What is our primary use case?
We used iBoss mainly for Internet Access by having an Agent on Windows laptops Primarily because when we try to use it on Mac systems, it does not work as expected. On the Windows system, around 45,000 to 50,000 systems, we installed the iBoss agent, and we use that for internet purposes.
From an end-user perspective, they do not see any major difference or a major problem with iboss. The agent automatically connects to the cloud, and they do not see much difference. However, when you have any applications, sometimes what happens is that application does not follow iboss settings, and it will not go to the internet. That is where they need to manually set those proxy variables in their application. Otherwise, it is a silent application that works silently, sends you a pac file onto your browsers, and then routes to iboss related data centers, and from there you go to the internet. From an end-user perspective, it is very easy. However, when you implement it, you need to be careful because if you make any mistake and lose that connectivity, then it is a problem to revert on every end-user system.
For cloud, web, and private applications visibility, iboss has performed well regarding private applications, particularly with ZTNA related connectors. We have not used them extensively, but the testing we did was auspicious. They can provide connections and potentially replace Cisco AnyConnect in terms of VPN services. The single agent can provide private connectivity to on-premises networks or your data centers and offer internet access. However, we lack practical experience as we did not utilize these features while engaging with iboss.
What is most valuable?
One feature I like from iboss is if you have any issue from one location proxies to access any of the sites by any reason, you can route them via other location proxies.
This is a next-generation firewall feature that includes DLP and threat protection. You can do all this in a single pane. By migrating to this platform, we removed the Blue Coat proxy infrastructure and a few of the ICAP related infrastructure that our security team managed. They migrated and decommissioned those boxes.
It improved security because with respect to iboss platform, what you can do is enforce iboss once you turn on your laptop. With respect to VPN, we used earlier with Cisco VPN, and if you are not connected to VPN, there are no restrictions from your corporate network. You can access anything using your laptop and access anything on the internet. However, once we have iboss in place, even though you are not connected to Corporate VPN network, iboss is still connected because it works on the internet platform. As long as you just open your laptop and connect to the internet, the iboss agent triggers connectivity to iboss data center, then only allows you to access.
One more advantage is that you can route your traffic locally. If you do not have to travel to another country or location to access the internet, you can use that feature and route it.
What needs improvement?
The problem our organization had is that iboss failed for the Mac devices. It is not able to give a successful agent for the Mac agents. That is where in 2025, we had to migrate to the Palo Alto-based platform. If your use case is for just Windows laptops,you can consider this platform as an option
One issue is the data center resiliency part. In India especially, they are not tied up with the Tier 1 ISPs like Tata or Airtel; they were having Tier 2 ISPs and encountered many issues reaching few major sites that my organization depends on, and they were having problems that they could not fix quickly. They also lack a mechanism to route that traffic within their data center; rather, they ask customers to make a pac file change to route it to Singapore explicitly. It would be better if they route from their backend , i mean even if I send it to India DC, they should be able to route it internally to make that work; however, they fail to do that and ask the customer to route it in the pac file. Another suggestion is that in China, they do not have the proper setup; they used to have numerous problems with slowness and lack of premium circuits in China as well. That leads to multiple sites working slowly with latency-related issues. So the main issue is the ISP-related problems that need to be solved.
For how long have I used the solution?
I use iboss from around the COVID time, starting around 2020 or so and continuing up to 2025, around five years. We used it around four to five years on our platform.
What do I think about the stability of the solution?
For the most part, iboss is stable, but when you have issues, receiving support and resolution is problematic. If you have a critical dependency organization, it may pose a challenge. If you can accept a three to four-hour downtime in a month or two months, and if your organization can support being offline for a short period, then iboss is viable. They can provide 99% availability, but the 1% downtime may still occur. If you are okay with this aspect, iboss works.
With respect to deployment, initially, we faced problems because of captive portal connectivities. If someone goes to any hotel or public places, we had a hard time connecting iboss to the iboss cloud. Then we worked with the TAMs or the iboss TAM and their engineering team, and somehow we were able to get those respective releases and agent installations started working again. We initially faced problems where sometimes the agent gets hung due to CPU or memory consumption, and we communicated that we need lighter versions. They worked with our engineering team and were able to get a customized version to meet our needs.
What do I think about the scalability of the solution?
With respect to scalability, they are capable. They have a monitoring system and can increase resources if any utilization problem is detected, notifying the distribution list you provided. They can typically provide extra capacity without any issues until they have resource constraints. We required additional resources in Singapore and the Philippines, and they delivered within two to three days. They are also able to meet on-demand requirements based on your contract with them, and can easily provide adequate resources and scalability.
How are customer service and support?
As I mentioned, their customer service lacks transparency with real RCAs for problems. Even though their platform has strength, the front-end engineers lack clarity on back-end problems. They depend on other engineers, who typically do not join customer outage calls. This is a disadvantage, as communication issues result in losing important information regarding RCAs.
With regards to customer service, I rate them a four to five; for technical support, I would rate them maybe a six.
For the most part, iboss is stable, but when you have issues, receiving support and resolution is problematic. If you have a critical dependency organization, it may pose a challenge.
Which solution did I use previously and why did I switch?
Before COVID, everybody was using on-premises solutions, and we were using Blue Coat as an on-premises proxy. When you work remotely, generally, even for internet traffic, you should go to your organization's data centers, and from there, you have to go to the internet. So there are two negatives there.
One more aspect is on the security front. Earlier, we did not use a consistently available VPN solution; if you were not connected to VPN, you could access any site with no proper restrictions. With iboss, whenever you turn on your laptop, the iboss agent automatically connects to the iboss cloud, enforcing all security policies.
Blue Coat proxies, DLP, and ICAP servers are the technologies we replaced with iboss. Our plan is to replace even Cisco AnyConnect with ZTNA connectors, but unfortunately, that did not happen before we migrated to Palo Alto.
How was the initial setup?
Initially, we faced problems because of captive portal connectivities. If someone goes to any hotel or public places, we had a hard time connecting iboss to the iboss cloud. Then we worked with the TAMs or the iboss TAM and their engineering team, and somehow we were able to get those respective releases and agent installations started working again.
Initial agent installation was done using a GPO, the Group Policy, which was used to install the initial version. For future versions, you can use the connector policy or agent policy they refer to, and you can apply it to a limited number of people. We typically applied it to a group of people, and then the agent automatically talks to the iboss data center, updates itself to the newer version with the pack file setting. Only in the initial phases, it has to be via the Group Policy, while the upgrade process is done using the agent policy on the iboss console.
What about the implementation team?
They provided support; the TAMs offered assistance. We showcased the policies on our platform and our expectations. They migrated those policies and gave suggestions on segregation, which took us some time to configure across the iboss platform as we slowly began migrating users. It was not a contract-specific thing; iboss itself provided some help as part of the contract, and we did not engage any mediator or technical support from another vendor. iboss provided support initially, and we were able to achieve the deployment.
What was our ROI?
As I mentioned, the return on investment is significant. It saved our office locations' bandwidth because when you are working remotely at home, your internet traffic routes directly to iboss. It will not go to your office building, saving bandwidth bottlenecks in our buildings. If there are issues with our building internet circuits, that will not impact your internet connectivity because you are directly going to the iboss data center. That is one advantage.
One more aspect is on the security front. Earlier, we did not use a consistently available VPN solution; if you were not connected to VPN, you could access any site with no proper restrictions. With iboss, whenever you turn on your laptop, the iboss agent automatically connects to the iboss cloud, enforcing all security policies. So with respect to the security side, it strengthens measures. We were satisfied with the solution, though we did not achieve everything they promised. They said within 1.5 to two years, they would have a successful Mac agent, as we had around 5,000 to 6,000 Mac agents to migrate. Since they did not deliver a successful agent on time, we were forced to look at other vendors.
What's my experience with pricing, setup cost, and licensing?
I am not involved in pricing, but as per the information I have, during that time, the Blue Coat proxies we were using were costly, as Blue Coat was acquired by Symantec, and then Symantec was acquired by Broadcom, which increased costs. So compared to Broadcom, iboss provides a good cloud-based solution and comes in a good Price. That is what I know; however, I do not have any numbers as I am not involved in these discussions.
Which other solutions did I evaluate?
The proof of concept was conducted with Zscaler, iboss, and another platform called Netskope. Out of those, iboss was considered a growing solution but not as stable or trusted as the market leaders during that time. However, in terms of options and pricing, we felt this as better choice. Corporate leaders chose iboss based on these factors. On paper, it does not seem lesser than any other market leaders in SaaS proxy solutions, but in practice, they do not provide as much competition to the market leaders.
What other advice do I have?
If you compare iboss with market leaders, I would rate it slightly lower, yet it is still a good platform worth considering. I would give it a six to seven out of ten. When considering budget constraints, if you are not prepared to spend heavily on market leaders, iboss is a viable choice as it is more affordable. However, you should be ready for occasional outages, and resolving issues may take a while. If you can overlook these scenarios, iboss is a suitable choice. For companies limited to Windows use, I would recommend iboss; however, for those requiring Mac compatibility, I would rate it lower due to their inadequate support for Mac agents. My overall rating for this product is six out of ten.
We have not utilized the Chat GPT risk protection.
For SD-WAN, we have not used it from the iboss side; we used Cisco Viptela.
I am not sure about exact incidents, but I would say it enhanced security measures significantly. It helped in offering more security when your laptop was not connected to the corporate network; we had security agents active, and that provided a great deal of improvement. I would estimate it could lead to a 20-30% enhancement in security, so from about 80%, it could reach up to 90%.
Regarding Chat GPT, our organization initially blocked it for associates due to sensitive information concerns; it has both advantages for information access and potential for data leaks. Therefore, Chat GPT was restricted to just development personnel. iboss, I believe, equipped some intelligence about policy checks, offering suggestions on configurations. It would recommend adjustments for improved setups or rules.
Which deployment model are you using for this solution?
Private Cloud
If public cloud, private cloud, or hybrid cloud, which cloud provider do you use?
Other