Try our new research platform with insights from 80,000+ expert users

Prisma Access by Palo Alto Networks vs Sangfor Internet Access Gateway (IAG) comparison

Sponsored
 

Comparison Buyer's Guide

Executive SummaryUpdated on Dec 4, 2024

Review summaries and opinions

We asked business professionals to review the solutions they use. Here are some excerpts of what they said:
 

Categories and Ranking

iboss
Sponsored
Ranking in Secure Web Gateways (SWG)
7th
Average Rating
8.4
Reviews Sentiment
7.1
Number of Reviews
19
Ranking in other categories
Internet Security (3rd), Web Content Filtering (1st), Cloud Access Security Brokers (CASB) (7th), ZTNA as a Service (11th), Secure Access Service Edge (SASE) (10th)
Prisma Access by Palo Alto ...
Ranking in Secure Web Gateways (SWG)
4th
Average Rating
8.4
Reviews Sentiment
7.1
Number of Reviews
63
Ranking in other categories
Cloud Access Security Brokers (CASB) (1st), Enterprise Infrastructure VPN (5th), ZTNA as a Service (2nd), Secure Access Service Edge (SASE) (2nd)
Sangfor Internet Access Gat...
Ranking in Secure Web Gateways (SWG)
22nd
Average Rating
8.0
Reviews Sentiment
7.3
Number of Reviews
3
Ranking in other categories
No ranking in other categories
 

Mindshare comparison

As of June 2025, in the Secure Web Gateways (SWG) category, the mindshare of iboss is 2.1%, up from 1.6% compared to the previous year. The mindshare of Prisma Access by Palo Alto Networks is 11.0%, up from 9.5% compared to the previous year. The mindshare of Sangfor Internet Access Gateway (IAG) is 0.9%, up from 0.8% compared to the previous year. It is calculated based on PeerSpot user engagement data.
Secure Web Gateways (SWG)
 

Featured Reviews

Matt Crockford - PeerSpot reviewer
It's easy to roll out, and their understanding of our business made it seamless
One aspect we value about iboss is its simplicity. Their customer service is brilliant, and they are super responsive and knowledgeable. It's easy to roll out, and their understanding of our business made it seamless. We were impressed by the solution's mental health function, which can detect if someone needs help. It scans what users are browsing and flags warning signs so we can check to see if they are okay. We've had to use it a couple of times. The user interface is highly intuitive. Our IT team picked it up with minimal training. It's arranged so that it's easy to find where things are. Another advantage is the single pane of glass console, which gives you visibility into what's happening. We're not fully there yet because we haven't implemented zero trust, but we're excited about the possibilities from the demos we've seen. We launched a POC of iboss' ChatGPT Risk Protection feature two weeks ago. AI is a great tool, but you need to be careful what you put into it. My biggest fear is employees inputting sensitive corporate information or customer PII data into one of these chatbots. I was impressed by our trial of the feature. It's exactly what we wanted. Now, when a user goes to ChatGPT, there's a banner warning them not to share information, and we can block conversations containing customer data like bank details and email addresses. I don't want to stop people from using it, but we need visibility. We've only tried it on a test group of 15 people. You can configure it to look for specific keywords or integrate it with your DLP policy if you have that configured
Amar-Patil - PeerSpot reviewer
Enables seamless policy management and supports secure remote work
Our primary use case for Prisma Access by Palo Alto Networks is to control the internet and serve as an internet proxy. Additionally, we use it for secure remote work One of the most valuable features of Prisma Access by Palo Alto Networks is the ability to manage on-premise firewalls. We can…
Muhammad Asif Shaikh - PeerSpot reviewer
Designed to provide comprehensive and secure internet access with high visibility into users
After my purchase, I noticed a need for improvements, particularly in the area of identifying the source user of the device, which can sometimes roll back to the base. Additionally, there were challenges with SSL gate traffic, which wasn't functioning as effectively as expected. Even though there have been fixes to these issues, they should be inherent to the product and need further attention. These aspects, especially sub-features, aren't very robust and seem complex. Regarding integration, while Sangfor Internet Access Gateway (IAG) integrates well with its own products, its compatibility with third-party tools like QB is limited. There's room for improvement in making protocols compatible with various third-party products.

Quotes from Members

We asked business professionals to review the solutions they use. Here are some excerpts of what they said:
 

Pros

"I would definitely recommend iboss for web filtering purposes to other organizations or individuals."
"Technical support is pretty sharp and very responsive."
"From a use-case scenario, what I like the most is the plug-in. I like the fact that we can do the filtering of these devices offsite independent of the network they are connected to, and we do not have to have traffic coming back inside our network."
"Granular setup, which was able to set different levels of filters using the OUs in the AD."
"iboss is pretty scalable. They provide good support. The case managers you work with to coordinate what you need are pretty good."
"The iboss system is highly reliable. The false positive rates are small compared to some other systems we've experienced through other partner agencies who use competing solutions."
"The console is cloud-based, which is something I really appreciate."
"Because of iboss, I did not have to assign web filtering tasks to my techs on a daily basis."
"The most valuable feature is the zero-trust part of this solution."
"Prisma Access gives us security from a single point. It controls mobile users and determines how secure their networks will be, including from where they will get internet access. We can optimize things and add security profiles centrally."
"The overall rating for GlobalProtect is nine out of ten."
"We're now able to go after contracts that require a Zero Trust solution and Prisma's other technology solutions."
"Security is absolutely spot-on, really top-notch. It's the result of all the components that come together, such as the HIP [Host Information Profile] and components like Forcepoint, providing end-user content inspection, and antivirus. It incorporates DLP features and that's fantastic because Prisma Access makes sure that all of the essential prerequisites are in place before a user can log in or can be tunneled into."
"It's great that we can make sure a machine meets the minimum requirements before users are allowed to log in."
"The users can securely access any cloud data centers or cloud platforms. In terms of the features, it has all the features that Palo Alto Next-Generation Firewall has. It is also very stable and scalable."
"The most valuable features of the solution stem from the fact that it offers stability and scalability while being a very secure product."
"Stability-wise, I rate the solution a ten out of ten."
"The most significant aspect is the control it offers over internet traffic, like managing computer access to specific sites such as Facebook. I find particular value in its ability to control the depth of internal traffic, enabling actions like blocking specific file extensions on social media or specific IPs. This control by categories is a standout feature for us in Sangfor Internet Access Gateway (IAG)."
"The solution is interoperable and has centralized management."
 

Cons

"Regarding pricing, setup costs, and licensing, iboss is not cheap, and that's my only concern."
"Iboss is growing so fast that it is often hard for them to keep up with the challenges."
"For zero trust implementation, we encountered complexity issues, especially with a large infrastructure company ExxonMobil."
"Fold that in with the risk intelligence they're getting from all of the different subscriptions they are a part of. Now, these security companies subscribe to things like emerging threats, databases, etc. You can fold all this intelligence to decide what's happening on an endpoint. I would love to see them start moving into that space. That would compete directly with Microsoft. Maybe that's why they haven't. Having that ability native within the solution would be great. The other area in which I would love to see improvement is more detailed descriptions of why they block websites."
"To scale up, a new iboss Node Blade Chassis must be purchased."
"SSL decryption: We had issues with learners using apps instead of using web browsers. This type of encryption is tough for any appliance in a BYOD environment."
"Sometimes when you call in support, you get someone who is just following a sheet. It feels like a runaround. You feel that you are running into that support wall."
"The solution could be stronger on the integration side and offer more cloud applications like G Suite or Oracle."
"The documentation is generally good, but they could provide a more detailed description of all the configuration steps. I have to search for information or call support. Palo Alto could add more knowledge base articles about configuration with screenshots and walkthroughs. That would be helpful. When configuring a product, you want to see examples of how it is done."
"Lacks a hybrid model which has API plus in-line security."
"We would like to see improvements in the licensing; currently, Palo Alto provides 500 to 1000 licenses for users, and we want to see 1500 to 2000 licenses for one version."
"The solution needs to be more compatible with other solutions. This is specifically a problem for us when it comes to healthcare applications. They have proprietary connection types and things of that nature that make compatibility a challenge sometimes."
"I haven't seen any SD-WAN configuration capability. If Prisma Access would support SD-WAN, that would help... SD-WAN devices should be able to reach Prisma Access, and Palo Alto should support different, vendor-specific devices, not just Palo Alto devices, for SD-WAN configuration."
"It applies commits to the firewalls slowly. There isn't an API you can use for anything. We've previously had trouble with the egress IP addresses though we expressed to engineering that those mustn't change. They changed several times without warning, causing a lot of headaches."
"The product's price is an area of concern where improvements are required. The solution's price should be lowered."
"The cloud setup is straightforward, and the onboarding process is much better, but the on-premises initial setup is slightly complex."
"In Sangfor Internet Access Gateway (IAG), its speed is an area of concern where improvements are required."
"The solution's logging system should be improved because its logs are not precise and are a little confusing."
"After my purchase, I noticed a need for improvements, particularly in the area of identifying the source user of the device, which can sometimes roll back to the base. Additionally, there were challenges with SSL gate traffic, which wasn't functioning as effectively as expected. Even though there have been fixes to these issues, they should be inherent to the product and need further attention. These aspects, especially sub-features, aren't very robust and seem complex. Regarding integration, while Sangfor Internet Access Gateway (IAG) integrates well with their own products, its compatibility with third-party tools like QB is limited. There's room for improvement in making protocols compatible with various third-party products."
 

Pricing and Cost Advice

"We had the cost of purchasing a new appliance along with the implementation and licensing costs. However, the following year, the cost of just licensing was similar to what was paid the previous year for a new appliance along with the implementation and licensing costs."
"It is expensive compared to one of its competitors."
"It is probably in line with other solutions, but I do not deal with the financial side."
"We have not priced the solution recently, but they were competitive with other vendors in the past."
"The overall pricing for iboss is very competitive and transparent."
"It is not expensive, and it is also not cheap. iboss is priced right in the sweet spot for the number of features it offers."
"I'm still comparing, but the solution is quite expensive."
"The pricing for this solution is on the higher end."
"Actually the solution is very expensive. I don't know the particulars since the purchasing team dealt with it."
"It's pricey, it's not cheap. But you get what you pay for."
"Prisma Access by Palo Alto Networks is an expensive solution, especially when compared to other solutions like Cisco. There are no additional charges apart from the standard licensing costs attached to the solution."
"There's no reason not to buy the enterprise version that gives you unlimited PoPs, but you must understand the limitations you impose on yourself if you do that. If you go crazy, that allowlist will be too big for Kubernetes clusters."
"Prisma Access is a little bit expensive."
"It is pretty expensive. We have to balance the cost of some features. They need to work on some of the services and products, price-wise."
"The solution’s pricing is cheaper than any other solution."
"I rate the product pricing a five or six out of ten on a scale of one to ten."
"It is one of the reason for choosing it over other available products. However, recently, this year, there have been recurring concerns. I believe we might consider migrating to another solution."
report
Use our free recommendation engine to learn which Secure Web Gateways (SWG) solutions are best for your needs.
859,129 professionals have used our research since 2012.
 

Top Industries

By visitors reading reviews
Computer Software Company
12%
Financial Services Firm
11%
Manufacturing Company
9%
Government
6%
Computer Software Company
14%
Manufacturing Company
13%
Financial Services Firm
12%
Government
6%
University
11%
Construction Company
11%
Computer Software Company
9%
Manufacturing Company
8%
 

Company Size

By reviewers
Large Enterprise
Midsize Enterprise
Small Business
No data available
 

Questions from the Community

What do you like most about iboss?
Content filtering is the most useful feature of iboss.
What needs improvement with iboss?
For zero trust implementation, we encountered complexity issues, especially with a large infrastructure company Exxon...
What is your primary use case for iboss?
Previously when I used iboss, we did the POC for iboss for ExxonMobil. Four or five people wanted to move from our ol...
What is the better solution - Prisma Access or Zscaler Private Access?
We looked into Prisma Access before choosing Zscaler Private Access (ZPA). Palo Alto’s Prisma Access is a secure ac...
What do you like most about Prisma Access by Palo Alto Networks?
The most valuable features of the solution are in the areas of the secure remote access it provides while also being ...
What is your experience regarding pricing and costs for Prisma Access by Palo Alto Networks?
From my experience, Palo Alto is more expensive compared to solutions like Netskope and Triscale.
What do you like most about Sangfor Internet Access Gateway (IAG)?
The solution is interoperable and has centralized management.
What needs improvement with Sangfor Internet Access Gateway (IAG)?
The solution's logging system should be improved because its logs are not precise and are a little confusing.
 

Also Known As

iBoss Cloud Platform
Palo Alto Networks Prisma Access, Prisma Access, GlobalProtect, Palo Alto GlobalProtect Mobile Security Manager, Prisma SaaS by Palo Alto Networks, Prisma Access
No data available
 

Overview

 

Sample Customers

More than 4,000 global enterprises trust the iboss Cloud Platform to support their modern workforces, including a large number of Fortune 50 companies.
Concord Hospital, State of Colorado, Essilor International, RheinLand Versicherungsgruppe, University of Westminster, Universidade Nove de Julho, SPAR Austria, CAME Group, ZipRealty, Greenhill & Co., IKT Agder, Aviva Stadium, Animal Logic, Management & Training Corporation, Brigham Young University Hawaii, School District of Chilliwack
Information Not Available
Find out what your peers are saying about Prisma Access by Palo Alto Networks vs. Sangfor Internet Access Gateway (IAG) and other solutions. Updated: June 2025.
859,129 professionals have used our research since 2012.