Try our new research platform with insights from 80,000+ expert users

Prisma Access by Palo Alto Networks vs Sangfor Internet Access Gateway (IAG) comparison

Sponsored
 

Comparison Buyer's Guide

Executive SummaryUpdated on Dec 4, 2024

Review summaries and opinions

We asked business professionals to review the solutions they use. Here are some excerpts of what they said:
 

Categories and Ranking

iboss
Sponsored
Ranking in Secure Web Gateways (SWG)
5th
Average Rating
8.4
Reviews Sentiment
7.1
Number of Reviews
19
Ranking in other categories
Internet Security (3rd), Web Content Filtering (1st), Cloud Access Security Brokers (CASB) (7th), ZTNA as a Service (7th), Secure Access Service Edge (SASE) (8th)
Prisma Access by Palo Alto ...
Ranking in Secure Web Gateways (SWG)
4th
Average Rating
8.2
Reviews Sentiment
6.9
Number of Reviews
66
Ranking in other categories
Cloud Access Security Brokers (CASB) (1st), Enterprise Infrastructure VPN (5th), ZTNA as a Service (2nd), Secure Access Service Edge (SASE) (1st)
Sangfor Internet Access Gat...
Ranking in Secure Web Gateways (SWG)
29th
Average Rating
8.0
Reviews Sentiment
7.3
Number of Reviews
3
Ranking in other categories
No ranking in other categories
 

Mindshare comparison

As of January 2026, in the Secure Web Gateways (SWG) category, the mindshare of iboss is 2.4%, up from 1.9% compared to the previous year. The mindshare of Prisma Access by Palo Alto Networks is 9.2%, down from 11.0% compared to the previous year. The mindshare of Sangfor Internet Access Gateway (IAG) is 0.7%, down from 1.1% compared to the previous year. It is calculated based on PeerSpot user engagement data.
Secure Web Gateways (SWG) Market Share Distribution
ProductMarket Share (%)
Prisma Access by Palo Alto Networks9.2%
iboss2.4%
Sangfor Internet Access Gateway (IAG)0.7%
Other87.7%
Secure Web Gateways (SWG)
 

Featured Reviews

reviewer2701851 - PeerSpot reviewer
Managing Director
Enhances web security with a single pane of glass and flexible deployment
I don't see any need for improvement; one of the really good things about iboss as a company is that they listen to customer feedback. I have suggested enhancements, and they are responsive, making changes for the better, and they do a lot of testing. To improve iboss, although we haven't used it, we considered the VPN solution that comes with the highest tier licensing, which includes DLP and various other add-ons. We prefer using another product which automatically logs you back onto your network when turning on your PC. With iboss, the connection is manual, which doesn't meet our needs. Additionally, sizing can be tricky because, although the initial recommendations may seem adequate, actual usage may require more gateways than anticipated.
IgorPinter - PeerSpot reviewer
Director at PULSEC
Zero-trust access has improved remote security and now simplifies cloud-based firewall management
Regarding the integration part for Prisma Access by Palo Alto Networks, the integration with identity providers is pretty much good. It is basically firewall as a service, so it performs well. I completed the integration without any issues. What Palo Alto Networks can do better for Prisma Access by Palo Alto Networks is probably to have the point of presence available in more locations. The point of presence from the Serbia region has the nearest POP in Frankfurt, which is an issue since it is your gateway—when you start browsing the internet, you go through a commercial connection in Germany. They definitely need to spread the service in other countries.
Muhammad Asif Shaikh - PeerSpot reviewer
Deputy GM - IT at a manufacturing company with 1,001-5,000 employees
Designed to provide comprehensive and secure internet access with high visibility into users
After my purchase, I noticed a need for improvements, particularly in the area of identifying the source user of the device, which can sometimes roll back to the base. Additionally, there were challenges with SSL gate traffic, which wasn't functioning as effectively as expected. Even though there have been fixes to these issues, they should be inherent to the product and need further attention. These aspects, especially sub-features, aren't very robust and seem complex. Regarding integration, while Sangfor Internet Access Gateway (IAG) integrates well with its own products, its compatibility with third-party tools like QB is limited. There's room for improvement in making protocols compatible with various third-party products.

Quotes from Members

We asked business professionals to review the solutions they use. Here are some excerpts of what they said:
 

Pros

"The console is cloud-based, which is something I really appreciate."
"iboss is easy to use despite its complexity. Multiple engineers manage it, but it's significantly more straightforward to administer than traditional VPNs and web proxies."
"iboss is among the few products providing inline filtering where no application is needed on the device."
"We chose iboss for both zero trust and proxy (SWG) because their SWG was superior."
"Its initial setup was straightforward."
"iboss has significantly lowered the number of security incidents. It is crazy how much it blocks and how much it is aware of the outside danger."
"iboss is among the few products providing inline filtering where no application is needed on the device. It operates on the network side and is not device-based. This feature was one of the main reasons why we stayed with them for so long."
"Valuable features: Within the filter: Controls (Web categories, applications, and Allow/Block list) and Network (local Subnets). Within the reporter: Logs (Event Log) and Reports."
"The product's initial setup phase is simple."
"Prisma Access gives us security from a single point. It controls mobile users and determines how secure their networks will be, including from where they will get internet access. We can optimize things and add security profiles centrally."
"Prisma's most valuable feature would be its ability to identify bad or risky configurations."
"Prisma SaaS is very easy to use; it's common sense — it's the best-in-class."
"The always-on feature is fantastic for the users. They don't have to think about it. When they go to a coffee shop to do work, there's no need to remember to toggle the VPN on. We'll protect them. URL filtering is the same at home as it is in the office."
"The most valuable features are ZTNA 2.0, CASB, Threat Prevention, and Autonomous Digital Experience Management (ADAM)."
"The users can securely access any cloud data centers or cloud platforms. In terms of the features, it has all the features that Palo Alto Next-Generation Firewall has. It is also very stable and scalable."
"The most valuable feature is the ability to join your network and provide access through the VPN."
"The most significant aspect is the control it offers over internet traffic, like managing computer access to specific sites such as Facebook. I find particular value in its ability to control the depth of internal traffic, enabling actions like blocking specific file extensions on social media or specific IPs. This control by categories is a standout feature for us in Sangfor Internet Access Gateway (IAG)."
"Stability-wise, I rate the solution a ten out of ten."
"The solution is interoperable and has centralized management."
 

Cons

"The solution could be stronger on the integration side and offer more cloud applications like G Suite or Oracle."
"The reporting feature needs improvement. It doesn't give you the expected results. It is quite difficult to get the specific reports needed, and it is not as intuitive as the rest of the platform."
"To scale up, a new iboss Node Blade Chassis must be purchased."
"SSL decryption: We had issues with learners using apps instead of using web browsers. This type of encryption is tough for any appliance in a BYOD environment."
"Sometimes, obviously, there are bugs."
"If they could implement an extra security layer preventing access to iboss from the open internet, it would be great."
"Our biggest problem with their service was it did not recognize the device and filtering did not always work correctly."
"File integrity monitoring would be very advantageous as an additional feature."
"It applies commits to the firewalls slowly. There isn't an API you can use for anything. We've previously had trouble with the egress IP addresses though we expressed to engineering that those mustn't change. They changed several times without warning, causing a lot of headaches."
"There can be some latency issues with the solution that should be improved."
"It would be nice to manage Prisma Access through the cloud instead of through Panorama. You can use the cloud version to monitor Prisma Access, but it doesn't have all the features yet, and it's not 100% done."
"Sometimes a third-party outage could impact the whole operability."
"Palo Alto needs to improve the GlobalProtect agent to work as a secure web gateway agent, not only as a VPN agent because some companies would want only a secure gateway. They wouldn't want a full VPN. So, Palo Alto has to make the VPN agent work as a secure web gateway agent for those customers who want only the secure web gateway solution."
"The user interface could be better. They need to work a little bit on the console. It is similar to their firewalls but not exactly. They need to clean it up a bit."
"I would like the solution to support a different type of authentication. We can't configure a secondary method for our portal."
"They can add some new characteristics. For example, when an incident triggers, they can automatically send a template for a particular match that is related to the policy. We don't have that right now. It is something to improve. There could be more automation for certain actions. For example, for a particular group, it can send an administrator alert to their manager. It was one of the concerns of our customers."
"After my purchase, I noticed a need for improvements, particularly in the area of identifying the source user of the device, which can sometimes roll back to the base. Additionally, there were challenges with SSL gate traffic, which wasn't functioning as effectively as expected. Even though there have been fixes to these issues, they should be inherent to the product and need further attention. These aspects, especially sub-features, aren't very robust and seem complex. Regarding integration, while Sangfor Internet Access Gateway (IAG) integrates well with their own products, its compatibility with third-party tools like QB is limited. There's room for improvement in making protocols compatible with various third-party products."
"The solution's logging system should be improved because its logs are not precise and are a little confusing."
"In Sangfor Internet Access Gateway (IAG), its speed is an area of concern where improvements are required."
 

Pricing and Cost Advice

"It is not expensive, and it is also not cheap. iboss is priced right in the sweet spot for the number of features it offers."
"We had the cost of purchasing a new appliance along with the implementation and licensing costs. However, the following year, the cost of just licensing was similar to what was paid the previous year for a new appliance along with the implementation and licensing costs."
"The overall pricing for iboss is very competitive and transparent."
"It is expensive compared to one of its competitors."
"It is probably in line with other solutions, but I do not deal with the financial side."
"We have not priced the solution recently, but they were competitive with other vendors in the past."
"I'm still comparing, but the solution is quite expensive."
"Based on what I have heard from others, it is a pricey solution as compared to its peers, but I am not sure. However, considering the features that it offers, it is a break-even point. You get whatever they are promising."
"The solution is expensive."
"It's pricey, it's not cheap. But you get what you pay for."
"Palo Alto is the Cadillac solution, so their products are pretty expensive. That's just the way it is. Their solution surpasses anything else. Cisco AnyConnect, Zscaler, and all of the other products don't compare. Palo Alto is the market leader with the most features. It saves you work, and you don't have to worry about it."
"Prisma SaaS is more expensive than similar solutions but I think it's worth it."
"It is a little expensive. Because it is one of the best in the market, it is a little bit more expensive than other vendors."
"The licensing model for this product is complicated and changes all the time, making it very hard for the user to comprehend the configuration."
"I rate the product pricing a five or six out of ten on a scale of one to ten."
"The solution’s pricing is cheaper than any other solution."
"It is one of the reason for choosing it over other available products. However, recently, this year, there have been recurring concerns. I believe we might consider migrating to another solution."
report
Use our free recommendation engine to learn which Secure Web Gateways (SWG) solutions are best for your needs.
881,082 professionals have used our research since 2012.
 

Top Industries

By visitors reading reviews
No data available
Financial Services Firm
11%
Manufacturing Company
11%
Computer Software Company
11%
Government
5%
Construction Company
13%
Real Estate/Law Firm
9%
Comms Service Provider
7%
Manufacturing Company
6%
 

Company Size

By reviewers
Large Enterprise
Midsize Enterprise
Small Business
By reviewers
Company SizeCount
Small Business6
Midsize Enterprise6
Large Enterprise5
By reviewers
Company SizeCount
Small Business24
Midsize Enterprise21
Large Enterprise27
No data available
 

Questions from the Community

What needs improvement with iboss?
For zero trust implementation, we encountered complexity issues, especially with a large infrastructure company Exxon...
What is your primary use case for iboss?
Previously when I used iboss, we did the POC for iboss for ExxonMobil. Four or five people wanted to move from our ol...
What is your experience regarding pricing and costs for iboss?
Regarding pricing, setup costs, and licensing, iboss is not cheap, and that's my only concern. There are cheaper alte...
What is the better solution - Prisma Access or Zscaler Private Access?
We looked into Prisma Access before choosing Zscaler Private Access (ZPA). Palo Alto’s Prisma Access is a secure ac...
What do you like most about Prisma Access by Palo Alto Networks?
The most valuable features of the solution are in the areas of the secure remote access it provides while also being ...
What is your experience regarding pricing and costs for Prisma Access by Palo Alto Networks?
From my experience, Palo Alto is more expensive compared to solutions like Netskope and Triscale.
Ask a question
Earn 20 points
 

Also Known As

iBoss Cloud Platform
Palo Alto Networks Prisma Access, Prisma Access, GlobalProtect, Palo Alto GlobalProtect Mobile Security Manager, Prisma SaaS by Palo Alto Networks, Prisma Access
No data available
 

Overview

 

Sample Customers

More than 4,000 global enterprises trust the iboss Cloud Platform to support their modern workforces, including a large number of Fortune 50 companies.
Concord Hospital, State of Colorado, Essilor International, RheinLand Versicherungsgruppe, University of Westminster, Universidade Nove de Julho, SPAR Austria, CAME Group, ZipRealty, Greenhill & Co., IKT Agder, Aviva Stadium, Animal Logic, Management & Training Corporation, Brigham Young University Hawaii, School District of Chilliwack
Information Not Available
Find out what your peers are saying about Prisma Access by Palo Alto Networks vs. Sangfor Internet Access Gateway (IAG) and other solutions. Updated: December 2025.
881,082 professionals have used our research since 2012.