Menlo Secure vs Sangfor Internet Access Gateway (IAG) comparison

Menlo Secure vs. Sangfor Internet Access Gateway (IAG)

Download the complete report

Helped 915,341 peers since 2012

Review summaries and opinions

We asked business professionals to review the solutions they use. Here are some excerpts of what they said:

Categories and Ranking

iboss

Mindshare comparison

As of October 2026, in the Secure Web Gateways (SWG) category, the mindshare of iboss is 3.2%, up from 2.2% compared to the previous year. The mindshare of Menlo Secure is 2.3%, up from 1.6% compared to the previous year. The mindshare of Sangfor Internet Access Gateway (IAG) is 1.0%, up from 0.8% compared to the previous year. It is calculated based on PeerSpot user engagement data.

Secure Web Gateways (SWG) Mindshare Distribution
Product	Mindshare (%)
iboss	3.2%
Menlo Secure	2.3%
Sangfor Internet Access Gateway (IAG)	1.0%
Other	93.5%

Secure Web Gateways (SWG)

Featured Reviews

Ashok Ananthula

Senior Consultant Proxy Engineering at a financial services firm with 10,001+ employees

Cloud gateway has strengthened remote web security and now needs better Mac and ISP support

The problem our organization had is that iboss failed for the Mac devices. It is not able to give a successful agent for the Mac agents. That is where in 2025, we had to migrate to the Palo Alto-based platform. If your use case is for just Windows laptops,you can consider this platform as an option One issue is the data center resiliency part. In India especially, they are not tied up with the Tier 1 ISPs like Tata or Airtel; they were having Tier 2 ISPs and encountered many issues reaching few major sites that my organization depends on, and they were having problems that they could not fix quickly. They also lack a mechanism to route that traffic within their data center; rather, they ask customers to make a pac file change to route it to Singapore explicitly. It would be better if they route from their backend , i mean even if I send it to India DC, they should be able to route it internally to make that work; however, they fail to do that and ask the customer to route it in the pac file. Another suggestion is that in China, they do not have the proper setup; they used to have numerous problems with slowness and lack of premium circuits in China as well. That leads to multiple sites working slowly with latency-related issues. So the main issue is the ISP-related problems that need to be solved.

Read full review

reviewer2701794

Head Of Bluechip Enterprise at a manufacturing company with 51-200 employees

Provides strong protection and multiple use cases but struggles with market recognition

There aren't specific areas for improvement; however, they're not as well known as the big vendors such as Palo Alto. Menlo Secure is a smaller company with limited resources and funding, which makes it challenging to compete with larger companies such as Palo and Cisco. What can be improved is market awareness and adoption of the technology. When selling it in the channel, regardless of how good the technology might be, success depends more on market adoption and awareness.

Read full review

Muhammad Asif Shaikh

Deputy GM - IT at a manufacturing company with 1,001-5,000 employees

Designed to provide comprehensive and secure internet access with high visibility into users

After my purchase, I noticed a need for improvements, particularly in the area of identifying the source user of the device, which can sometimes roll back to the base. Additionally, there were challenges with SSL gate traffic, which wasn't functioning as effectively as expected. Even though there have been fixes to these issues, they should be inherent to the product and need further attention. These aspects, especially sub-features, aren't very robust and seem complex. Regarding integration, while Sangfor Internet Access Gateway (IAG) integrates well with its own products, its compatibility with third-party tools like QB is limited. There's room for improvement in making protocols compatible with various third-party products.

Read full review

Quotes from Members

We asked business professionals to review the solutions they use. Here are some excerpts of what they said:

Pros

"iboss is among the few products providing inline filtering where no application is needed on the device. It operates on the network side and is not device-based. This feature was one of the main reasons why we stayed with them for so long."

"Valuable features: Within the filter: Controls (Web categories, applications, and Allow/Block list) and Network (local Subnets). Within the reporter: Logs (Event Log) and Reports."

"I would say iboss is a very good product; its scalability is very good, and it's seamless for the user."

"Our primary use case for this product is DLP,"

"First of all, the security policies are essential. I do not have to rely solely on Active Directory for our users."

"Content filtering is the most useful feature of iboss."

"Granular setup, which was able to set different levels of filters using the OUs in the AD."

"The console is cloud-based, which is something I really appreciate."

More iboss pros

"Accessing the internet with a proxy from anywhere is the most valuable feature. It ensures that users are only able to browse legitimate websites. If they happen to go to a legitimate website with a malicious payload, the isolation feature will take care of that."

"This security technology addresses risk and enables people to conduct business without that risk, which is where the ROI is realized."

"The fact that it is a cloud proxy solution is another feature we like. For example, if you acquire a new company, you can use it to protect that new company without the need to install anything physically on their networks."

"The solution is invisible to our end users, so it doesn't have any impact on their work or performance."

"Either you have access to something or don't have access to it, and if you do, we can ensure, 100 percent of the time, that there is nothing malicious that is going to impact our system in any way."

"We have definitely seen ROI, as we save a ton of money and time because the numerous hits that we were receiving from our security tools prior to implementing them had to all be chased down, dispositioned, and endpoints had to be reimaged."

"For us, the primary goal is protection on the web, and that's extremely important. We're not using any of the other services at this time. The web part is key to the success of the organization. It gives us the ability to protect. It can isolate. It opens the session in an isolated format so that the code isn't running locally. It is running over in the Menlo environment, not in ours. It is not running on the local computer, whereas if you were to go to a normal website, it would run Java or something else on the local machine and potentially execute the malicious code locally. So, it does give us that level of protection."

"It has reduced security events to follow up on. While it is not 100%, there has been probably a 90% or more reduction. We were getting hit left, right, and center constantly from people browsing the Internet and hitting bad websites. It was not just bad websites that were stood up to be malicious, but good sites that were compromised."

More Menlo Secure pros

"Stability-wise, I rate the solution a ten out of ten."

"The most significant aspect is the control it offers over internet traffic, like managing computer access to specific sites such as Facebook. I find particular value in its ability to control the depth of internal traffic, enabling actions like blocking specific file extensions on social media or specific IPs. This control by categories is a standout feature for us in Sangfor Internet Access Gateway (IAG)."

"The solution is interoperable and has centralized management."

Cons

"One thing I would like to see differently with their Zero Trust platform is that some of the AI aspects related to high-risk activities have more false positives."

"Sometimes, obviously, there are bugs."

"It is stable, but due to growth, it can sometimes be less stable than wanted."

"If they could implement an extra security layer preventing access to iboss from the open internet, it would be great."

"The dashboards for local use could be better."

"I'd like to see them accelerate development on the security side, particularly around data loss prevention."

"For zero trust implementation, we encountered complexity issues, especially with a large infrastructure company ExxonMobil."

"I appreciate that iboss's single pane of glass console gives centralized visibility into web traffic, user activity, security policies, and alerts from one dashboard, allowing us to quickly investigate incidents and monitor policy violations without switching between multiple tools, improving operational efficiency; however, the dashboard customization and reporting could be more flexible."

More iboss cons

"In the best of all worlds, we wouldn't have to make any exceptions. However, that is a big ask because a lot of that depends on how websites are constructed. For example, there are some very complex, application-oriented sites that we end up making exceptions for. It is really not that big an issue for us to make the exceptions. We feel like we are doing that without a huge impact on our security posture, but we do have to make some exceptions for complex sites, e.g., mostly SaaS-type sites and applications."

"Menlo Secure is a smaller company with limited resources and funding, which makes it challenging to compete with larger companies such as Palo and Cisco."

"The user monitoring could still be improved."

"Currently, I don't have a good way to see which of my rules are being used in the access control lists. I have numerous entries, but are they all still needed? A report that would show me my list of who is allowed and whether we're actually using it would be useful because I can then go clean up my list. It would be easier to manage. We would eliminate the vulnerability of unused services."

"Currently, I don't have a good way to see which of my rules are being used in the access control lists."

"We are now transitioning to another solution. The main reason for that is that managing all of the exceptions and troubleshooting all of the issues our users have had connecting to the internet has become too significant in terms of workload, compared to what we hope we will have with another solution."

"The solution's logging system should be improved because its logs are not precise and are a little confusing."

"After my purchase, I noticed a need for improvements, particularly in the area of identifying the source user of the device, which can sometimes roll back to the base. Additionally, there were challenges with SSL gate traffic, which wasn't functioning as effectively as expected. Even though there have been fixes to these issues, they should be inherent to the product and need further attention. These aspects, especially sub-features, aren't very robust and seem complex. Regarding integration, while Sangfor Internet Access Gateway (IAG) integrates well with their own products, its compatibility with third-party tools like QB is limited. There's room for improvement in making protocols compatible with various third-party products."

"In Sangfor Internet Access Gateway (IAG), its speed is an area of concern where improvements are required."

Pricing and Cost Advice

"It is not expensive, and it is also not cheap. iboss is priced right in the sweet spot for the number of features it offers."

"It is expensive compared to one of its competitors."

"We have not priced the solution recently, but they were competitive with other vendors in the past."

"It is probably in line with other solutions, but I do not deal with the financial side."

"We had the cost of purchasing a new appliance along with the implementation and licensing costs. However, the following year, the cost of just licensing was similar to what was paid the previous year for a new appliance along with the implementation and licensing costs."

"The overall pricing for iboss is very competitive and transparent."

"The solution is expensive. It's more expensive than the solution I previously used. Compared with the other cloud-based solutions, it's very competitive."

"We save a ton of money and time. Previously, the numerous hits that we were receiving from our security tools, prior to implementing them, had to all be chased down, dispositioned, and endpoints had to be reimaged. It was just a ton of effort to do all that. That is where the savings from time and money come in."

"It is appropriately priced for what they're doing for us. Considering the protection provided, I feel their pricing is spot-on."

"It is one of the reason for choosing it over other available products. However, recently, this year, there have been recurring concerns. I believe we might consider migrating to another solution."

"I rate the product pricing a five or six out of ten on a scale of one to ten."

"The solution’s pricing is cheaper than any other solution."

See which vendors are best for you

Use our free recommendation engine to learn which Secure Web Gateways (SWG) solutions are best for your needs.

See recommendations

915,341 professionals have used our research since 2012.

Top Industries

By visitors reading reviews

Financial Services Firm

11%

Manufacturing Company

10%

Comms Service Provider

Construction Company

Manufacturing Company

14%

Construction Company

11%

Outsourcing Company

Comms Service Provider

11%

Educational Organization

10%

Construction Company

10%

Financial Services Firm

10%

Company Size

By reviewers

Large Enterprise

Midsize Enterprise

Small Business

By reviewers
Company Size	Count
Small Business	13
Midsize Enterprise	7
Large Enterprise	11

No data available

Questions from the Community

What needs improvement with iboss?

I think iboss could be improved by making reporting and dashboard customization more flexible, and simplifying troubl...

What is your primary use case for iboss?

I use iboss as a cloud-based secure web gateway to provide secure internet access, web filtering, and protect remote ...

What is your experience regarding pricing and costs for iboss?

My experience with iboss's pricing structure, setup cost, and licensing model has been positive, straightforward, and...

What needs improvement with Menlo Security Secure Web Gateway?

There aren't specific areas for improvement; however, they're not as well known as the big vendors such as Palo Alto....

What is your primary use case for Menlo Security Secure Web Gateway?

People are mainly using it for zero trust web access. Menlo Secure is built from the ground up to provide zero basic ...

What advice do you have for others considering Menlo Security Secure Web Gateway?

Secure file sharing and data protection is not exactly what Menlo Secure is designed to do. While it can handle some ...

Prisma Access by Palo Alto Networks vs iboss

Ask a question

Earn 20 points

Comparisons

Compared 10% of the time

Netskope vs iboss

Compared 8% of the time

Fortinet FortiGate vs iboss

Compared 8% of the time

Cisco Umbrella vs iboss

Compared 6% of the time

FortiSASE vs iboss

Compared 6% of the time

More iboss Competitors

Prisma Access Browser vs Menlo Secure

Compared 12% of the time

Check Point Harmony SASE (formerly Perimeter 81) vs Menlo Secure

Compared 12% of the time

Netskope Next Gen Secure Web Gateway vs Menlo Secure

Compared 10% of the time

Cloudflare One vs Menlo Secure

Compared 9% of the time

Cisco Web Security Appliance vs Menlo Secure

Compared 2% of the time

More Menlo Secure Competitors

Fortinet FortiGate vs Sangfor Internet Access Gateway (IAG)

Compared 29% of the time

Cisco Umbrella vs Sangfor Internet Access Gateway (IAG)

Compared 20% of the time

Skyhigh Security vs Sangfor Internet Access Gateway (IAG)

Compared 10% of the time

Fortinet FortiProxy vs Sangfor Internet Access Gateway (IAG)

Compared 9% of the time

Forcepoint Secure Web Gateway vs Sangfor Internet Access Gateway (IAG)

Compared 8% of the time

More Sangfor Internet Access Gateway (IAG) Competitors

Product Reports

iboss

Download iboss product report

Menlo Secure

Download Menlo Secure product report

Secure Web Gateways (SWG)

Download Sangfor Internet Access Gateway (IAG) product report

Sangfor Internet Access Gateway (IAG) report

Also Known As

iBoss Cloud Platform

Menlo Security Web Security, Menlo Web Security

No data available

Overview

iboss is the Zero Trust SASE platform that gives organizations complete visibility and governance over their AI, data, and applications through one unified platform, one console, one policy engine, and one data lake.

Your endpoints may already stop malware. Your data and application activity can still be invisible. iboss decrypts and understands every connection, then turns that signal into answers security leaders can act on.

The platform leads with three capabilities in this order: AI Security and Visibility, Data Security and Visibility, and App Visibility and Control. Zero Trust Network Access, VPN replacement, and SD-WAN sit underneath as the access fabric that carries those three. Trusted by global enterprises and government agencies.

What are the most important features of Iboss?

- AI Security and Visibility: conversation capture, shadow-AI discovery, AI DLP, and agent governance across Claude, Co-Work, ChatGPT, Gemini, and Grok, and emerging services.

- Data Security and Visibility: full SSL/TLS decryption, deep content inspection, MIP label compliance, and one-click compliance reporting.

- App Visibility and Control: signatureless CASB, dual risk scoring, in-app controls, and SSPM for major SaaS.

- Containerized Zero Trust SASE: dedicated containers, isolated SSL keys, one console, one policy engine, one data lake.

- Access fabric: ZTNA, VPN replacement, and SD-WAN under the same platform.

What benefits should users consider in reviews?

- Complete visibility over AI, data, and applications from one platform instead of separate point tools.

- Encrypted traffic is inspected by default so data decisions use content and context together.

- Shadow SaaS and new web tools appear as they are used, with enforceable controls in one console.

- Native data sovereignty through dedicated containers, in-region inspection, and per-customer SSL key custody.

- Scale proven in published materials: 10M+ users, 100+ countries, 150B+ transactions, 2.5B+ threats blocked.

Economic buyers are CISOs, CIOs, and VPs of Security. Champions include security architects, network and infrastructure leaders, SecOps, and GRC. Primary segments: enterprise and business, financial services, government (including FedRAMP Gov Cloud), healthcare, manufacturing, legal and professional services, retail and hospitality, and MSP/MSSP partners. Education, including K-12, is one vertical among these.

iboss

Menlo Security Secure Application Access

Menlo Security Secure Application Access makes zero trust access easy, giving users secure connectivity to private applications, including web and legacy applications. At the core of Secure Application Access is the Menlo Secure Cloud Browser, which fetches, secures and delivers the content for users.

In addition to providing simple-to-deploy, clientless ZTA, Secure Application Access and the Menlo Secure Cloud Browser protect applications from attacks such as session hijacking, cookie manipulation, and other tactics that employ protocol manipulation.

Secure Application Access protects applications from Internet threats and provides granular controls for added protection of the application and associated data. These security controls include Read-only/Read-write, Upload/download, Copy/paste, AV scanning, Sandboxing, and Data Loss Prevention.

Last Mile Data Protection

Menlo Last-Mile Data Protection identifies and prevents sensitive data from leaving your company by meticulously inspecting all file uploads and user input across browsing sessions. Leveraging the Secure Cloud Browser, users are protected from the internet and you can protect your organization from data loss with comprehensive traffic monitoring and controls. This approach addresses the growing concerns surrounding data leakage in the age of AI tools like ChatGPT.

By identifying sensitive data through file types, regular expressions, or predefined libraries, Menlo Last-Mile Data Protection empowers security teams to regulate data input into AI platforms and prevent unauthorized uploads. This capability provides crucial protection for intellectual property, PII, and other confidential information.

The solution leverages the Menlo Cloud Security Platform's visibility and control over traffic to reliably detect and prevent data leaks originating from both browser submission forms and non-browser traffic. With the ability to inspect encrypted web traffic, Menlo Last-Mile Data Protection enforces DLP policies consistently across all users and devices, ensuring comprehensive data protection.

Menlo Security

Sangfor Internet Access Gateway (IAG) enhances network security and control with its reliable internet management functions, catering to enterprises seeking robust solutions. It optimizes bandwidth utilization and offers comprehensive traffic analysis, making it a choice option for IT professionals.

Sangfor IAG addresses critical security needs while providing detailed insights into internet activities. It stands out for its integrated functionalities that ensure high data security and seamless network performance. Designed for ease of use, it simplifies administration and policy management, thus facilitating organizational efficiency. With its advanced threat protection, it ensures compliance and reduces security threats.

What are the key features of Sangfor IAG?

Bandwidth Management: Optimizes and allocates bandwidth to ensure smooth network operations.
Behavior Management: Monitors and controls user activities to enhance productivity.
Traffic Analysis: Provides detailed reports for comprehensive understanding of network usage.
Access Control: Implements security policies that restrict unauthorized access.

What benefits should users consider in reviews?

Enhanced Security: Offers robust protection against network threats and vulnerabilities.
Cost Efficiency: Reduces overhead costs with efficient bandwidth management.
Improved Productivity: Allows businesses to tailor network access to boost efficiency.
Ease of Use: Simplifies network management with user-friendly interfaces.

Sangfor IAG is effectively used across industries like education and finance. Educational institutions utilize it for controlling student access to online resources, while financial sectors rely on its security features to protect sensitive client data. Its adaptability makes it suitable for diverse business environments.

Sangfor

Sample Customers

Trusted by global enterprises and government agencies.

Information Not Available

Menlo Secure vs. Sangfor Internet Access Gateway (IAG)