Try our new research platform with insights from 80,000+ expert users

Netskope Next Gen Secure Web Gateway vs Prisma Access by Palo Alto Networks comparison

Sponsored
 

Comparison Buyer's Guide

Executive SummaryUpdated on Dec 4, 2024

Review summaries and opinions

We asked business professionals to review the solutions they use. Here are some excerpts of what they said:
 

Categories and Ranking

iboss
Sponsored
Ranking in Secure Web Gateways (SWG)
5th
Average Rating
8.4
Reviews Sentiment
7.1
Number of Reviews
19
Ranking in other categories
Internet Security (3rd), Web Content Filtering (1st), Cloud Access Security Brokers (CASB) (7th), ZTNA as a Service (8th), Secure Access Service Edge (SASE) (8th)
Netskope Next Gen Secure We...
Ranking in Secure Web Gateways (SWG)
20th
Average Rating
8.8
Reviews Sentiment
7.4
Number of Reviews
14
Ranking in other categories
No ranking in other categories
Prisma Access by Palo Alto ...
Ranking in Secure Web Gateways (SWG)
3rd
Average Rating
8.4
Reviews Sentiment
7.0
Number of Reviews
64
Ranking in other categories
Cloud Access Security Brokers (CASB) (1st), Enterprise Infrastructure VPN (6th), ZTNA as a Service (2nd), Secure Access Service Edge (SASE) (2nd)
 

Mindshare comparison

As of September 2025, in the Secure Web Gateways (SWG) category, the mindshare of iboss is 2.2%, up from 1.8% compared to the previous year. The mindshare of Netskope Next Gen Secure Web Gateway is 2.2%, up from 2.0% compared to the previous year. The mindshare of Prisma Access by Palo Alto Networks is 11.1%, up from 10.4% compared to the previous year. It is calculated based on PeerSpot user engagement data.
Secure Web Gateways (SWG) Market Share Distribution
ProductMarket Share (%)
Prisma Access by Palo Alto Networks11.1%
iboss2.2%
Netskope Next Gen Secure Web Gateway2.2%
Other84.5%
Secure Web Gateways (SWG)
 

Featured Reviews

Matt Crockford - PeerSpot reviewer
It's easy to roll out, and their understanding of our business made it seamless
One aspect we value about iboss is its simplicity. Their customer service is brilliant, and they are super responsive and knowledgeable. It's easy to roll out, and their understanding of our business made it seamless. We were impressed by the solution's mental health function, which can detect if someone needs help. It scans what users are browsing and flags warning signs so we can check to see if they are okay. We've had to use it a couple of times. The user interface is highly intuitive. Our IT team picked it up with minimal training. It's arranged so that it's easy to find where things are. Another advantage is the single pane of glass console, which gives you visibility into what's happening. We're not fully there yet because we haven't implemented zero trust, but we're excited about the possibilities from the demos we've seen. We launched a POC of iboss' ChatGPT Risk Protection feature two weeks ago. AI is a great tool, but you need to be careful what you put into it. My biggest fear is employees inputting sensitive corporate information or customer PII data into one of these chatbots. I was impressed by our trial of the feature. It's exactly what we wanted. Now, when a user goes to ChatGPT, there's a banner warning them not to share information, and we can block conversations containing customer data like bank details and email addresses. I don't want to stop people from using it, but we need visibility. We've only tried it on a test group of 15 people. You can configure it to look for specific keywords or integrate it with your DLP policy if you have that configured
Ernst (Eric) Goldman - PeerSpot reviewer
Designed to enforce architecture governance, ensuring traceable SaaS traffic
Netskope provides vigorous policy enforcement for SaaS platforms based on how we configure it, but its vulnerability management and threat intelligence capabilities could be stronger. We rely on external sources to become aware of vulnerabilities in major SaaS platforms, which highlights a gap. It would be beneficial if Netskope offered more robust vulnerability management or integrated threat intelligence through in-house development or partnerships. This would allow for a better policy setup without needing external threat intelligence to configure Netskope. Adding these features would enhance its overall value. I would suggest making some minor improvements to the interface to make it more intuitive, but those are primarily cosmetic. In terms of actual features, the only significant enhancement I could think of, besides better threat intelligence, would be for Netskope to assess the general SaaS landscape. This could include a scorecard showing the security posture of various SaaS platforms based on their track record with breaches and vulnerabilities. I understand this could create friction with SaaS providers if some receive poor scores, which might impact their relationship with Netskope. If Netskope were to harness machine learning more effectively and share those models transparently with enterprise customers, this could include making traffic data they already collect available for deeper analytics, allowing customers to gain better insights into employee traffic patterns. It could also assist with network operations by helping to fine-tune performance based on traffic flow, even though the primary purpose of analyzing that data is security-related. Providing more advanced analytics using existing data could significantly enhance its value to enterprises.
Amar-Patil - PeerSpot reviewer
Enables seamless policy management and supports secure remote work
Our primary use case for Prisma Access by Palo Alto Networks is to control the internet and serve as an internet proxy. Additionally, we use it for secure remote work One of the most valuable features of Prisma Access by Palo Alto Networks is the ability to manage on-premise firewalls. We can…

Quotes from Members

We asked business professionals to review the solutions they use. Here are some excerpts of what they said:
 

Pros

"The solution has massively improved our security posture, giving us full visibility into what our staff does online."
"The console is cloud-based, which is something I really appreciate."
"Valuable features: Within the filter: Controls (Web categories, applications, and Allow/Block list) and Network (local Subnets). Within the reporter: Logs (Event Log) and Reports."
"Because of iboss, I did not have to assign web filtering tasks to my techs on a daily basis."
"Our primary use case for this product is DLP,"
"iboss is among the few products providing inline filtering where no application is needed on the device. It operates on the network side and is not device-based. This feature was one of the main reasons why we stayed with them for so long."
"We were impressed by the solution's mental health function, which can detect if someone needs help. It scans what users are browsing and flags warning signs so we can check to see if they are okay. We've had to use it a couple of times."
"The security aspect of the solution, particularly the malware behind it, is excellent. That's something that really helped us out. It's not just a simple proxy that just blocks the insights of potential threats that come on behind it. They do malware detection and that helps us a lot."
"The solution offers good security functionality."
"We can connect cloud apps and monitor them."
"We've found the solution to be quite stable."
"It is for secure web trafficking, and it is doing what it needs to do. It allows customers to consolidate and eliminate multiple technologies onto Netskope and just kind of turn the dial and use more features, such as CASB, VPN. SWG is another feature. You can monitor and govern all the traffic."
"One of the valuable features of the solution is that everything is on the cloud. It has no on-premise hardware to deal with."
"There are a lot of features, but the groups that are created for the policy groups available with Netskope are already relevant to any industry. So grouping the policies is the easiest part and a valuable feature."
"The most valuable features of the solution are its three modules, which are SWG, ZTNA, and CASB."
"As Netskope is a cloud-based application, it is possible to analyze and distinguish personal and enterprise instances."
"It has predefined or preconfigured rules, which are getting periodically updated. They are providing continuous improvements and periodically updating all search queries that they are looking for. That is one thing that helps us to stay vigilant and focused. If we query our AWS account for any breaches or vulnerabilities with any of the cloud tests, and it alerts us based on these predefined rules. It also provides an option to configure our own rules, and based on these rules, it can query the cloud trail logs, pull the information, and trigger alerts in real-time. I haven't explored this feature much because there are multiple accounts, and we don't have enough time to explore this feature. It also provides multiple integrations. When vulnerabilities or breaches are happening, you should be aware of them immediately. It provides integration with tools such as Slack, PagerDuty so that you can get alerted as soon as the high severity stuff comes up. For example, you have a security group that has allowed public traffic on port 22. As TechOps, you should be aware of this immediately. You cannot scan each machine or look into all security groups to identify it. So, Prisma helps us and alerts us when this kind of high-priority stuff comes up. It has different statistics, analytics, and graphs for data. The description of alerts is also pretty good. They describe what are the possible causes for this and what are the solutions. From Prisma Cloud, you can directly go to the AWS account. When you click on an alert, a resource, or a resource ID, it takes you to the AWS console where you need to log in. If you are already logged in, it will take you to that instance directly, and you can fix the issue there. I have found this feature very useful."
"The always-on feature is fantastic for the users. They don't have to think about it. When they go to a coffee shop to do work, there's no need to remember to toggle the VPN on. We'll protect them. URL filtering is the same at home as it is in the office."
"The tool's consolidation is pretty quick."
"It's quite reliable and performs well for users."
"The most valuable features are ZTNA 2.0, CASB, Threat Prevention, and Autonomous Digital Experience Management (ADAM)."
"Panorama provides centralized management capabilities for all our firewalls and locations so that we can manage different data centers through a single device, a very valuable feature. We don't have to log into various devices to oversee them individually."
"The protection for web-based applications was helpful for my colleagues who didn't want a particular application on their devices. And the non-web access protection was more for our developers because they were writing and building code on their computers. Prisma Access was able to protect them."
"Monitoring is the most valuable feature because we can easily monitor all kinds of stuff coming over the network. We can check the dashboard and work accordingly."
 

Cons

"Fold that in with the risk intelligence they're getting from all of the different subscriptions they are a part of. Now, these security companies subscribe to things like emerging threats, databases, etc. You can fold all this intelligence to decide what's happening on an endpoint. I would love to see them start moving into that space. That would compete directly with Microsoft. Maybe that's why they haven't. Having that ability native within the solution would be great. The other area in which I would love to see improvement is more detailed descriptions of why they block websites."
"The reporting feature needs improvement."
"Sometimes the agent stops working in iboss, and we have to reinstall the agent."
"Regarding pricing, setup costs, and licensing, iboss is not cheap, and that's my only concern."
"The dashboards for local use could be better."
"Sometimes, obviously, there are bugs."
"Our iboss subscription access should be more secure with an OTP or VPN etc. It is easy to gain access if, for example, hackers obtain my username and password."
"SSL decryption: We had issues with learners using apps instead of using web browsers. This type of encryption is tough for any appliance in a BYOD environment."
"The initial setup is a bit complex in that it takes a lot of time. In order to get the product to work as you need it to, there is a lot of configuration required."
"The solution needs to improve its on-premise detection technique."
"The solution lacks a good reporting feature."
"The accuracy could be improved."
"They should work on marketing material to put out their work with a little more effort."
"Improvement in the solution is required in certain areas where the product does not provide access to its direct end users, who use the portal as an administrator."
"Cost competitiveness is its area of improvement. They will have to figure out how can they strategically price it because there are a few players in the game who have been doing it for a long time. They will have to figure out how to go to market on the pricing."
"Netskope can only provide the high level related to threats."
"There should be a dedicated portal or SASE-based solution. They're trying to add a plugin but it needs a dedicated portal because it is now an enterprise solution for multiple organizations. People should be able to directly log in to a dedicated page for Prisma Access, rather than going into a Panorama plugin, and always having to update the plugin."
"I would like the solution to support a different type of authentication. We can't configure a secondary method for our portal."
"Though the monitoring is fine, the solution should improve its application graphs and interface monitoring."
"We are using the SaaS offering. We use our applications for microservices. We use Twistlock to scan containers, and it displays these results in Prisma, which is a good feature because we can see vulnerabilities with respect to these containers. We can see everything in a very detailed manner. However, when you have different environments for a single application, such as DEV, QA, PROD, and TEST, all these environments run multiple containers, which can lead to a very high number of containers. In such a scenario, it shows you the alerts for all those containers that have vulnerabilities. If you show the results of all the containers that share the same image, it is not going to add any value. Therefore, they should narrow down the alerts based on a container. It should show information for a single container. Otherwise, the person who is looking at the results gets the impression that he has to fix all these issues. This is something that they can improve."
"GlobalProtect can face challenges with latency, especially when remote workers connect to centralized locations."
"The solution needs to be more compatible with other solutions. This is specifically a problem for us when it comes to healthcare applications. They have proprietary connection types and things of that nature that make compatibility a challenge sometimes."
"One area for improvement is for them to stay on top of keeping their CVEs on their platform up to date."
"The price can be reduced to make it more competitive."
 

Pricing and Cost Advice

"We have not priced the solution recently, but they were competitive with other vendors in the past."
"It is probably in line with other solutions, but I do not deal with the financial side."
"It is expensive compared to one of its competitors."
"We had the cost of purchasing a new appliance along with the implementation and licensing costs. However, the following year, the cost of just licensing was similar to what was paid the previous year for a new appliance along with the implementation and licensing costs."
"It is not expensive, and it is also not cheap. iboss is priced right in the sweet spot for the number of features it offers."
"The overall pricing for iboss is very competitive and transparent."
"The solution's overall cost is cheaper than regular web security solutions."
"The product is cheap."
"The price is average. Because the license is user-based, you can increase it as per the user quantity."
"The license model is based on the number of users. You have the possibility to have 10,000 users if you wish."
"We pay a licensing fee of $10,000 on a yearly basis."
"Actually the solution is very expensive. I don't know the particulars since the purchasing team dealt with it."
"Prisma is in the middle of the road. It's not the most expensive, but it's not the cheapest. There aren't any additional costs, to my knowledge. I know they have some extra modules, but we didn't use them."
"Prisma Access by Palo Alto Networks is an expensive solution, especially when compared to other solutions like Cisco. There are no additional charges apart from the standard licensing costs attached to the solution."
"Prisma Access by Palo Alto Networks has flexible licensing models with different categories. It comes with different features which can be removed if not needed. However, its pricing is high."
"The initial prices of Prisma Access were okay. But as soon as you start deploying Palo Alto gear, the support prices and the recurring prices, which are the major operational costs, tend to increase over time."
"The solution is expensive."
"Compared to other products, the price is slightly high."
"There's no reason not to buy the enterprise version that gives you unlimited PoPs, but you must understand the limitations you impose on yourself if you do that. If you go crazy, that allowlist will be too big for Kubernetes clusters."
report
Use our free recommendation engine to learn which Secure Web Gateways (SWG) solutions are best for your needs.
867,370 professionals have used our research since 2012.
 

Top Industries

By visitors reading reviews
Computer Software Company
11%
Financial Services Firm
11%
Manufacturing Company
9%
Government
6%
Financial Services Firm
12%
Computer Software Company
12%
Manufacturing Company
11%
Insurance Company
7%
Computer Software Company
12%
Manufacturing Company
12%
Financial Services Firm
12%
Government
6%
 

Company Size

By reviewers
Large Enterprise
Midsize Enterprise
Small Business
By reviewers
Company SizeCount
Small Business6
Midsize Enterprise6
Large Enterprise5
By reviewers
Company SizeCount
Small Business8
Midsize Enterprise3
Large Enterprise3
By reviewers
Company SizeCount
Small Business21
Midsize Enterprise21
Large Enterprise28
 

Questions from the Community

What needs improvement with iboss?
For zero trust implementation, we encountered complexity issues, especially with a large infrastructure company Exxon...
What is your primary use case for iboss?
Previously when I used iboss, we did the POC for iboss for ExxonMobil. Four or five people wanted to move from our ol...
What is your experience regarding pricing and costs for iboss?
Regarding pricing, setup costs, and licensing, iboss is not cheap, and that's my only concern. There are cheaper alte...
Which lesser known firewall product has the best chance at unseating the market leaders?
Netscope, Zscaler if they continue route they are on now. FIrewalls needs great deal of automation on each end, datac...
Which lesser known firewall product has the best chance at unseating the market leaders?
Those firewalls that allow extend the perimeter. Nowadays, there is a issue with the static perimeter and all is goin...
What do you like most about Netskope Next Gen Secure Web Gateway?
There are a lot of features, but the groups that are created for the policy groups available with Netskope are alread...
What is the better solution - Prisma Access or Zscaler Private Access?
We looked into Prisma Access before choosing Zscaler Private Access (ZPA). Palo Alto’s Prisma Access is a secure ac...
What do you like most about Prisma Access by Palo Alto Networks?
The most valuable features of the solution are in the areas of the secure remote access it provides while also being ...
What is your experience regarding pricing and costs for Prisma Access by Palo Alto Networks?
From my experience, Palo Alto is more expensive compared to solutions like Netskope and Triscale.
 

Also Known As

iBoss Cloud Platform
No data available
Palo Alto Networks Prisma Access, Prisma Access, GlobalProtect, Palo Alto GlobalProtect Mobile Security Manager, Prisma SaaS by Palo Alto Networks, Prisma Access
 

Overview

 

Sample Customers

More than 4,000 global enterprises trust the iboss Cloud Platform to support their modern workforces, including a large number of Fortune 50 companies.
Arrow, Cloudrise, Sainsbury, Evalueserve, Stroock, Apria, Ather Energy, CSA, AVX Corporation Nuna, City of San Diego Case, Genomic Health Case Study, Oak Hill Advisors, MaRS Discovery District.
Concord Hospital, State of Colorado, Essilor International, RheinLand Versicherungsgruppe, University of Westminster, Universidade Nove de Julho, SPAR Austria, CAME Group, ZipRealty, Greenhill & Co., IKT Agder, Aviva Stadium, Animal Logic, Management & Training Corporation, Brigham Young University Hawaii, School District of Chilliwack
Find out what your peers are saying about Netskope Next Gen Secure Web Gateway vs. Prisma Access by Palo Alto Networks and other solutions. Updated: September 2025.
867,370 professionals have used our research since 2012.