No more typing reviews! Try our Samantha, our new voice AI agent.

Prisma Access by Palo Alto Networks vs Sangfor SSL VPN comparison

 

Comparison Buyer's Guide

Executive SummaryUpdated on Aug 6, 2024

Review summaries and opinions

We asked business professionals to review the solutions they use. Here are some excerpts of what they said:
 

Categories and Ranking

Prisma Access by Palo Alto ...
Ranking in Enterprise Infrastructure VPN
7th
Average Rating
8.2
Reviews Sentiment
6.9
Number of Reviews
65
Ranking in other categories
Secure Web Gateways (SWG) (4th), Cloud Access Security Brokers (CASB) (1st), ZTNA as a Service (5th), Secure Access Service Edge (SASE) (1st)
Sangfor SSL VPN
Ranking in Enterprise Infrastructure VPN
17th
Average Rating
8.6
Reviews Sentiment
7.6
Number of Reviews
6
Ranking in other categories
SSL VPN (7th)
 

Mindshare comparison

As of May 2026, in the Enterprise Infrastructure VPN category, the mindshare of Prisma Access by Palo Alto Networks is 6.3%, down from 6.5% compared to the previous year. The mindshare of Sangfor SSL VPN is 2.7%, up from 1.0% compared to the previous year. It is calculated based on PeerSpot user engagement data.
Enterprise Infrastructure VPN Mindshare Distribution
ProductMindshare (%)
Prisma Access by Palo Alto Networks6.3%
Sangfor SSL VPN2.7%
Other91.0%
Enterprise Infrastructure VPN
 

Featured Reviews

IgorPinter - PeerSpot reviewer
Director at PULSEC
Zero-trust access has improved remote security and now simplifies cloud-based firewall management
Regarding the integration part for Prisma Access by Palo Alto Networks, the integration with identity providers is pretty much good. It is basically firewall as a service, so it performs well. I completed the integration without any issues. What Palo Alto Networks can do better for Prisma Access by Palo Alto Networks is probably to have the point of presence available in more locations. The point of presence from the Serbia region has the nearest POP in Frankfurt, which is an issue since it is your gateway—when you start browsing the internet, you go through a commercial connection in Germany. They definitely need to spread the service in other countries.
Wajeeh Ul Hasan . - PeerSpot reviewer
Network Administrator at Shaheed Zulfiqar Ali Bhutto Institute of Science and Technology
A secure and user-friendly solution that is simple to implement and configure
We used Sangfor SSL VPN to access our servers from home during COVID-19 in case of emergency Sangfor SSL VPN has secured our organization, and we haven't faced any attacks. Sangfor SSL VPN is a secure and user-friendly solution. The other valuable features of the solution include web access…

Quotes from Members

We asked business professionals to review the solutions they use. Here are some excerpts of what they said:
 

Pros

"It protects all app traffic so that users can gain access to all apps. Unlike other solutions that only work from ports 80 and 443, which are predominantly for web traffic, Prisma Access covers all protocols and works on all traffic patterns... The most sophisticated attacks can arise from sources that are not behind 80/443."
"The stacked policies, event policies, and routing policies are easy to understand for someone with general knowledge."
"It supports auto-scaling for mobile users. It auto-scales depending on the mobile user traffic. For example, if 1,000 people are working from home today, and tomorrow, the number increases to 2,000, it is not going to be an issue."
"Overall, I am very happy with the security provided by Prisma Access."
"The visibility perspective is pretty cool. If I want to know how much data is being used for a specific project, I can look at how much data has been used, from which region, and which users have been connected. That visibility is very good so that I can see how many licenses we have and how many are used."
"We're now able to go after contracts that require a Zero Trust solution and Prisma's other technology solutions."
"There are plenty of features this solution provides and the most valuable would be the complete security protection we are receiving, including similar security to the Palo Alto AWS solution with features such as a firewall and machine learning AI, while the cloud server provides maximum uptime, controls, and overall strong security."
"The solution is not very complex and is easy to manage for people who may or may not have knowledge about Palo Alto Networks."
"The most valuable feature is our ability to limit access by user, IP address, or MAC address."
"It is a stable solution...The initial setup of the product is very easy."
"Sangfor SSL VPN provides secure encryption for communication."
"Altogether, this is a very good product."
"Sangfor SSL VPN has a user-friendly user interface."
"The platform is easy to use."
"Sangfor SSL VPN is a secure and user-friendly solution."
 

Cons

"Palo Alto Prisma 10 came out over a year ago. Palo Alto added this identity management feature. The legacy way Palo Alto selected which user is sitting on an IP address it passes through has been clunky."
"Palo Alto Prisma 10 came out over a year ago. Palo Alto added this identity management feature. The legacy way Palo Alto selected which user is sitting on an IP address it passes through has been clunky."
"My clients are not satisfied with the technical support from Palo Alto Networks."
"They automatically update and they should give us time to fully understand what they're updating so that we can make sure it doesn't impact production."
"It's not very easy to use. Sometimes it's buggy and there are problems when doing updates. The user interface is okay, but some configuration items are difficult. I would like it to be less buggy and easier to configure, to better streamline the user experience."
"Palo Alto needs to improve the GlobalProtect agent to work as a secure web gateway agent, not only as a VPN agent because some companies would want only a secure gateway. They wouldn't want a full VPN. So, Palo Alto has to make the VPN agent work as a secure web gateway agent for those customers who want only the secure web gateway solution."
"There is a lack of integration with third-party solutions like CrowdStrike or SentinelOne in Prisma Access by Palo Alto Networks. Although they have a tight ecosystem with their products, opening up for integration with other solutions would be beneficial."
"The user interface could be better. They need to work a little bit on the console. It is similar to their firewalls but not exactly. They need to clean it up a bit."
"In redundancy mode, when the firewall goes off, the VPN should be able to connect to the secondary firewall automatically."
"No solution is perfect, so there is room for improvement."
"No solution is perfect, so there is room for improvement."
"Sangfor SSL VPN should provide advanced protection against ransomware and better data analysis."
"I think Sangfor can provide a web-based SSL VPN version."
"The solution's integration with other firewall vendors could be improved."
"The technical support team takes around two months to respond to queries. It is very time-consuming."
 

Pricing and Cost Advice

"Palo Alto is the Cadillac solution, so their products are pretty expensive. That's just the way it is. Their solution surpasses anything else. Cisco AnyConnect, Zscaler, and all of the other products don't compare. Palo Alto is the market leader with the most features. It saves you work, and you don't have to worry about it."
"The solution requires a license and the technical support has extra costs. The licensing model could improve."
"There's no reason not to buy the enterprise version that gives you unlimited PoPs, but you must understand the limitations you impose on yourself if you do that. If you go crazy, that allowlist will be too big for Kubernetes clusters."
"The licensing model for this product is complicated and changes all the time, making it very hard for the user to comprehend the configuration."
"I would advise choosing your options according to your company's needs. Just go for what you want and do not pay for anything extra in terms of licensing. You need to determine how much bandwidth is required in your company network, and according to that, you should pay for the license. The mobile user license is based on the number of users who are going to use the VPN solution. You need to determine how many mobile users you are going to have in your network, and you should pay according to that. There are no other costs in addition to licensing, but if you go for the consultant services of Palo Alto networks to deliver the solution for you, then you need to pay something extra. That is not a part of licensing."
"The pricing can be difficult because it came to us with another agreement, but it can be negotiated. I highly recommend people to compare this product's performance and pricing against BetterCloud, because I feel BetterCloud is better than Prisma SaaS if they're starting from scratch."
"Prisma is in the middle of the road. It's not the most expensive, but it's not the cheapest. There aren't any additional costs, to my knowledge. I know they have some extra modules, but we didn't use them."
"Based on what I have heard from others, it is a pricey solution as compared to its peers, but I am not sure. However, considering the features that it offers, it is a break-even point. You get whatever they are promising."
"Sangfor SSL VPN is a cheap solution."
"The pricing is good and the standard license allows for 30 users."
"The first 30 licenses are free, and you have to purchase the rest if required."
"My company has a three-year license for Sangfor SSL VPN."
"The product is inexpensive."
report
Use our free recommendation engine to learn which Enterprise Infrastructure VPN solutions are best for your needs.
896,034 professionals have used our research since 2012.
 

Top Industries

By visitors reading reviews
Financial Services Firm
12%
Manufacturing Company
10%
Computer Software Company
8%
Comms Service Provider
5%
Comms Service Provider
11%
Manufacturing Company
9%
Computer Software Company
9%
University
8%
 

Company Size

By reviewers
Large Enterprise
Midsize Enterprise
Small Business
By reviewers
Company SizeCount
Small Business26
Midsize Enterprise20
Large Enterprise27
No data available
 

Questions from the Community

What is the better solution - Prisma Access or Zscaler Private Access?
We looked into Prisma Access before choosing Zscaler Private Access (ZPA). Palo Alto’s Prisma Access is a secure access service edge (SASE) designed to deliver network security in a cloud-deliver...
What is your experience regarding pricing and costs for Prisma Access by Palo Alto Networks?
From my experience, Palo Alto is more expensive compared to solutions like Netskope and Triscale.
What needs improvement with Prisma Access by Palo Alto Networks?
Regarding the integration part for Prisma Access by Palo Alto Networks, the integration with identity providers is pretty much good. It is basically firewall as a service, so it performs well. I co...
What needs improvement with Sangfor SSL VPN?
The solution's integration with other firewall vendors could be improved. Its interoperability matrices and different configurations with other vendor products also need improvements. Our client ha...
What is your primary use case for Sangfor SSL VPN?
We're currently exploring Sangfor SSL VPN more on the cybersecurity side.
 

Also Known As

Palo Alto Networks Prisma Access, Prisma Access, GlobalProtect, Palo Alto GlobalProtect Mobile Security Manager, Prisma SaaS by Palo Alto Networks, Prisma Access
No data available
 

Overview

 

Sample Customers

Concord Hospital, State of Colorado, Essilor International, RheinLand Versicherungsgruppe, University of Westminster, Universidade Nove de Julho, SPAR Austria, CAME Group, ZipRealty, Greenhill & Co., IKT Agder, Aviva Stadium, Animal Logic, Management & Training Corporation, Brigham Young University Hawaii, School District of Chilliwack
Investcorp, Central Bancorp, Griffiths & Armour
Find out what your peers are saying about Prisma Access by Palo Alto Networks vs. Sangfor SSL VPN and other solutions. Updated: April 2026.
896,034 professionals have used our research since 2012.