in reports, SSL decryption, and better cloud integration while having room to improve data loss prevention.

What are the most important features of Iboss?

Scalability: Supports rapid deployment across diverse networks.
SASE: A consolidated approach to secure access.
SSL Inspection: Ensures safe data transmission.
Granular Filtering: Detailed control over accessible content.
Single Pane Management: Unifies control through a centralized console.

What benefits should users consider in reviews?

Cost-effectiveness: Offers competitive pricing with robust features.
Autonomous Operation: Reduces management overhead.
Responsive Support: Provides assistance when needed.
Flexible Deployment: Available for both cloud and on-premises environments.

The usage of Iboss spans educational institutions, specifically K-12, to enforce internet policies, protect data, and support remote work environments. It provides web filtering and security frameworks to ensure safe browsing. Its platform-as-a-service model offers flexibility for both cloud-based and on-premises requirements, integrating seamlessly to deliver enhanced security features suitable for various deployment needs including zero trust, CASB, and network security for work-from-home setups.

iboss

Fortinet FortiProxy provides simplicity and high performance with notable traffic inspections and user-friendly features. It integrates with security products to enhance threat intelligence, ensuring secure and efficient network management.

Fortinet FortiProxy is designed to enhance network security through exceptional traffic inspections, intrusion prevention, and antivirus capabilities. Its user-friendly nature allows for granular application and DNS control, deep packet inspection, and detailed access control. Administrators can implement precise policies to manage web access, integrating seamlessly with other security solutions. Offering proactive alarms and caching capabilities, FortiProxy optimizes bandwidth usage while ensuring robust network defense.

What are the key features of Fortinet FortiProxy?

Traffic Inspections: High-performance inspection to secure web traffic.
Intrusion Prevention: Proactively detects and blocks threats.
Antivirus Profiles: Offers robust protection against viruses.
Application and DNS Control: Provides detailed control over applications and DNS settings.
Deep Packet Inspection: Ensures comprehensive inspection of packet content.
Access Control: Enables precise management of user access.

What benefits or ROI should users investigate?

Security Enhancement: Improved protection from web-based threats.
Network Efficiency: Optimized bandwidth through effective caching.
Integration Capabilities: Seamless interaction with other security products.
User-Friendly Management: Simplified administration with granular controls.

In industries focused on maintaining high-level internet security, Fortinet FortiProxy is employed for comprehensive traffic inspections and segmentation. It supports antivirus additions and secure connectivity, serving as a robust web security gateway. Organizations benefit from seamless authentication using Fortinet Single Sign-On, crucial for protecting users from threats and enabling efficient network operations.

Fortinet

Prisma Access by Palo Alto Networks delivers robust security features including secure remote access across apps and traffic monitoring. It integrates smoothly with cloud environments to provide advanced threat protection and visibility into network traffic.

Prisma Access offers a comprehensive suite of security tools designed to protect cloud environments and remote workforces. With its focus on real-time risk identification and threat prevention, Prisma Access provides encrypted tunnels and centralized management for seamless connectivity and enhanced data security. Designed to scale across platforms like AWS, Azure, and GCP, it optimizes traffic and connectivity while offering extensive visibility into vulnerabilities. However, integration with third-party products, usability, and support services are areas for development, as users report interface challenges and desire improved scalability and geographic coverage, especially in regions like China and South America.

What are the key features of Prisma Access?

Real-Time Risk Identification: Detects and manages potential threats instantly.
Secure Remote Access: Ensures secure connectivity to applications from anywhere.
Traffic Monitoring: Provides comprehensive oversight of network traffic.
Seamless Integration: Works well with platforms like AWS, Azure, and GCP.
Firewall Capabilities: Blocks unauthorized access and threats.
Scalability: Adapts to various cloud environments to meet growing demands.

What benefits should users expect when evaluating Prisma Access?

Reduced Data Breach Risk: Protects sensitive information through encrypted connections.
User-Friendly Interface: Simplifies management and configuration tasks.
Centralized Management: Offers a single view for managing all security policies.
Advanced Threat Protection: Regular updates guard against new threats.

Prisma Access is effectively used in industries requiring secure remote access and stringent data protection, such as finance and healthcare. Organizations leverage it to enforce Zero Trust policies, optimize network performance with SD-WAN, and ensure security compliance across multiple platforms.

Palo Alto Networks

Sample Customers

More than 4,000 global enterprises trust the iboss Cloud Platform to support their modern workforces, including a large number of Fortune 50 companies.

Information Not Available

Concord Hospital, State of Colorado, Essilor International, RheinLand Versicherungsgruppe, University of Westminster, Universidade Nove de Julho, SPAR Austria, CAME Group, ZipRealty, Greenhill & Co., IKT Agder, Aviva Stadium, Animal Logic, Management & Training Corporation, Brigham Young University Hawaii, School District of Chilliwack

Fortinet FortiProxy vs. Prisma Access by Palo Alto Networks