Try our new research platform with insights from 80,000+ expert users

Prisma Access by Palo Alto Networks vs Sangfor SSL VPN comparison

 

Comparison Buyer's Guide

Executive SummaryUpdated on Aug 6, 2024

Review summaries and opinions

We asked business professionals to review the solutions they use. Here are some excerpts of what they said:
 

Categories and Ranking

Prisma Access by Palo Alto ...
Ranking in Enterprise Infrastructure VPN
5th
Average Rating
8.2
Reviews Sentiment
7.0
Number of Reviews
65
Ranking in other categories
Secure Web Gateways (SWG) (4th), Cloud Access Security Brokers (CASB) (1st), ZTNA as a Service (1st), Secure Access Service Edge (SASE) (1st)
Sangfor SSL VPN
Ranking in Enterprise Infrastructure VPN
18th
Average Rating
8.6
Reviews Sentiment
7.6
Number of Reviews
6
Ranking in other categories
SSL VPN (8th)
 

Mindshare comparison

As of January 2026, in the Enterprise Infrastructure VPN category, the mindshare of Prisma Access by Palo Alto Networks is 5.8%, down from 6.3% compared to the previous year. The mindshare of Sangfor SSL VPN is 1.9%, up from 1.0% compared to the previous year. It is calculated based on PeerSpot user engagement data.
Enterprise Infrastructure VPN Market Share Distribution
ProductMarket Share (%)
Prisma Access by Palo Alto Networks5.8%
Sangfor SSL VPN1.9%
Other92.3%
Enterprise Infrastructure VPN
 

Featured Reviews

Roberto Pastorino - PeerSpot reviewer
Network and Cybersecurity Consultant at a tech services company with 11-50 employees
Have supported client adoption of security solutions but need more control over infrastructure
It's a working solution. It's not the easiest, but no DLP solution is easy. With Netskope, the whole infrastructure is proprietary. Prisma Access by Palo Alto Networks is using a service in AWS, and it's not totally a proprietary infrastructure. Sometimes a third-party outage could impact the whole operability. I'm not certain if the vendor is moving towards sovereignty of infrastructure at this moment, but from what I saw in the past, there was this reliance on third parties for the infrastructure: AWS, GCP, Oracle, and others. This is one point of attention for me. I would prefer more proprietary infrastructure.
MW
IT & Statistical Officer at THQ Hospital Choubara
Easy-to-use platform with an efficient user authentication process
There is an area of improvement related to the configuration of specific numbers required for compatibility with banks in our country. The platform initially had limited numbers available for configuration, which posed a challenge as banks operate on different numbers. To address this, we had to request Sangfor Management to add the required numbers, which they later accommodated.

Quotes from Members

We asked business professionals to review the solutions they use. Here are some excerpts of what they said:
 

Pros

"It's quite reliable and performs well for users."
"The scalability of the solution is excellent."
"Prisma integrates well with Cortex XDR and Cortex Data Lake. My company has been also using Prisma Access in-house for nearly a year, and it integrates seamlessly."
"This solution provides a DLP on the cloud and very few people have a scanning device for data at rest."
"Prisma Access provides comprehensive security. It provides URL filtering, application control, SSL, DLP, etc. It provides complete security for the cloud environment."
"It has predefined or preconfigured rules, which are getting periodically updated. They are providing continuous improvements and periodically updating all search queries that they are looking for. That is one thing that helps us to stay vigilant and focused. If we query our AWS account for any breaches or vulnerabilities with any of the cloud tests, and it alerts us based on these predefined rules. It also provides an option to configure our own rules, and based on these rules, it can query the cloud trail logs, pull the information, and trigger alerts in real-time. I haven't explored this feature much because there are multiple accounts, and we don't have enough time to explore this feature. It also provides multiple integrations. When vulnerabilities or breaches are happening, you should be aware of them immediately. It provides integration with tools such as Slack, PagerDuty so that you can get alerted as soon as the high severity stuff comes up. For example, you have a security group that has allowed public traffic on port 22. As TechOps, you should be aware of this immediately. You cannot scan each machine or look into all security groups to identify it. So, Prisma helps us and alerts us when this kind of high-priority stuff comes up. It has different statistics, analytics, and graphs for data. The description of alerts is also pretty good. They describe what are the possible causes for this and what are the solutions. From Prisma Cloud, you can directly go to the AWS account. When you click on an alert, a resource, or a resource ID, it takes you to the AWS console where you need to log in. If you are already logged in, it will take you to that instance directly, and you can fix the issue there. I have found this feature very useful."
"The tool's consolidation is pretty quick."
"Prisma's most valuable feature would be its ability to identify bad or risky configurations."
"Sangfor SSL VPN provides secure encryption for communication."
"The platform is easy to use."
"The most valuable feature is our ability to limit access by user, IP address, or MAC address."
"It is a stable solution...The initial setup of the product is very easy."
"Sangfor SSL VPN has a user-friendly user interface."
"Sangfor SSL VPN is a secure and user-friendly solution."
 

Cons

"The solution’s stability could be improved."
"The BGP filtering options on Prisma Access should be improved."
"One thing that would help is if we could get a guide. With Cisco, for example, you can just type the problem regarding your Cisco product and you will easily get your solution. In Palo Alto, however, it's not easy to find the solutions."
"The product's current price is an area of shortcoming where improvements are required."
"The frequency of updates could be reduced."
"The tools' scalability is subject to some limitations when done on-premise due to the need for additional licenses. However, in other scenarios, increasing scalability involves expanding infrastructure to accommodate more third-party VPN access. It is scalable as long as you pay the money. Also, it needs to improve security."
"One area for improvement is for them to stay on top of keeping their CVEs on their platform up to date."
"Its integration with non-Palo Alto products can be improved. Currently, it is easy to integrate it with other Palo Alto products such as Cortex XDR. It integrates well with other Palo Alto products. A major part of our network is based on Palo Alto products, but for those companies that use multi-vendor products in their infrastructure, Palo Alto should optimize the integration of Prisma Access with the network devices from other vendors."
"The technical support team takes around two months to respond to queries. It is very time-consuming."
"In redundancy mode, when the firewall goes off, the VPN should be able to connect to the secondary firewall automatically."
"The solution's integration with other firewall vendors could be improved."
"Sangfor SSL VPN should provide advanced protection against ransomware and better data analysis."
"No solution is perfect, so there is room for improvement."
"I think Sangfor can provide a web-based SSL VPN version."
 

Pricing and Cost Advice

"The licensing model for this product is complicated and changes all the time, making it very hard for the user to comprehend the configuration."
"It's pricey, it's not cheap. But you get what you pay for."
"The price has been good for the ROI during these difficult times for the cruise industry. There are no hidden costs; what the product offers is what you get."
"Actually the solution is very expensive. I don't know the particulars since the purchasing team dealt with it."
"There's no reason not to buy the enterprise version that gives you unlimited PoPs, but you must understand the limitations you impose on yourself if you do that. If you go crazy, that allowlist will be too big for Kubernetes clusters."
"The licensing cost is about 18,000 euros."
"I would advise choosing your options according to your company's needs. Just go for what you want and do not pay for anything extra in terms of licensing. You need to determine how much bandwidth is required in your company network, and according to that, you should pay for the license. The mobile user license is based on the number of users who are going to use the VPN solution. You need to determine how many mobile users you are going to have in your network, and you should pay according to that. There are no other costs in addition to licensing, but if you go for the consultant services of Palo Alto networks to deliver the solution for you, then you need to pay something extra. That is not a part of licensing."
"Prisma Access by Palo Alto Networks has flexible licensing models with different categories. It comes with different features which can be removed if not needed. However, its pricing is high."
"The pricing is good and the standard license allows for 30 users."
"The product is inexpensive."
"The first 30 licenses are free, and you have to purchase the rest if required."
"Sangfor SSL VPN is a cheap solution."
"My company has a three-year license for Sangfor SSL VPN."
report
Use our free recommendation engine to learn which Enterprise Infrastructure VPN solutions are best for your needs.
879,455 professionals have used our research since 2012.
 

Top Industries

By visitors reading reviews
Financial Services Firm
12%
Manufacturing Company
11%
Computer Software Company
11%
Government
5%
Computer Software Company
16%
Financial Services Firm
8%
Manufacturing Company
7%
Comms Service Provider
7%
 

Company Size

By reviewers
Large Enterprise
Midsize Enterprise
Small Business
By reviewers
Company SizeCount
Small Business23
Midsize Enterprise21
Large Enterprise27
No data available
 

Questions from the Community

What is the better solution - Prisma Access or Zscaler Private Access?
We looked into Prisma Access before choosing Zscaler Private Access (ZPA). Palo Alto’s Prisma Access is a secure access service edge (SASE) designed to deliver network security in a cloud-deliver...
What do you like most about Prisma Access by Palo Alto Networks?
The most valuable features of the solution are in the areas of the secure remote access it provides while also being user-friendly.
What is your experience regarding pricing and costs for Prisma Access by Palo Alto Networks?
From my experience, Palo Alto is more expensive compared to solutions like Netskope and Triscale.
What needs improvement with Sangfor SSL VPN?
The solution's integration with other firewall vendors could be improved. Its interoperability matrices and different configurations with other vendor products also need improvements. Our client ha...
 

Also Known As

Palo Alto Networks Prisma Access, Prisma Access, GlobalProtect, Palo Alto GlobalProtect Mobile Security Manager, Prisma SaaS by Palo Alto Networks, Prisma Access
No data available
 

Overview

 

Sample Customers

Concord Hospital, State of Colorado, Essilor International, RheinLand Versicherungsgruppe, University of Westminster, Universidade Nove de Julho, SPAR Austria, CAME Group, ZipRealty, Greenhill & Co., IKT Agder, Aviva Stadium, Animal Logic, Management & Training Corporation, Brigham Young University Hawaii, School District of Chilliwack
Investcorp, Central Bancorp, Griffiths & Armour
Find out what your peers are saying about Prisma Access by Palo Alto Networks vs. Sangfor SSL VPN and other solutions. Updated: December 2025.
879,455 professionals have used our research since 2012.