Prisma Access by Palo Alto Networks vs VMware SD-WAN comparison

Cancel
You must select at least 2 products to compare!
Comparison Buyer's Guide
Executive Summary

We performed a comparison between Prisma Access by Palo Alto Networks and VMware SD-WAN based on real PeerSpot user reviews.

Find out in this report how the two Secure Access Service Edge (SASE) solutions compare in terms of features, pricing, service and support, easy of deployment, and ROI.
To learn more, read our detailed Prisma Access by Palo Alto Networks vs. VMware SD-WAN Report (Updated: November 2022).
656,862 professionals have used our research since 2012.
Featured Review
Quotes From Members
We asked business professionals to review the solutions they use.
Here are some excerpts of what they said:
Pros
"A single pane of glass saves time... This does have a lot of options available for us to see who's doing what, what trends, what errors. We can set up our alerting through it as well. It is definitely a great dashboard.""Its simplicity is most valuable. I can install it and get it up and running, and it can be pervasive across my business within a business day. It is pretty simple and straightforward to install and configure. Its remit is reasonably clearly defined. When you look at solutions like Darktrace and Carbon Black, the mission objective isn't as clearly defined. Cisco Umbrella, Sophos Central, or some of the other solutions have a more standardized approach to antivirus, which includes enhanced response from the machine learning or deep learning perspective.""The most valuable feature is the ability to block users from reaching places that they should not even try to reach has been a boon.""I like the original functionality, which allows for providing secure DNS services.""It is a good cloud-based solution for DNS security.""Cisco Umbrella is a totally different solution. They are the first to come up with this idea of security. It's a totally new concept of security for everybody, for every time, real time, perfectionism.""We've found it to be stable and good for our customers.""Umbrella, being one pane for managing, being all-encompassing, allows us to quickly go in, make a change, and it applies to either every location, if we want it to, or we can have policies in place that only apply to certain users or certain computers."

More Cisco Umbrella Pros →

"We're now able to go after contracts that require a Zero Trust solution and Prisma's other technology solutions.""It is geographically dispersed, and it sits on top of Google and AWS platforms. Therefore, you don't face the standard issues, such as latency or bandwidth issues, that you usually face in the case of on-prem data centers.""It's much faster and more secure than legacy solutions. It is also quite stable and scalable as well. We are able to see all the traffic in one place.""The solution also provides traffic analysis, threat prevention, URL filtering, and segmentation. That combination is important because it enhances the protection and makes the traffic more secure. It also keeps things more up-to-date, enabling us to deal with more of the current threats.""We have an application called ADEM that helps us troubleshoot network-related issues. It helps us to isolate an issue whether it is on the ISP level, endpoint level, or system access level.""The most valuable feature is the ability to change the gateway. For example, if there's a problem with a specific region or vendor, we can make modifications. The solution is scalable, and there are different gateways that can be created depending on the demand.""Prisma Access protects all app traffic, so that users can gain access to all apps and that's very important because we need to be able to access everything. It also allows us to access non-web apps; anything internal that we need access to, we can access.""A feature I've found very helpful is run time security because most of the products on the market will look at security during the build time, and they don't really look at what happens once you're going into production."

More Prisma Access by Palo Alto Networks Pros →

"It is very simple to configure. When you use the cloud to configure the equipment, it has zero-touch provisioning.""This solution is as stable as most firewalls. VMware is a reputable vendor.""Some of the best features are the SD-WAN platform for VMware and the NSX network virtualization.""The most valuable feature of this solution is manageability.""It is fairly similar to other solutions. It has the capability for testing link connectivity, which is its unique feature from a control perspective.""Has an optimization feature that acts to ensure the quality of the services running on the overlay to be most valuable.""VMware is the only SD-WAN solution that integrates with Azure Virtual WAN.""When we upgrade to one of the edges, it goes very smoothly."

More VMware SD-WAN Pros →

Cons
"Its on-prem rollout is quite challenging. It needs better coordination with the Internet Service Provider. It is a cloud-based solution, and any endpoint that connects to it has to go through all the gateway ISPs, but some of the ISPs block HTTPS-based DNS. That's where the challenge occurs with Umbrella.""It could be improved by having a local data center and caching, which can provide protection support. I would like to be able to channel my intel and my network traffic to their clouds, and this feature is not available. Advanced protection or any malware file support, which might be required, is not available.""There are a couple of different pieces that have different portals. I know they're working on getting them all into one portal, but that's probably the biggest thing that needs improvement right now. It's not a single pane of glass yet.""If we're trying to deploy it to a Mac through Meraki, it's impossible. The method of deployment for a Mac, and the features available in Meraki, are not compatible at all.""I think it's a very basic solution, and because of that, Cisco Umbrella would not be a suitable solution for large companies.""We would like to see the enhancements made to the EDR, as we see features that are running endpoint management.""The integration with Cisco could be better.""Something on our end that might make it better is alerting going to our ticketing system. It's not something that we have discussed, but that would be a proactive option for us to provide a learning experience for the staff."

More Cisco Umbrella Cons →

"There is some particular traffic that the security team wants to filter out and apply their own policies and they cannot.""When we deploy firewall rules via Panorama, we find it's a little bit slow. We have a global environment and might have 100 gateways or VPNs in the cloud. When we deploy something, it tries to deploy it one-by-one, and that can be slow.""It is a managed firewall. When you run into issues and have to troubleshoot, there is a fair amount of restriction. You run into a couple of restrictions where you don't have any visibility on what is happening on the Palo Alto managed infrastructure, and you need to get on a call to get technical assistance from Palo Alto's technical support. You have to get them to work with you to fix the problem. I would definitely like them to work on the visibility into what happens inside Palo Alto's infrastructure. It is not about getting our hands onto their infrastructure to do troubleshooting or fixing problems; it is just about getting more visibility. This will help us in guiding technical support folks to the area where they need to work.""I haven't seen any SD-WAN configuration capability. If Prisma Access would support SD-WAN, that would help... SD-WAN devices should be able to reach Prisma Access, and Palo Alto should support different, vendor-specific devices, not just Palo Alto devices, for SD-WAN configuration.""The BGP filtering options on Prisma Access should be improved.""There should be a dedicated portal or SASE-based solution. They're trying to add a plugin but it needs a dedicated portal because it is now an enterprise solution for multiple organizations. People should be able to directly log in to a dedicated page for Prisma Access, rather than going into a Panorama plugin, and always having to update the plugin.""It would be nice to manage Prisma Access through the cloud instead of through Panorama. You can use the cloud version to monitor Prisma Access, but it doesn't have all the features yet, and it's not 100% done.""There is room for improvement in the multi-environment visibility, especially around containers."

More Prisma Access by Palo Alto Networks Cons →

"VMware SD-WAN can improve on the security features.""Security is a challenge. I would like to see VMware add things like IPS, IDS, and web filtering. These features are the future of security, and most competing firewalls have them.""The initial setup could be simplified for beginners.""The firewall can be more advanced.""The cost is a little bit high.""VMware SD-WAN could be improved with more automation and more integration, but each vendor could use these improvements.""Its integration with the security systems would be a nice implementation. They can also consider using a management platform for both network and security operations. This would be a great improvement.""There are a number of customers we have that require a fully mashed SD-WAN on VeloCloud that is not available currently."

More VMware SD-WAN Cons →

Pricing and Cost Advice
  • "There is a subscription cost."
  • "The price could be lower."
  • "The price is quite good."
  • "Pricing depends on the automation requirements of the organization."
  • "It has a reasonable price. It is certainly not as expensive as it used to be. It is in line with other offerings on the market. There are a number of different flavors of Umbrella. They could bring Umbrella SIG down a bit because its price is a little bit high for what it does, but I also understand why its price is high."
  • "Cisco Umbrella is expensive and could be cheaper."
  • "When talking about Cisco solutions in general there pricing model is horrible. For example, you can sell a Meraki-based solution, but if the customer starts shopping around, someone is going to have access to the pricing at a level that you cannot compete because they do not have uniform pricing. Not everybody gets fair pricing. Unless you are one of the real major corporations selling the solution your ability to compete is impossible. Cisco will acknowledge the situation and assure you next time it will be in your favor but it never becomes favorable for you. Cisco is not very good in this regard. However, Umbrella is good."
  • "The licensing fee is paid on a yearly basis."
  • More Cisco Umbrella Pricing and Cost Advice →

  • "Prisma Access is a little bit expensive."
  • "The solution requires a license and the technical support has extra costs. The licensing model could improve."
  • "The price has been good for the ROI during these difficult times for the cruise industry. There are no hidden costs; what the product offers is what you get."
  • "It's pricey, it's not cheap. But you get what you pay for."
  • "The initial prices of Prisma Access were okay. But as soon as you start deploying Palo Alto gear, the support prices and the recurring prices, which are the major operational costs, tend to increase over time."
  • "Based on what I have heard from others, it is a pricey solution as compared to its peers, but I am not sure. However, considering the features that it offers, it is a break-even point. You get whatever they are promising."
  • "The pricing can be difficult because it came to us with another agreement, but it can be negotiated. I highly recommend people to compare this product's performance and pricing against BetterCloud, because I feel BetterCloud is better than Prisma SaaS if they're starting from scratch."
  • "It is pretty expensive. We have to balance the cost of some features. They need to work on some of the services and products, price-wise."
  • More Prisma Access by Palo Alto Networks Pricing and Cost Advice →

  • "The price is reasonable for this solution, but the only challenge for us is that the Rand currency fluctuates to the dollar and provides some complexities. The price might go up just because the Rand has actually lost value."
  • "The cost of VMware SD-WAN is high, but I think you can still get better pricing if your volume is high."
  • "The price of the solution could be reduced."
  • "My understanding is that the pricing is in the same range as other solutions."
  • "You need to pay for a license to use this product."
  • "There is only a standard fee for the solution."
  • "The licensing model of VMware SD-WAN could be improved, it is not always that competitive. The biggest concern is to be competitive against other solutions. However, the way that the licensing model is designed is not corresponding to the real use cases of my customers."
  • "Overall pricing could be lower. It is much more expensive than traditional hardware vendor pricing."
  • More VMware SD-WAN Pricing and Cost Advice →

    report
    Use our free recommendation engine to learn which Secure Access Service Edge (SASE) solutions are best for your needs.
    656,862 professionals have used our research since 2012.
    Questions from the Community
    Top Answer: Cisco Umbrella and Zscaler Internet Access are two broad-spectrum Internet security solutions that I have tried.… more »
    Top Answer:Cisco Umbrella is an integral component of the Cisco SASE architecture. It integrates security in a single, cloud-native… more »
    Top Answer:The single-pane-of-glass management is really important. In today's era, administration costs and operational expenses… more »
    Top Answer: We looked into Prisma Access before choosing Zscaler Private Access (ZPA). Palo Alto’s Prisma Access is a secure… more »
    Top Answer:The most valuable feature is the ability to change the gateway. For example, if there's a problem with a specific region… more »
    Top Answer:The pricing is very friendly and that's the reason why we renewed this solution. It was really just based on pricing… more »
    Top Answer:One of our favorite things about Fortinet Fortigate is that you can deploy on the cloud or on premises. It is a very… more »
    Top Answer:It's competitive, yet it's a little bit more expensive than other brands. We pay about $500 USD, or 700,000 Korean won… more »
    Comparisons
    Also Known As
    OpenDNS
    Palo Alto Networks Prisma Access, Prisma Access, GlobalProtect, Palo Alto GlobalProtect Mobile Security Manager
    VeloCloud
    Learn More
    Overview

    Cisco Umbrella offers flexible, cloud-delivered security according to users’ requirements Cisco Umbrella includes secure web gateway, firewall, and cloud access security broker (CASB) functionality all delivered from a single cloud security service. Cisco Umbrella’s protection is extended to devices, remote users, and distributed locations anywhere. As company employees work from many locations and devices, Cisco Umbrella is the easiest way to effectively protect users everywhere in minutes.

    Cisco Umbrella uses machine learning to search for, identify, and even predict malicious domains. By learning from internet activity patterns, this DNS-layer security solution can automatically identify attacker infrastructure being staged for the next threat. These domains are then proactively blocked, protecting networks from potential compromise. Cisco Umbrella analyzes terabytes of data in real time across all markets, geographies, and protocols.

    Cisco Umbrella works with leading IT companies to integrate its security enforcement and intelligence. Built with a bidirectional API, Cisco Umbrella makes it easy to extend protection from on-premises security appliances to cloud controlled devices and sites.

    Cisco Umbrella is suitable for small businesses without dedicated security professionals, as well as for multinational enterprises with complex environments.

    Why use Cisco Umbrella?

    • Simplify security management: Cisco Umbrella is the fastest and easiest way to protect all users within minutes and reduces the number of infections and alerts sent from other security products by stopping threats at the earliest point. With no hardware to install and no software to manually update, ongoing management is simple

    • Reliable reporting: Cisco Umbrella reports show activity for each device or network in the system. Users gain a more complete picture of the security risks facing their organization and can take action to remedy them.

    • Manage and control cloud apps: Umbrella provides visibility into sanctioned and unsanctioned cloud services in use across the enterprise. Users can uncover new services being used, see who is using them, identify potential risk, and block specific applications easily.

    Reviews from Real Users

    Cisco Umbrella stands out among its competitors for a number of reasons. Some of the major ones are its DNS-based protection, ability to protect users no matter where they are located, stability, and high performance.

    Daniel B., a network specialist at Syswind Kft, writes, “We primarily use the solution as cloud security for our branches. It protects us from direct internet outbreaks. It makes for good flexibility. The solution is very easy to manage. We found the initial setup, for example, to be quite simple. Efficient protection on the DNS level and even higher. The sandboxing feature analyses and handles the complicated security risks.”

    Victor M., SOC & Security Services Director at BEST, notes, “It provides security for the remote workers and it helps to improve enterprise security in a very easy way. We mainly enjoy web software protection capabilities. It prevents the end-users from getting into bad sites or sites that potentially could have malware or could be phishing. It helps end-users avoid the wrong sites. The solution works very smoothly. The user interface is good.”

    Prisma Access by Palo Alto Networks provides consistent security for all users and applications across your remote networks. Prisma Access grants users safe access to the cloud and data center applications and the internet as well. In addition, the solution combines all of your security and networking capabilities into a single cloud-delivered platform, enabling flexible hybrid workforces.

    Prisma Access can be managed two ways:

    1. Cloud Managed
    2. Panorama Managed

    Prisma Access delivers both networking and security services, including:

    • SD-WAN
    • VPN
    • Zero Trust network access (ZTNA)
    • Quality of service (QoS)
    • Clean Pipe
    • Firewall as a service (FWaaS)
    • DNS Security
    • Threat Prevention
    • Cloud secure web gateway (SWG)
    • Data loss prevention (DLP)
    • Cloud access security broker (CASB)

    Prisma Access by Palo Alto Networks Features

    Prisma Access by Palo Alto Networks has many valuable key features including: App-ID, User-ID, Device-ID, SSL Decryption, Dynamic User Group (DUG) Monitoring, AI/ML-Based Detection, IoT Security, Reporting, URL Filtering, Enterprise Data Loss Prevention (DLP), Digital Experience Monitoring (DEM)*, Logging, Policy Automation, Intrusion Prevention System (IPS), and many more.

    Prisma Access by Palo Alto Networks Benefits

    Some of the benefits of using Prisma Access by Palo Alto Networks include:

    • Security: Prisma Access gives you consistent security to protect against cyberattacks, with enforcement of policy at every location. By implementing Prisma Access, you also gain protection that works to prevent known and unknown malware, exploits, credential theft, command and control, and many other attack vectors across all ports and protocols.

    • Global connectivity: Prisma Access provides global coverage through use of its connectivity layer.

    • Scalability: With Prisma Access, scaling is automatically managed and is scalable, flexible, and agile.

    • Instant deployment: Deployment is fast, eliminating wasted time that may otherwise be associated with setting up a solution, operating it, or shipping hardware in order to get started.

    Reviews from Real Users

    Below are some reviews and helpful feedback written by Microsoft Azure Synapse Analytics

    users who are currently using the solution.

    PeerSpot user Partha D., Global Network Tech Lead at a computer software company, speaks about his experience using the product, saying, "It protects all app traffic so that users can gain access to all apps. Unlike other solutions that only work from ports 80 and 443, which are predominantly for web traffic, Prisma Access covers all protocols and works on all traffic patterns... The most sophisticated attacks can arise from sources that are not behind 80/443."

    Tejas J., a Sr. Cloud Security Architect at a computer software company, mentions that "it is geographically dispersed, and it sits on top of Google and AWS platforms. Therefore, you don't face the standard issues, such as latency or bandwidth issues, that you usually face in the case of on-prem data centers.

    Another PeerSpot reviewer, Max I., Associate Director at Cognizant, comments that "Security is absolutely spot-on, really top-notch. It's the result of all the components that come together, such as the HIP [Host Information Profile] and components like Forcepoint, providing end-user content inspection, and antivirus. It incorporates DLP features and that's fantastic because Prisma Access makes sure that all of the essential prerequisites are in place before a user can log in or can be tunneled into."

    VMware Software-Defined Wide Area Network (SD-WAN) is a secure access service edge (SASE) platform that combines many types of software-based network technologies in an attempt to enable users to virtualize their wide area networks and reduce their reliance on hardware. In essence, this solution makes it possible for users to reliably access their applications from anywhere in the world by leveraging cloud technologies. Users can simply, efficiently, and completely control their network devices and traffic. It ensures that organizations are always able to use the best possible connection to their data centers. VMware SD-WAN steers traffic so that it is always using the most reliable connections and at the same time takes steps to remediate any problems that it detects in other network links. This guarantees that organizations can access high-priority applications at all times. 

    VMware SD-WAN Benefits

    Some of the ways that organizations can benefit by deploying VMware SD-WAN include:

    • Reduced cost of network management. Organizations that choose to employ VMware SD-WAN can manage their network at a cost that is 2.5 times less expensive than what it costs to use traditional WAN architectures. Its ability to both augment existing hardware and replace said hardware if the user chooses to do so is part of what enables users to reduce their overhead costs. 
    • Ease of deployment. VMware SD-WAN makes it possible for organizations to deploy it without having to rely on the assistance of technical experts. When the device - whether virtual or otherwise - is connected to the internet, it integrates with a central orchestrator that pushes the correct integrations to the device in question. This automates the installation process and makes it so that anybody can initiate and follow the deployment through to the end of the process. 
    • Easily segment networks to improve environmental performance. Users can divide their networks into multiple segments that share a single IP address. These networks can be incorporated into an organization’s IT infrastructure and enable it to run more reliably. One way it does this is by providing multiple potential channels for data to use to travel in the event that one of the data pathways is suffering from some kind of issue. 

    VMware SD-WAN Features

    • Centralized monitoring. VMware SD-WAN is monitored at all times by a centralized orchestrator. From one place, an organization can watch every part of its network. Instead of having to search for the data they need, it can all be found in one location.
    • Integration capabilities. VMware SD-WAN offers users the capability to integrate their network with the environment of their choosing. This enables them to connect their network to the IT environment that best meets their needs. It makes it easy for them to work with multi-cloud and hybrid environments.
    • Real-time data analytics. VMware SD-WAN can analyze network data in real time. This makes it easy for users to monitor their network’s performance. It also allows them to take steps to quickly remediate any issues that arise before they can become worse.

    Reviews from Real Users

    VMware SD-WAN is a solution that stands out when compared to many of its competitors. Two major advantages it offers are its ability to automate the process of creating and maintaining a virtual local area network and its intuitive user dashboard.

    Sami I., principal cloud architect at Loihe, writes, “One of the solution's most valuable features is the VMware core automation stack at an SDDC. It includes NSX, the VMware virtualization layer for the networks (the LAN virtualization), which works extremely well with the VMware SD-WAN solution and is the primary advantage over all the others. None of the other vendors could integrate with the virtual LAN, making it quite complicated and virtualized to be fully automated.”

    Chih S., senior technical consultant at a tech services company,  says, “The product has a very good user dashboard that is simple to navigate.” 

    Offer
    Learn more about Cisco Umbrella
    Learn more about Prisma Access by Palo Alto Networks
    Learn more about VMware SD-WAN
    Sample Customers
    Chart Industries, City of Aspen, Eastern Mountain Sports, FLEXcon, George Washington University, Jackson Municipal Airport Authority, Ohio Public Library Information Network, PTC, Richland Community College, Smart Motors, Tulane University, VeriClaim
    Concord Hospital, State of Colorado, Essilor International, RheinLand Versicherungsgruppe, University of Westminster, Universidade Nove de Julho, SPAR Austria, CAME Group, ZipRealty, Greenhill & Co., IKT Agder, Aviva Stadium, Animal Logic, Management & Training Corporation, Brigham Young University Hawaii, School District of Chilliwack
    Redmond, Coca Cola, Roka Bioscience, MetTel, Deutsche Telekom, Rockford Construction,  The Bay Club, tru Independence, Triton Management Services, DevCon, AXPM
    Top Industries
    REVIEWERS
    Financial Services Firm16%
    Educational Organization9%
    Comms Service Provider9%
    Consumer Goods Company7%
    VISITORS READING REVIEWS
    Computer Software Company21%
    Comms Service Provider14%
    Financial Services Firm8%
    Government6%
    REVIEWERS
    Computer Software Company38%
    Financial Services Firm13%
    Political Organization6%
    Real Estate/Law Firm6%
    VISITORS READING REVIEWS
    Computer Software Company19%
    Financial Services Firm9%
    Comms Service Provider8%
    Manufacturing Company8%
    REVIEWERS
    Comms Service Provider56%
    Manufacturing Company17%
    Financial Services Firm11%
    Energy/Utilities Company6%
    VISITORS READING REVIEWS
    Computer Software Company22%
    Comms Service Provider17%
    Manufacturing Company6%
    Retailer6%
    Company Size
    REVIEWERS
    Small Business39%
    Midsize Enterprise25%
    Large Enterprise36%
    VISITORS READING REVIEWS
    Small Business21%
    Midsize Enterprise15%
    Large Enterprise64%
    REVIEWERS
    Small Business23%
    Midsize Enterprise29%
    Large Enterprise48%
    VISITORS READING REVIEWS
    Small Business18%
    Midsize Enterprise14%
    Large Enterprise68%
    REVIEWERS
    Small Business45%
    Midsize Enterprise21%
    Large Enterprise34%
    VISITORS READING REVIEWS
    Small Business24%
    Midsize Enterprise15%
    Large Enterprise61%
    Buyer's Guide
    Prisma Access by Palo Alto Networks vs. VMware SD-WAN
    November 2022
    Find out what your peers are saying about Prisma Access by Palo Alto Networks vs. VMware SD-WAN and other solutions. Updated: November 2022.
    656,862 professionals have used our research since 2012.

    Prisma Access by Palo Alto Networks is ranked 2nd in Secure Access Service Edge (SASE) with 22 reviews while VMware SD-WAN is ranked 3rd in Secure Access Service Edge (SASE) with 23 reviews. Prisma Access by Palo Alto Networks is rated 8.4, while VMware SD-WAN is rated 8.2. The top reviewer of Prisma Access by Palo Alto Networks writes "Makes us part of a bigger security ecosystem with updates taken care of for us, but pricing and support need work". On the other hand, the top reviewer of VMware SD-WAN writes "To fully utilize cloud vendors' hardware networking, Microsoft and VMware support everything". Prisma Access by Palo Alto Networks is most compared with Zscaler Private Access, Zscaler SASE, Prisma SD-WAN, Netskope CASB and OpenVPN Access Server, whereas VMware SD-WAN is most compared with Cisco SD-WAN, Fortinet FortiGate, Meraki SD-WAN, Versa FlexVNF and Netskope CASB. See our Prisma Access by Palo Alto Networks vs. VMware SD-WAN report.

    See our list of best Secure Access Service Edge (SASE) vendors.

    We monitor all Secure Access Service Edge (SASE) reviews to prevent fraudulent reviews and keep review quality high. We do not post reviews by company employees or direct competitors. We validate each review for authenticity via cross-reference with LinkedIn, and personal follow-up with the reviewer when necessary.