No more typing reviews! Try our Samantha, our new voice AI agent.

Prisma Access by Palo Alto Networks vs Sangfor Internet Access Gateway (IAG) comparison

Sponsored
 

Comparison Buyer's Guide

Executive SummaryUpdated on Dec 4, 2024

Review summaries and opinions

We asked business professionals to review the solutions they use. Here are some excerpts of what they said:
 

Categories and Ranking

iboss
Sponsored
Ranking in Secure Web Gateways (SWG)
6th
Average Rating
8.4
Reviews Sentiment
6.9
Number of Reviews
22
Ranking in other categories
Internet Security (3rd), Web Content Filtering (1st), Cloud Access Security Brokers (CASB) (6th), ZTNA as a Service (7th), Secure Access Service Edge (SASE) (7th)
Prisma Access by Palo Alto ...
Ranking in Secure Web Gateways (SWG)
4th
Average Rating
8.2
Reviews Sentiment
6.9
Number of Reviews
65
Ranking in other categories
Cloud Access Security Brokers (CASB) (1st), Enterprise Infrastructure VPN (5th), ZTNA as a Service (4th), Secure Access Service Edge (SASE) (1st)
Sangfor Internet Access Gat...
Ranking in Secure Web Gateways (SWG)
33rd
Average Rating
8.0
Reviews Sentiment
7.3
Number of Reviews
3
Ranking in other categories
No ranking in other categories
 

Mindshare comparison

As of July 2026, in the Secure Web Gateways (SWG) category, the mindshare of iboss is 3.5%, up from 2.0% compared to the previous year. The mindshare of Prisma Access by Palo Alto Networks is 7.5%, down from 10.6% compared to the previous year. The mindshare of Sangfor Internet Access Gateway (IAG) is 0.8%, down from 0.8% compared to the previous year. It is calculated based on PeerSpot user engagement data.
Secure Web Gateways (SWG) Mindshare Distribution
ProductMindshare (%)
Prisma Access by Palo Alto Networks7.5%
iboss3.5%
Sangfor Internet Access Gateway (IAG)0.8%
Other88.2%
Secure Web Gateways (SWG)
 

Featured Reviews

Ashok Ananthula - PeerSpot reviewer
Senior Consultant Proxy Engineering at a financial services firm with 10,001+ employees
Cloud gateway has strengthened remote web security and now needs better Mac and ISP support
The problem our organization had is that iboss failed for the Mac devices. It is not able to give a successful agent for the Mac agents. That is where in 2025, we had to migrate to the Palo Alto-based platform. If your use case is for just Windows laptops,you can consider this platform as an option One issue is the data center resiliency part. In India especially, they are not tied up with the Tier 1 ISPs like Tata or Airtel; they were having Tier 2 ISPs and encountered many issues reaching few major sites that my organization depends on, and they were having problems that they could not fix quickly. They also lack a mechanism to route that traffic within their data center; rather, they ask customers to make a pac file change to route it to Singapore explicitly. It would be better if they route from their backend , i mean even if I send it to India DC, they should be able to route it internally to make that work; however, they fail to do that and ask the customer to route it in the pac file. Another suggestion is that in China, they do not have the proper setup; they used to have numerous problems with slowness and lack of premium circuits in China as well. That leads to multiple sites working slowly with latency-related issues. So the main issue is the ISP-related problems that need to be solved.
IgorPinter - PeerSpot reviewer
Director at PULSEC
Zero-trust access has improved remote security and now simplifies cloud-based firewall management
Regarding the integration part for Prisma Access by Palo Alto Networks, the integration with identity providers is pretty much good. It is basically firewall as a service, so it performs well. I completed the integration without any issues. What Palo Alto Networks can do better for Prisma Access by Palo Alto Networks is probably to have the point of presence available in more locations. The point of presence from the Serbia region has the nearest POP in Frankfurt, which is an issue since it is your gateway—when you start browsing the internet, you go through a commercial connection in Germany. They definitely need to spread the service in other countries.
Muhammad Asif Shaikh - PeerSpot reviewer
Deputy GM - IT at a manufacturing company with 1,001-5,000 employees
Designed to provide comprehensive and secure internet access with high visibility into users
After my purchase, I noticed a need for improvements, particularly in the area of identifying the source user of the device, which can sometimes roll back to the base. Additionally, there were challenges with SSL gate traffic, which wasn't functioning as effectively as expected. Even though there have been fixes to these issues, they should be inherent to the product and need further attention. These aspects, especially sub-features, aren't very robust and seem complex. Regarding integration, while Sangfor Internet Access Gateway (IAG) integrates well with its own products, its compatibility with third-party tools like QB is limited. There's room for improvement in making protocols compatible with various third-party products.

Quotes from Members

We asked business professionals to review the solutions they use. Here are some excerpts of what they said:
 

Pros

"First of all, the security policies are essential. I do not have to rely solely on Active Directory for our users."
"The console is cloud-based, which is something I really appreciate."
"We were impressed by the solution's mental health function, which can detect if someone needs help. It scans what users are browsing and flags warning signs so we can check to see if they are okay. We've had to use it a couple of times."
"Granular setup, which was able to set different levels of filters using the OUs in the AD."
"iboss is among the few products providing inline filtering where no application is needed on the device. It operates on the network side and is not device-based. This feature was one of the main reasons why we stayed with them for so long."
"Its initial setup was straightforward."
"iboss is easy to use despite its complexity. Multiple engineers manage it, but it's significantly more straightforward to administer than traditional VPNs and web proxies."
"Technical support is pretty sharp and very responsive."
"GlobalProtect has been beneficial for its cloud security capabilities, which are vital as businesses seek hybrid options and need to support remote workers while addressing latency issues."
"It shows the alerts in real-time, and we are pretty happy with the service it offers."
"My advice for those who are looking for a SaaS solution is to use Prisma; it's one of the best solutions in the industry at the moment, simpler and really easy to deploy, with a very trustworthy support team from Palo Alto."
"Overall, the cost savings, ease of deployment, and better VPN user experience and performance are valuable."
"Its frontend is user-friendly. It is easy to use for us."
"The most valuable feature is the ability to change the gateway. For example, if there's a problem with a specific region or vendor, we can make modifications. The solution is scalable, and there are different gateways that can be created depending on the demand."
"Speaking as an ambassador for Palo Alto and Prisma access, it's the best solution on the market."
"The initial setup is very straightforward."
"The most significant aspect is the control it offers over internet traffic, like managing computer access to specific sites such as Facebook. I find particular value in its ability to control the depth of internal traffic, enabling actions like blocking specific file extensions on social media or specific IPs. This control by categories is a standout feature for us in Sangfor Internet Access Gateway (IAG)."
"Stability-wise, I rate the solution a ten out of ten."
"The solution is interoperable and has centralized management."
 

Cons

"The reporting feature needs improvement."
"Our iboss subscription access should be more secure with an OTP or VPN etc. It is easy to gain access if, for example, hackers obtain my username and password."
"Their on-premise hardware's network interface is capped at one gigabit, which is sort of a problem. If you stand a filter up where all traffic flows through that, according to them, in order to go above a gigabit, you have to have multiple devices, which in today's IT seems a little bit silly. They could easily put in an SFP port into their device that could accommodate 10 gigs or at least offer a box."
"The area I would like to see improvement in is the ability with in the reporter to navigate directly to the content the user is traversing. It is kind of there, but it's not perfect. Quite frequently, I receive links that lead me to pages with error messages."
"Fold that in with the risk intelligence they're getting from all of the different subscriptions they are a part of. Now, these security companies subscribe to things like emerging threats, databases, etc. You can fold all this intelligence to decide what's happening on an endpoint. I would love to see them start moving into that space. That would compete directly with Microsoft. Maybe that's why they haven't. Having that ability native within the solution would be great. The other area in which I would love to see improvement is more detailed descriptions of why they block websites."
"To scale up, a new iboss Node Blade Chassis must be purchased."
"Sometimes the agent stops working in iboss, and we have to reinstall the agent."
"One thing I would like to see differently with their Zero Trust platform is that some of the AI aspects related to high-risk activities have more false positives."
"The one thing that I've been a little bit disappointed with is when we have had to open cases with Palo Alto about Prisma Access issues. Versus their other platforms, like their firewalls, where we tend to get really quick responses and very definitive answers, the few tickets I've had to open for Prisma Access have taken them longer to respond to. And they haven't necessarily given me the kind of answer I was looking for, meaning a fix to the problem."
"The licensing model isn't flexible enough. It's an all-or-nothing model. Other providers in the market allow you to buy modules or add-ons separately. With Prisma Access, you have to purchase the same module for all users."
"Palo Alto's operational and support model needs improvement since we have faced issues with resolving problems."
"Sometimes, we encountered a portal crash. When we told Palo Alto they said it might be the browser or cache, but I think they need to improve it on their side."
"It applies commits to the firewalls slowly. There isn't an API you can use for anything. We've previously had trouble with the egress IP addresses though we expressed to engineering that those mustn't change. They changed several times without warning, causing a lot of headaches."
"The price can be reduced to make it more competitive."
"The one point I have deducted is because it is very hard to get support sometimes."
"Prisma's integration between operational technology and IT should be more seamless. Right now, it requires additional setup and maintenance."
"In Sangfor Internet Access Gateway (IAG), its speed is an area of concern where improvements are required."
"After my purchase, I noticed a need for improvements, particularly in the area of identifying the source user of the device, which can sometimes roll back to the base. Additionally, there were challenges with SSL gate traffic, which wasn't functioning as effectively as expected. Even though there have been fixes to these issues, they should be inherent to the product and need further attention. These aspects, especially sub-features, aren't very robust and seem complex. Regarding integration, while Sangfor Internet Access Gateway (IAG) integrates well with their own products, its compatibility with third-party tools like QB is limited. There's room for improvement in making protocols compatible with various third-party products."
"The solution's logging system should be improved because its logs are not precise and are a little confusing."
 

Pricing and Cost Advice

"It is expensive compared to one of its competitors."
"We had the cost of purchasing a new appliance along with the implementation and licensing costs. However, the following year, the cost of just licensing was similar to what was paid the previous year for a new appliance along with the implementation and licensing costs."
"We have not priced the solution recently, but they were competitive with other vendors in the past."
"It is probably in line with other solutions, but I do not deal with the financial side."
"The overall pricing for iboss is very competitive and transparent."
"It is not expensive, and it is also not cheap. iboss is priced right in the sweet spot for the number of features it offers."
"The pricing is very friendly. It's not confusing to figure out your workload and how much you'd be paying for the solution."
"Actually the solution is very expensive. I don't know the particulars since the purchasing team dealt with it."
"We have to pay additional costs for maintenance and support services."
"They price their products using credit modules."
"Prisma Access by Palo Alto Networks has flexible licensing models with different categories. It comes with different features which can be removed if not needed. However, its pricing is high."
"The licensing fees are paid on a yearly basis and for what we get, the price is good."
"The pricing can be difficult because it came to us with another agreement, but it can be negotiated. I highly recommend people to compare this product's performance and pricing against BetterCloud, because I feel BetterCloud is better than Prisma SaaS if they're starting from scratch."
"The solution is expensive."
"It is one of the reason for choosing it over other available products. However, recently, this year, there have been recurring concerns. I believe we might consider migrating to another solution."
"I rate the product pricing a five or six out of ten on a scale of one to ten."
"The solution’s pricing is cheaper than any other solution."
report
Use our free recommendation engine to learn which Secure Web Gateways (SWG) solutions are best for your needs.
902,988 professionals have used our research since 2012.
 

Top Industries

By visitors reading reviews
Financial Services Firm
11%
Manufacturing Company
9%
Computer Software Company
8%
Construction Company
7%
Financial Services Firm
12%
Manufacturing Company
10%
Computer Software Company
8%
Construction Company
6%
Construction Company
18%
Manufacturing Company
9%
Comms Service Provider
8%
Financial Services Firm
8%
 

Company Size

By reviewers
Large Enterprise
Midsize Enterprise
Small Business
By reviewers
Company SizeCount
Small Business7
Midsize Enterprise7
Large Enterprise9
By reviewers
Company SizeCount
Small Business26
Midsize Enterprise20
Large Enterprise27
No data available
 

Questions from the Community

What needs improvement with iboss?
The problem our organization had is that iboss failed for the Mac devices. It is not able to give a successful agent ...
What is your primary use case for iboss?
We used iBoss mainly for Internet Access by having an Agent on Windows laptops Primarily because when we try to use i...
What is your experience regarding pricing and costs for iboss?
I am not involved in pricing, but as per the information I have, during that time, the Blue Coat proxies we were usin...
What is the better solution - Prisma Access or Zscaler Private Access?
We looked into Prisma Access before choosing Zscaler Private Access (ZPA). Palo Alto’s Prisma Access is a secure ac...
What is your experience regarding pricing and costs for Prisma Access by Palo Alto Networks?
From my experience, Palo Alto is more expensive compared to solutions like Netskope and Triscale.
What needs improvement with Prisma Access by Palo Alto Networks?
Regarding the integration part for Prisma Access by Palo Alto Networks, the integration with identity providers is pr...
Ask a question
Earn 20 points
 

Also Known As

iBoss Cloud Platform
Palo Alto Networks Prisma Access, Prisma Access, GlobalProtect, Palo Alto GlobalProtect Mobile Security Manager, Prisma SaaS by Palo Alto Networks, Prisma Access
No data available
 

Overview

 

Sample Customers

More than 4,000 global enterprises trust the iboss Cloud Platform to support their modern workforces, including a large number of Fortune 50 companies.
Concord Hospital, State of Colorado, Essilor International, RheinLand Versicherungsgruppe, University of Westminster, Universidade Nove de Julho, SPAR Austria, CAME Group, ZipRealty, Greenhill & Co., IKT Agder, Aviva Stadium, Animal Logic, Management & Training Corporation, Brigham Young University Hawaii, School District of Chilliwack
Information Not Available
Find out what your peers are saying about Prisma Access by Palo Alto Networks vs. Sangfor Internet Access Gateway (IAG) and other solutions. Updated: June 2026.
902,988 professionals have used our research since 2012.