Fortinet FortiProxy vs Prisma Access by Palo Alto Networks comparison

Why PeerSpot?

Fortinet and Palo Alto Networks are both solutions in the Secure Web Gateways (SWG) category. Fortinet is ranked #15 with an average rating of 8.0, while Palo Alto Networks is ranked #5 with an average rating of 8.4. Fortinet holds a 2.1% mindshare in WSG, compared to Palo Alto Networks’s 6.5% mindshare. Additionally, 100% of Fortinet users are willing to recommend the solution, compared to 92% of Palo Alto Networks users who would recommend it.

Comparison Buyer's Guide

Download the report

Executive SummaryUpdated on Dec 4, 2024

Prisma Access by Palo Alto Networks and Fortinet FortiProxy compete in the security and proxy solutions market. Prisma Access has the upper hand due to its comprehensive security features and integration capabilities, whereas FortiProxy is noted for its simplicity and user-friendliness.

Features: Prisma Access offers zero-trust capabilities, scalable architecture, and seamless integration with other Palo Alto products. It provides robust user accessibility, thorough traffic analysis, and threat prevention. FortiProxy excels in effective web traffic inspection, granular access control, and intrusion prevention, providing flexibility in managing web access.

Room for Improvement: Prisma Access users face challenges with updates, third-party integration, application dependencies, and documentation. They desire more pricing flexibility and improved deployment processes. Fortinet FortiProxy needs enhancement in web filtering, documentation updates, and integration with AI/ML technologies, requiring better usage guidance and policy management solutions.

Ease of Deployment and Customer Service: Prisma Access offers a versatile deployment model, including hybrid and public cloud options, with variable technical support quality for non-premium users. Fortinet FortiProxy provides straightforward deployment focusing on on-premises and hybrid cloud environments, with consistent and responsive support.

Pricing and ROI: Prisma Access is perceived as expensive but delivers significant ROI due to advanced features and comprehensive security, justifying higher costs. Licensing flexibility varies, and the investment is often deemed worthwhile. Fortinet FortiProxy is more affordable, offering good value for money, though its pricing model may need modifications for better scalability.

To learn more, read our detailed Fortinet FortiProxy vs. Prisma Access by Palo Alto Networks Report (Updated: November 2026).

Buyer's Guide

Fortinet FortiProxy vs. Prisma Access by Palo Alto Networks

November 2026

Download the complete report

Helped 921,148 peers since 2012

Review summaries and opinions

We asked business professionals to review the solutions they use. Here are some excerpts of what they said:

Categories and Ranking

iboss

Mindshare comparison

As of November 2026, in the Secure Web Gateways (SWG) category, the mindshare of iboss is 3.2%, up from 2.3% compared to the previous year. The mindshare of Fortinet FortiProxy is 2.1%, down from 4.8% compared to the previous year. The mindshare of Prisma Access by Palo Alto Networks is 6.5%, down from 10.4% compared to the previous year. It is calculated based on PeerSpot user engagement data.

Secure Web Gateways (SWG) Mindshare Distribution
Product	Mindshare (%)
Prisma Access by Palo Alto Networks	6.5%
iboss	3.2%
Fortinet FortiProxy	2.1%
Other	88.2%

Secure Web Gateways (SWG)

Featured Reviews

Ashok Ananthula

Senior Consultant Proxy Engineering at a financial services firm with 10,001+ employees

Cloud gateway has strengthened remote web security and now needs better Mac and ISP support

The problem our organization had is that iboss failed for the Mac devices. It is not able to give a successful agent for the Mac agents. That is where in 2025, we had to migrate to the Palo Alto-based platform. If your use case is for just Windows laptops,you can consider this platform as an option One issue is the data center resiliency part. In India especially, they are not tied up with the Tier 1 ISPs like Tata or Airtel; they were having Tier 2 ISPs and encountered many issues reaching few major sites that my organization depends on, and they were having problems that they could not fix quickly. They also lack a mechanism to route that traffic within their data center; rather, they ask customers to make a pac file change to route it to Singapore explicitly. It would be better if they route from their backend , i mean even if I send it to India DC, they should be able to route it internally to make that work; however, they fail to do that and ask the customer to route it in the pac file. Another suggestion is that in China, they do not have the proper setup; they used to have numerous problems with slowness and lack of premium circuits in China as well. That leads to multiple sites working slowly with latency-related issues. So the main issue is the ISP-related problems that need to be solved.

Read full review

Emmanuel Dasho

Cyber Security Engineer | Network/Security at GCET

Ease of configuration and seamless integration enhance operational efficiency

The App Control feature in the Fortinet FortiProx * Deep Packet Inspection (DPI): FortiProxy analyzes traffic at the application layer to detect applications even if they use non-standard ports or are encrypted. * Application Signatures: Uses FortiGuard’s application signature database (constantly updated) to recognize thousands of applications. * Policy Enforcement: You can create policies to Allow, Block, Monitor, or Shape (QoS) based on application type, category, or specific apps.

Read full review

IgorPinter

Director at PULSEC

Zero-trust access has improved remote security and now simplifies cloud-based firewall management

Regarding the integration part for Prisma Access by Palo Alto Networks, the integration with identity providers is pretty much good. It is basically firewall as a service, so it performs well. I completed the integration without any issues. What Palo Alto Networks can do better for Prisma Access by Palo Alto Networks is probably to have the point of presence available in more locations. The point of presence from the Serbia region has the nearest POP in Frankfurt, which is an issue since it is your gateway—when you start browsing the internet, you go through a commercial connection in Germany. They definitely need to spread the service in other countries.

Read full review

Quotes from Members

We asked business professionals to review the solutions they use. Here are some excerpts of what they said:

Pros

"The security aspect of the solution, particularly the malware behind it, is excellent."

"Valuable features: Within the filter: Controls (Web categories, applications, and Allow/Block list) and Network (local Subnets). Within the reporter: Logs (Event Log) and Reports."

"The console is cloud-based, which is something I really appreciate."

"iboss is among the few products providing inline filtering where no application is needed on the device. It operates on the network side and is not device-based. This feature was one of the main reasons why we stayed with them for so long."

"The main advantage of iboss is its cloud-based security centralized policy management, which helps organizations protect users working from different locations, secure access to cloud applications, and reduce security risks."

"The solution has massively improved our security posture, giving us full visibility into what our staff does online."

"As I mentioned, the return on investment is significant, as it saved our office locations' bandwidth because when you are working remotely at home, your internet traffic routes directly to iboss and will not go to your office building, saving bandwidth bottlenecks and ensuring that issues with our building internet circuits will not impact your internet connectivity because you are directly going to the iboss data center."

"I recommend iboss for organizations looking for strong cloud-based web security and centralized access control."

More iboss pros

"The most valuable features of Fortinet FortiProxy are its simplicity and performance."

"The App Control feature in the Fortinet FortiProxy Deep Packet Inspection (DPI): FortiProxy analyzes traffic at the application layer to detect applications even if they use non-standard ports or are encrypted."

"It is a really stable solution."

"It helps to secure the networks at the DNA level and ensure proper identification and filtering of DNS traffic."

"The solution's stability is good."

"The most valuable feature is intrusion prevention (IPS) and antivirus profiles. These features help control user activity, ensuring that they access only permitted websites and protects from downloading viruses."

"We can use Fortinet FortiProxy configuration for your network."

"I liked the tool's ability to provide detailed access control. For example, we could allow users to watch YouTube videos but not post comments. This level of control wasn't available in FortiGate."

More Fortinet FortiProxy pros

"All of these come into play and give us peace of mind that this platform is best-in-class in terms of security features and tool integration."

"The crux of why we're using the product is because of the automations, and we are very confident that the product will keep us secure at all times."

"Having all of these capabilities on a single cloud-delivered platform was extremely important to us."

"Overall, the security that Prisma Access provides definitely meets our security requirements."

"We're now able to go after contracts that require a Zero Trust solution and Prisma's other technology solutions."

"The most valuable features of the solution stem from the fact that it offers stability and scalability while being a very secure product."

"The setup is relatively straightforward."

"To quarantine and clean a malware file provides a lot of security."

More Prisma Access by Palo Alto Networks pros

Cons

"Their on-premise hardware's network interface is capped at one gigabit, which is sort of a problem. If you stand a filter up where all traffic flows through that, according to them, in order to go above a gigabit, you have to have multiple devices, which in today's IT seems a little bit silly. They could easily put in an SFP port into their device that could accommodate 10 gigs or at least offer a box."

"I appreciate that iboss's single pane of glass console gives centralized visibility into web traffic, user activity, security policies, and alerts from one dashboard, allowing us to quickly investigate incidents and monitor policy violations without switching between multiple tools, improving operational efficiency; however, the dashboard customization and reporting could be more flexible."

"I am currently doing a PoC of the zero trust aspect of it. Compared to other similar solutions, it is hard to get around each feature. It takes a while to get used to it."

"Its pricing could be better."

"If they could implement an extra security layer preventing access to iboss from the open internet, it would be great."

"The reporting feature needs improvement."

"I would like to see simpler dashboards, more detailed reporting, and faster performance in iboss."

"Sometimes, obviously, there are bugs."

More iboss cons

"Integration with existing infrastructure was generally easy, especially if you had tools like LDAP. However, I had to go through a lot of documentation as it was my first time working with a proxy server. We did experience some issues with certain web applications not working properly after implementing Fortinet FortiProxy."

"For IT administrators and managers, the reporting features are the main issues that should be addressed in order to improve the performance, security, and effective utilization of the product."

"The hardware version is stable, but the VM version is not stable and contains bugs that cause issues."

"Fortinet FortiProxy should integrate AI/ML technologies. Its pricing needs to be more flexible."

"Its power supply process for some of the proxies needs improvement."

"For me it may be the wildcards for URLs whitelist or blacklist, somehow the page loads."

"Its web filtering capabilities could be improved."

"I see that the solution's interface is not in French...It would be good for our company if we could have the tool interface in French."

More Fortinet FortiProxy cons

"When it comes to integration mechanisms, Prisma SaaS does not support reverse proxy type of integrations."

"While Palo Alto has understood the essence of building capabilities around cloud technology and have come up with a CASB offering, that is a very new product. There are other companies that have better offerings for understanding cloud applications and have more graceful controls. That's something that Palo Alto needs to work on."

"In general, it is good, but everything could be a little bit better. For example, they are working on including more data to catch or trying to reduce the gaps between the matches."

"The price can be reduced to make it more competitive."

"Palo Alto needs to improve the GlobalProtect agent to work as a secure web gateway agent, not only as a VPN agent because some companies would want only a secure gateway. They wouldn't want a full VPN. So, Palo Alto has to make the VPN agent work as a secure web gateway agent for those customers who want only the secure web gateway solution."

"I would like the solution to support a different type of authentication. We can't configure a secondary method for our portal."

"The product's current price is an area of shortcoming where improvements are required."

"When you sell a product by saying that it's cloud-native and that users can make all configuration changes on-the-fly, when those changes are made they should happen within a minute."

More Prisma Access by Palo Alto Networks cons

Pricing and Cost Advice

"We have not priced the solution recently, but they were competitive with other vendors in the past."

"We had the cost of purchasing a new appliance along with the implementation and licensing costs. However, the following year, the cost of just licensing was similar to what was paid the previous year for a new appliance along with the implementation and licensing costs."

"It is not expensive, and it is also not cheap. iboss is priced right in the sweet spot for the number of features it offers."

"It is probably in line with other solutions, but I do not deal with the financial side."

"The overall pricing for iboss is very competitive and transparent."

"It is expensive compared to one of its competitors."

"Price-wise, Fortinet FortiProxy is moderate - not the highest among competitors, but not cheap either."

"The solution is neither too expensive nor very cheap."

"It offers a more cost-effective solution than alternatives like FortiMail, FortiGate, and various Barracuda devices."

"It is a cost-effective solution."

"It can be considered expensive, with a limited lifespan and support that eventually requires updating to newer solutions."

"The tool's pricing is in the middle."

"Prisma Access by Palo Alto Networks is an expensive solution, especially when compared to other solutions like Cisco. There are no additional charges apart from the standard licensing costs attached to the solution."

"Palo Alto is the Cadillac solution, so their products are pretty expensive. That's just the way it is. Their solution surpasses anything else. Cisco AnyConnect, Zscaler, and all of the other products don't compare. Palo Alto is the market leader with the most features. It saves you work, and you don't have to worry about it."

"We have to pay additional costs for maintenance and support services."

"They price their products using credit modules."

"The price has been good for the ROI during these difficult times for the cruise industry. There are no hidden costs; what the product offers is what you get."

"This is not an expensive product and everything is included with one license."

"The solution is expensive."

"The solution requires a license and the technical support has extra costs. The licensing model could improve."

More Prisma Access by Palo Alto Networks pricing and cost advice

See which vendors are best for you

Use our free recommendation engine to learn which Secure Web Gateways (SWG) solutions are best for your needs.

See recommendations

921,148 professionals have used our research since 2012.

Top Industries

By visitors reading reviews

Financial Services Firm

10%

Manufacturing Company

10%

Comms Service Provider

Construction Company

Financial Services Firm

12%

Computer Software Company

10%

Comms Service Provider

Construction Company

Manufacturing Company

10%

Financial Services Firm

10%

Outsourcing Company

Comms Service Provider

Company Size

By reviewers

Large Enterprise

Midsize Enterprise

Small Business

By reviewers
Company Size	Count
Small Business	15
Midsize Enterprise	8
Large Enterprise	16

By reviewers
Company Size	Count
Small Business	7
Midsize Enterprise	1
Large Enterprise	3

By reviewers
Company Size	Count
Small Business	26
Midsize Enterprise	20
Large Enterprise	27

Questions from the Community

What needs improvement with iboss?

iboss could be improved by making the dashboard more user-friendly, providing more detailed real-time alerts, and imp...

See all answers

What is your primary use case for iboss?

iboss is primarily used for cloud security, helping to protect users when they access websites and cloud applications...

See all answers

What is your experience regarding pricing and costs for iboss?

The pricing and licensing for iboss were reasonable for the security features. The setup costs were manageable, thoug...

See all answers

What needs improvement with Fortinet FortiProxy?

For me it may be the wildcards for urls whitelist or blacklist, somehow the page loads. Aside from that there no other..

See all answers

What advice do you have for others considering Fortinet FortiProxy?

My advice to others who are considering Fortinet FortiProxy is that it is seamless, easy to use, and quite straightfo...

See all answers

What is your primary use case for Fortinet FortiProxy?

The main use cases for the Fortinet FortiProxy are to segment internet access among departments, as not every departm...

See all answers

What is the better solution - Prisma Access or Zscaler Private Access?

We looked into Prisma Access before choosing Zscaler Private Access (ZPA). Palo Alto’s Prisma Access is a secure ac...

See all answers

What is your experience regarding pricing and costs for Prisma Access by Palo Alto Networks?

From my experience, Palo Alto is more expensive compared to solutions like Netskope and Triscale.

See all answers

What needs improvement with Prisma Access by Palo Alto Networks?

Regarding the integration part for Prisma Access by Palo Alto Networks, the integration with identity providers is pr...

See all answers

Comparisons

Netskope vs iboss

Compared 8% of the time

Fortinet FortiGate vs iboss

Compared 7% of the time

Cisco Umbrella vs iboss

Compared 6% of the time

FortiSASE vs iboss

Compared 6% of the time

Zscaler Internet Access vs iboss

Compared 5% of the time

More iboss Competitors

Forcepoint Secure Web Gateway vs Fortinet FortiProxy

Compared 18% of the time

Fortinet FortiGate vs Fortinet FortiProxy

Compared 15% of the time

Cisco Web Security Appliance vs Fortinet FortiProxy

Compared 12% of the time

McAfee Web Gateway Cloud Service vs Fortinet FortiProxy

Compared 6% of the time

More Fortinet FortiProxy Competitors

Netskope vs Prisma Access by Palo Alto Networks

Compared 13% of the time

FortiSASE vs Prisma Access by Palo Alto Networks

Compared 5% of the time

Appgate SDP vs Prisma Access by Palo Alto Networks

Compared 4% of the time

Cato SASE Cloud Platform vs Prisma Access by Palo Alto Networks

Compared 4% of the time

Fortinet FortiGate vs Prisma Access by Palo Alto Networks

Compared 2% of the time

More Prisma Access by Palo Alto Networks Competitors

Product Reports

Buyer's Guide

iboss

October 2026

Download iboss product report

Buyer's Guide

Fortinet FortiProxy

November 2026

Download Fortinet FortiProxy product report

Buyer's Guide

Prisma Access by Palo Alto Networks

October 2026

Prisma Access by Palo Alto Networks report

Download Prisma Access by Palo Alto Networks product report

Also Known As

iBoss Cloud Platform

FortiProxy

Palo Alto Networks Prisma Access, Prisma Access, GlobalProtect, Palo Alto GlobalProtect Mobile Security Manager, Prisma SaaS by Palo Alto Networks, Prisma Access

Overview

iboss is the Zero Trust SASE platform that gives organizations complete visibility and governance over their AI, data, and applications through one unified platform, one console, one policy engine, and one data lake.

Your endpoints may already stop malware. Your data and application activity can still be invisible. iboss decrypts and understands every connection, then turns that signal into answers security leaders can act on.

The platform leads with three capabilities in this order: AI Security and Visibility, Data Security and Visibility, and App Visibility and Control. Zero Trust Network Access, VPN replacement, and SD-WAN sit underneath as the access fabric that carries those three. Trusted by global enterprises and government agencies.

What are the most important features of Iboss?

- AI Security and Visibility: conversation capture, shadow-AI discovery, AI DLP, and agent governance across Claude, Co-Work, ChatGPT, Gemini, and Grok, and emerging services.

- Data Security and Visibility: full SSL/TLS decryption, deep content inspection, MIP label compliance, and one-click compliance reporting.

- App Visibility and Control: signatureless CASB, dual risk scoring, in-app controls, and SSPM for major SaaS.

- Containerized Zero Trust SASE: dedicated containers, isolated SSL keys, one console, one policy engine, one data lake.

- Access fabric: ZTNA, VPN replacement, and SD-WAN under the same platform.

What benefits should users consider in reviews?

- Complete visibility over AI, data, and applications from one platform instead of separate point tools.

- Encrypted traffic is inspected by default so data decisions use content and context together.

- Shadow SaaS and new web tools appear as they are used, with enforceable controls in one console.

- Native data sovereignty through dedicated containers, in-region inspection, and per-customer SSL key custody.

- Scale proven in published materials: 10M+ users, 100+ countries, 150B+ transactions, 2.5B+ threats blocked.

Economic buyers are CISOs, CIOs, and VPs of Security. Champions include security architects, network and infrastructure leaders, SecOps, and GRC. Primary segments: enterprise and business, financial services, government (including FedRAMP Gov Cloud), healthcare, manufacturing, legal and professional services, retail and hospitality, and MSP/MSSP partners. Education, including K-12, is one vertical among these.

iboss

Fortinet FortiProxy provides simplicity and high performance with notable traffic inspections and user-friendly features. It integrates with security products to enhance threat intelligence, ensuring secure and efficient network management.

Fortinet FortiProxy is designed to enhance network security through exceptional traffic inspections, intrusion prevention, and antivirus capabilities. Its user-friendly nature allows for granular application and DNS control, deep packet inspection, and detailed access control. Administrators can implement precise policies to manage web access, integrating seamlessly with other security solutions. Offering proactive alarms and caching capabilities, FortiProxy optimizes bandwidth usage while ensuring robust network defense.

What are the key features of Fortinet FortiProxy?

Traffic Inspections: High-performance inspection to secure web traffic.
Intrusion Prevention: Proactively detects and blocks threats.
Antivirus Profiles: Offers robust protection against viruses.
Application and DNS Control: Provides detailed control over applications and DNS settings.
Deep Packet Inspection: Ensures comprehensive inspection of packet content.
Access Control: Enables precise management of user access.

What benefits or ROI should users investigate?

Security Enhancement: Improved protection from web-based threats.
Network Efficiency: Optimized bandwidth through effective caching.
Integration Capabilities: Seamless interaction with other security products.
User-Friendly Management: Simplified administration with granular controls.

In industries focused on maintaining high-level internet security, Fortinet FortiProxy is employed for comprehensive traffic inspections and segmentation. It supports antivirus additions and secure connectivity, serving as a robust web security gateway. Organizations benefit from seamless authentication using Fortinet Single Sign-On, crucial for protecting users from threats and enabling efficient network operations.

Fortinet

Prisma Access by Palo Alto Networks delivers robust security features including secure remote access across apps and traffic monitoring. It integrates smoothly with cloud environments to provide advanced threat protection and visibility into network traffic.

Prisma Access offers a comprehensive suite of security tools designed to protect cloud environments and remote workforces. With its focus on real-time risk identification and threat prevention, Prisma Access provides encrypted tunnels and centralized management for seamless connectivity and enhanced data security. Designed to scale across platforms like AWS, Azure, and GCP, it optimizes traffic and connectivity while offering extensive visibility into vulnerabilities. However, integration with third-party products, usability, and support services are areas for development, as users report interface challenges and desire improved scalability and geographic coverage, especially in regions like China and South America.

What are the key features of Prisma Access?

Real-Time Risk Identification: Detects and manages potential threats instantly.
Secure Remote Access: Ensures secure connectivity to applications from anywhere.
Traffic Monitoring: Provides comprehensive oversight of network traffic.
Seamless Integration: Works well with platforms like AWS, Azure, and GCP.
Firewall Capabilities: Blocks unauthorized access and threats.
Scalability: Adapts to various cloud environments to meet growing demands.

What benefits should users expect when evaluating Prisma Access?

Reduced Data Breach Risk: Protects sensitive information through encrypted connections.
User-Friendly Interface: Simplifies management and configuration tasks.
Centralized Management: Offers a single view for managing all security policies.
Advanced Threat Protection: Regular updates guard against new threats.

Prisma Access is effectively used in industries requiring secure remote access and stringent data protection, such as finance and healthcare. Organizations leverage it to enforce Zero Trust policies, optimize network performance with SD-WAN, and ensure security compliance across multiple platforms.

Palo Alto Networks

Sample Customers

Trusted by global enterprises and government agencies.

Information Not Available

Concord Hospital, State of Colorado, Essilor International, RheinLand Versicherungsgruppe, University of Westminster, Universidade Nove de Julho, SPAR Austria, CAME Group, ZipRealty, Greenhill & Co., IKT Agder, Aviva Stadium, Animal Logic, Management & Training Corporation, Brigham Young University Hawaii, School District of Chilliwack

Buyer's Guide

Fortinet FortiProxy vs. Prisma Access by Palo Alto Networks

November 2026

Free Report: Fortinet FortiProxy vs. Prisma Access by Palo Alto Networks

Find out what your peers are saying about Fortinet FortiProxy vs. Prisma Access by Palo Alto Networks and other solutions. Updated: November 2026.

DOWNLOAD NOW

921,148 professionals have used our research since 2012.

See our Fortinet FortiProxy vs. Prisma Access by Palo Alto Networks report.

See our list of best Secure Web Gateways (SWG) vendors.

We monitor all Secure Web Gateways (SWG) reviews to prevent fraudulent reviews and keep review quality high. We do not post reviews by company employees or direct competitors. We validate each review for authenticity via cross-reference with LinkedIn, and personal follow-up with the reviewer when necessary.