F5 BIG-IP Access Policy Manager (APM) vs Prisma Access by Palo Alto Networks comparison

F5 and Palo Alto Networks are both solutions in the Secure Web Gateways (SWG) category. F5 is ranked #15 with an average rating of 8.3, while Palo Alto Networks is ranked #4 with an average rating of 8.2. F5 holds a 1.4% mindshare in WSG, compared to Palo Alto Networks’s 9.2% mindshare. Additionally, 88% of F5 users are willing to recommend the solution, compared to 92% of Palo Alto Networks users who would recommend it.

Comparison Buyer's Guide

Download the report

Executive SummaryUpdated on Dec 4, 2024

Prisma Access by Palo Alto Networks and F5 BIG-IP Access Policy Manager (APM) are both solutions in the network security space, offering distinct advantages tailored to organizational needs. Prisma Access is favored for its robust security features and cloud-first approach, while F5 BIG-IP APM stands out with its load balancing and customization capabilities.

Features: Prisma Access is recognized for its cloud-delivered security infrastructure, zero-trust architecture, and WildFire Analysis, providing comprehensive traffic analysis and threat prevention. Its ability to integrate seamlessly with other Palo Alto tools, such as Cortex Data Lake, enhances its value. Meanwhile, F5 BIG-IP APM offers strong customization options, excelling in load balancing and virtual IP creation, crucial for environments requiring precise network traffic management.

Room for Improvement: Prisma Access could improve in supporting custom applications, enhancing pricing flexibility, and resolving latency issues. Users also highlight challenges with third-party integrations. F5 BIG-IP APM could benefit from improved reporting features, a simplified initial setup, and enhancements in automation and GUI, which appear outdated to some users.

Ease of Deployment and Customer Service: Prisma Access's cloud-native platform allows efficient hybrid and public cloud deployments. It offers strong support, although delays in case resolution are reported, particularly in complex scenarios. F5 BIG-IP APM is known for its robust on-premises support, though its deployment can be more technical and challenging, requiring skilled personnel.

Pricing and ROI: Prisma Access, despite its high cost, is justified by its unparalleled security and flexibility. The solution reduces the need for multiple point solutions, enhancing ROI through comprehensive security management. F5 BIG-IP APM's pricing is also considered high, but its specialized features and reliability provide value, offering peace of mind for network security and management.

To learn more, read our detailed F5 BIG-IP Access Policy Manager (APM) vs. Prisma Access by Palo Alto Networks Report (Updated: December 2025).

Buyer's Guide

F5 BIG-IP Access Policy Manager (APM) vs. Prisma Access by Palo Alto Networks

December 2025

Download the complete report

Helped 881,082 peers since 2012

Review summaries and opinions

We asked business professionals to review the solutions they use. Here are some excerpts of what they said:

Categories and Ranking

iboss

Mindshare comparison

As of January 2026, in the Secure Web Gateways (SWG) category, the mindshare of iboss is 2.4%, up from 1.9% compared to the previous year. The mindshare of F5 BIG-IP Access Policy Manager (APM) is 1.4%, up from 0.8% compared to the previous year. The mindshare of Prisma Access by Palo Alto Networks is 9.2%, down from 11.0% compared to the previous year. It is calculated based on PeerSpot user engagement data.

Secure Web Gateways (SWG) Market Share Distribution
Product	Market Share (%)
Prisma Access by Palo Alto Networks	9.2%
iboss	2.4%
F5 BIG-IP Access Policy Manager (APM)	1.4%
Other	87.0%

Secure Web Gateways (SWG)

Featured Reviews

reviewer2701851

Managing Director

Enhances web security with a single pane of glass and flexible deployment

I don't see any need for improvement; one of the really good things about iboss as a company is that they listen to customer feedback. I have suggested enhancements, and they are responsive, making changes for the better, and they do a lot of testing. To improve iboss, although we haven't used it, we considered the VPN solution that comes with the highest tier licensing, which includes DLP and various other add-ons. We prefer using another product which automatically logs you back onto your network when turning on your PC. With iboss, the connection is manual, which doesn't meet our needs. Additionally, sizing can be tricky because, although the initial recommendations may seem adequate, actual usage may require more gateways than anticipated.

Read full review

SÜ

SalihUcpinar

Senior Cyber Security Consultant at KoçSistem

Has provided reliable policy controls and secure web access for large enterprises

I consider Cloudflare when evaluating centralized access control features; Cloudflare utilizes multi-factor authentication and full API support, while F5 BIG-IP Access Policy Manager (APM) needs to enhance its API support. I recommend F5 BIG-IP Access Policy Manager (APM) for large companies such as Tüpraş and Ford. Tüpraş is one of the biggest companies in Turkey, along with other customers such as Tofaş, Euroko, Koç Holding, and more. For on-premises deployment, I would rate it a 10. For cloud deployment, I would rate it a seven. I primarily use it on-premises. I rate F5 BIG-IP Access Policy Manager (APM) eight out of ten.

Read full review

IgorPinter

Director at PULSEC

Zero-trust access has improved remote security and now simplifies cloud-based firewall management

Regarding the integration part for Prisma Access by Palo Alto Networks, the integration with identity providers is pretty much good. It is basically firewall as a service, so it performs well. I completed the integration without any issues. What Palo Alto Networks can do better for Prisma Access by Palo Alto Networks is probably to have the point of presence available in more locations. The point of presence from the Serbia region has the nearest POP in Frankfurt, which is an issue since it is your gateway—when you start browsing the internet, you go through a commercial connection in Germany. They definitely need to spread the service in other countries.

Read full review

Quotes from Members

We asked business professionals to review the solutions they use. Here are some excerpts of what they said:

Pros

"Technical support is pretty sharp and very responsive."

"We were impressed by the solution's mental health function, which can detect if someone needs help. It scans what users are browsing and flags warning signs so we can check to see if they are okay. We've had to use it a couple of times."

"Content filtering is the most useful feature of iboss."

"Because of iboss, I did not have to assign web filtering tasks to my techs on a daily basis."

"Our primary use case for this product is DLP,"

"I would rate the technical support of iboss a solid 10 without a shadow of a doubt."

"The security aspect of the solution, particularly the malware behind it, is excellent. That's something that really helped us out. It's not just a simple proxy that just blocks the insights of potential threats that come on behind it. They do malware detection and that helps us a lot."

"From a use-case scenario, what I like the most is the plug-in. I like the fact that we can do the filtering of these devices offsite independent of the network they are connected to, and we do not have to have traffic coming back inside our network."

More iboss pros

"The solution is stable and reliable."

"On a scale from one to ten for stability, I would rate F5 BIG-IP Access Policy Manager (APM) a ten."

"F5 BIG-IP Access Policy Manager (APM) provides excellent WAF and bot defense solutions."

"Stickiness is the most valuable feature of the product."

"I rate the overall solution nine out of ten."

"We have seen a return on investment from F5 BIG-IP Access Policy Manager. It provided access at a time when we didn't have it."

"The performance of the solution is valuable."

"Our customers have never complained about the stability"

More F5 BIG-IP Access Policy Manager (APM) pros

"The solution has all its capabilities in a single cloud delivery platform which is great and it provides overall good protection."

"The solution's most valuable features were the model's reduced complexity on the client side and its capability to provide security."

"We're now able to go after contracts that require a Zero Trust solution and Prisma's other technology solutions."

"Monitoring is the most valuable feature because we can easily monitor all kinds of stuff coming over the network. We can check the dashboard and work accordingly."

"The visibility perspective is pretty cool. If I want to know how much data is being used for a specific project, I can look at how much data has been used, from which region, and which users have been connected. That visibility is very good so that I can see how many licenses we have and how many are used."

"I think the stability of Prisma Access by Palo Alto Networks is excellent, and I would rate it ten out of ten."

"The Autonomous Digital Experience Management (ADEM) offered by Palo Alto is a good reporting tool. It gives insights into how things are going within the network. It takes all the data from the users' endpoints and does an analysis, and it suggests changes as well."

"Prisma Access provides comprehensive security. It provides URL filtering, application control, SSL, DLP, etc. It provides complete security for the cloud environment."

More Prisma Access by Palo Alto Networks pros

Cons

"I'd like to see them accelerate development on the security side, particularly around data loss prevention."

"Our biggest problem with their service was it did not recognize the device and filtering did not always work correctly."

"For zero trust implementation, we encountered complexity issues, especially with a large infrastructure company ExxonMobil."

"One thing I would like to see differently with their Zero Trust platform is that some of the AI aspects related to high-risk activities have more false positives."

"The reporting feature needs improvement. It doesn't give you the expected results. It is quite difficult to get the specific reports needed, and it is not as intuitive as the rest of the platform."

"Their on-premise hardware's network interface is capped at one gigabit, which is sort of a problem. If you stand a filter up where all traffic flows through that, according to them, in order to go above a gigabit, you have to have multiple devices, which in today's IT seems a little bit silly. They could easily put in an SFP port into their device that could accommodate 10 gigs or at least offer a box."

"If they could implement an extra security layer preventing access to iboss from the open internet, it would be great."

"Fold that in with the risk intelligence they're getting from all of the different subscriptions they are a part of. Now, these security companies subscribe to things like emerging threats, databases, etc. You can fold all this intelligence to decide what's happening on an endpoint. I would love to see them start moving into that space. That would compete directly with Microsoft. Maybe that's why they haven't. Having that ability native within the solution would be great. The other area in which I would love to see improvement is more detailed descriptions of why they block websites."

More iboss cons

"In my opinion, the GUI side needs some improvement based on my usage. Sometimes, it doesn't work as efficiently as the CLI side."

"The technical support’s response time must be improved."

"F5 BIG-IP APM disconnects when you leave it for long enough, but that is natural for IT solutions to do. That's a little bit frustrating."

"The main improvement needed for F5 BIG-IP Access Policy Manager (APM) is to integrate into the cloud-delivered services from F5."

"The solution’s GUI looks very old."

"F5 BIG-IP Access Policy Manager (APM) does not have a direction for SaaS."

"The price of this product can be improved."

"Integrating identity providers and single sign-on solutions can simplify user authentication and access control."

More F5 BIG-IP Access Policy Manager (APM) cons

"The price can be reduced to make it more competitive."

"They can add some new characteristics. For example, when an incident triggers, they can automatically send a template for a particular match that is related to the policy. We don't have that right now. It is something to improve. There could be more automation for certain actions. For example, for a particular group, it can send an administrator alert to their manager. It was one of the concerns of our customers."

"The user interface could be better. They need to work a little bit on the console. It is similar to their firewalls but not exactly. They need to clean it up a bit."

"When we deploy firewall rules via Panorama, we find it's a little bit slow. We have a global environment and might have 100 gateways or VPNs in the cloud. When we deploy something, it tries to deploy it one-by-one, and that can be slow."

"I would like to see support for custom applications."

"The solution needs to be more compatible with other solutions. This is specifically a problem for us when it comes to healthcare applications. They have proprietary connection types and things of that nature that make compatibility a challenge sometimes."

"They could add more flexibility and improve product performance."

"There is room for improvement in the multi-environment visibility, especially around containers."

More Prisma Access by Palo Alto Networks cons

Pricing and Cost Advice

"We have not priced the solution recently, but they were competitive with other vendors in the past."

"It is expensive compared to one of its competitors."

"It is not expensive, and it is also not cheap. iboss is priced right in the sweet spot for the number of features it offers."

"We had the cost of purchasing a new appliance along with the implementation and licensing costs. However, the following year, the cost of just licensing was similar to what was paid the previous year for a new appliance along with the implementation and licensing costs."

"The overall pricing for iboss is very competitive and transparent."

"It is probably in line with other solutions, but I do not deal with the financial side."

"I rate the tool's pricing an eight out of ten."

"The tool is a little bit expensive."

"Recently, they have simplified the licensing"

"The product is very expensive."

"The licensing fees are paid on a yearly basis and for what we get, the price is good."

"This is not an expensive product and everything is included with one license."

"The solution is expensive."

"Actually the solution is very expensive. I don't know the particulars since the purchasing team dealt with it."

"Prisma is in the middle of the road. It's not the most expensive, but it's not the cheapest. There aren't any additional costs, to my knowledge. I know they have some extra modules, but we didn't use them."

"The price has been good for the ROI during these difficult times for the cruise industry. There are no hidden costs; what the product offers is what you get."

"I'm still comparing, but the solution is quite expensive."

"The initial prices of Prisma Access were okay. But as soon as you start deploying Palo Alto gear, the support prices and the recurring prices, which are the major operational costs, tend to increase over time."

More Prisma Access by Palo Alto Networks pricing and cost advice

See which vendors are best for you

Use our free recommendation engine to learn which Secure Web Gateways (SWG) solutions are best for your needs.

See recommendations

881,082 professionals have used our research since 2012.

Top Industries

By visitors reading reviews

No data available

Financial Services Firm

14%

Manufacturing Company

12%

Government

Computer Software Company

Financial Services Firm

11%

Manufacturing Company

11%

Computer Software Company

11%

Government

Company Size

By reviewers

Large Enterprise

Midsize Enterprise

Small Business

By reviewers
Company Size	Count
Small Business	6
Midsize Enterprise	6
Large Enterprise	5

By reviewers
Company Size	Count
Small Business	9
Midsize Enterprise	1
Large Enterprise	9

By reviewers
Company Size	Count
Small Business	24
Midsize Enterprise	21
Large Enterprise	27

Questions from the Community

What needs improvement with iboss?

For zero trust implementation, we encountered complexity issues, especially with a large infrastructure company Exxon...

See all answers

What is your primary use case for iboss?

Previously when I used iboss, we did the POC for iboss for ExxonMobil. Four or five people wanted to move from our ol...

See all answers

What is your experience regarding pricing and costs for iboss?

Regarding pricing, setup costs, and licensing, iboss is not cheap, and that's my only concern. There are cheaper alte...

See all answers

What do you like most about F5 BIG-IP Access Policy Manager (APM)?

In my opinion, the GUI is perfect with the configuration options provided. F5 BIG-IP has given customization options ...

See all answers

What is your experience regarding pricing and costs for F5 BIG-IP Access Policy Manager (APM)?

F5 products are more expensive than other solutions but are valued for their quality and reliability, akin to purchas...

See all answers

What needs improvement with F5 BIG-IP Access Policy Manager (APM)?

F5 BIG-IP Access Policy Manager (APM) is not user-friendly and operates slowly. Additional features for architecture ...

See all answers

What is the better solution - Prisma Access or Zscaler Private Access?

We looked into Prisma Access before choosing Zscaler Private Access (ZPA). Palo Alto’s Prisma Access is a secure ac...

See all answers

What do you like most about Prisma Access by Palo Alto Networks?

The most valuable features of the solution are in the areas of the secure remote access it provides while also being ...

See all answers

What is your experience regarding pricing and costs for Prisma Access by Palo Alto Networks?

From my experience, Palo Alto is more expensive compared to solutions like Netskope and Triscale.

See all answers

Comparisons

Netskope vs iboss

Compared 13% of the time

Cisco Umbrella vs iboss

Compared 9% of the time

Zscaler Internet Access vs iboss

Compared 9% of the time

FortiSASE vs iboss

Compared 7% of the time

Fortinet FortiGate vs iboss

Compared 6% of the time

More iboss Competitors

Ivanti Connect Secure vs F5 BIG-IP Access Policy Manager (APM)

Compared 6% of the time

CyberArk Privileged Access Manager vs F5 BIG-IP Access Policy Manager (APM)

Compared 5% of the time

Fortinet FortiGate vs F5 BIG-IP Access Policy Manager (APM)

Compared 5% of the time

Citrix Gateway vs F5 BIG-IP Access Policy Manager (APM)

Compared 5% of the time

More F5 BIG-IP Access Policy Manager (APM) Competitors

Netskope vs Prisma Access by Palo Alto Networks

Compared 13% of the time

Zscaler Internet Access vs Prisma Access by Palo Alto Networks

Compared 10% of the time

FortiSASE vs Prisma Access by Palo Alto Networks

Compared 9% of the time

Cato SASE Cloud Platform vs Prisma Access by Palo Alto Networks

Compared 6% of the time

Cisco Umbrella vs Prisma Access by Palo Alto Networks

Compared 5% of the time

More Prisma Access by Palo Alto Networks Competitors

Product Reports

Buyer's Guide

iboss

January 2026

Download iboss product report

Buyer's Guide

F5 BIG-IP Access Policy Manager (APM)

January 2026

F5 BIG-IP Access Policy Manager (APM) report

Download F5 BIG-IP Access Policy Manager (APM) product report

Buyer's Guide

Prisma Access by Palo Alto Networks

January 2026

Prisma Access by Palo Alto Networks report

Download Prisma Access by Palo Alto Networks product report

Also Known As

iBoss Cloud Platform

F5 Access Policy Manager

Palo Alto Networks Prisma Access, Prisma Access, GlobalProtect, Palo Alto GlobalProtect Mobile Security Manager, Prisma SaaS by Palo Alto Networks, Prisma Access

Overview

Iboss offers a comprehensive cloud-based security platform valued for its scalability and autonomous features, ensuring robust security with easy deployment and management capabilities.

Renowned for its robust security architecture, Iboss integrates seamlessly within diverse networks, delivering efficient granular filtering and advanced content categorization. Its single pane of glass console provides ease of management, allowing rapid scalability suitable for rapidly deploying environments. Operates in BYOD setups due to inline filtering without device installation. Integration with cloud-based applications enhances user control, and features like SASE, SSL inspection, and ChatGPT risk protection stand as highlights. Despite its strengths, users have pointed out areas for enhancement like direct navigation in reports, SSL decryption, and better cloud integration while having room to improve data loss prevention.

What are the most important features of Iboss?

Scalability: Supports rapid deployment across diverse networks.
SASE: A consolidated approach to secure access.
SSL Inspection: Ensures safe data transmission.
Granular Filtering: Detailed control over accessible content.
Single Pane Management: Unifies control through a centralized console.

What benefits should users consider in reviews?

Cost-effectiveness: Offers competitive pricing with robust features.
Autonomous Operation: Reduces management overhead.
Responsive Support: Provides assistance when needed.
Flexible Deployment: Available for both cloud and on-premises environments.

The usage of Iboss spans educational institutions, specifically K-12, to enforce internet policies, protect data, and support remote work environments. It provides web filtering and security frameworks to ensure safe browsing. Its platform-as-a-service model offers flexibility for both cloud-based and on-premises requirements, integrating seamlessly to deliver enhanced security features suitable for various deployment needs including zero trust, CASB, and network security for work-from-home setups.

iboss

F5 BIG-IP Access Policy Manager (APM) is an access management proxy solution for managing global access to the enterprise networks, cloud providers, applications, and application programming interfaces (APIs). Through a single management interface, BIG-IP APM consolidates remote, mobile, network, virtual, and web access.

BIG-IP APM can also serve as a bridge between modern and classic authentication and authorization protocols and methods. For applications which are unable to support modern authentication and authorization protocols, like SAML and OAuth with OIDC, but which do support classic authentication methods, BIG-IP APM converts user credentials to the appropriate authentication standard supported by the application.

BIG-IP APM Benefits:

Ease of use
Flexibility
Ability to integrate with other systems
Security features
Granular access control
Responsive and helpful support team

BIG-IP APM Features:

Support for Identity Aware Proxy (IAP) enabling Zero Trust application access
Context-based authorization with dynamic L4/L7 ACLs
Integration with third-party MFA solutions
DTLS 2.0 mode for delivering and securing applications
SAML 2.0 identity federation support
Support for OAuth 2.0 authorization protocol
SSO support for classic authentication (Kerberos, header- based, etc.), credential caching, OAuth 2.0, SAML 2.0, and FIDO2 (U2F)
AAA server authentication and high-availability
Integration with leading IAM vendor products (Microsoft, Okta, Ping Identity)
BIG IP Edge Client and F5 Access integrate with VMware Horizon ONE (AirWatch), Microsoft Intune and IBM MaaS360
Risk-based access leveraging third-party UEBA and risk engines (HTTP Connector)

Reviews from Real Users

Below are some reviews and helpful feedback written by BIG-IP APM users.

Mahmmoud Rabie, Senior Site Reliability Engineer, writes that BIG-IP APM is "A highly stable solution for load balancing, but the initial setup is complex."

Clyde Livingston, Senior Process Specialist at Telstra, says that BIG-IP APM is "Easy to use, useful access remotely, but lacking stability."

Chris Lam, Senior Solution Consultant at Macroview Telecom Limited, states that BIG-IP APM is "Useful for remote access VPN and VPI integration with VMware.

Prisma Access by Palo Alto Networks provides consistent security for all users and applications across your remote networks. Prisma Access grants users safe access to the cloud and data center applications and the internet as well. In addition, the solution combines all of your security and networking capabilities into a single cloud-delivered platform, enabling flexible hybrid workforces.

Prisma Access can be managed two ways:

Cloud Managed
Panorama Managed

Prisma Access delivers both networking and security services, including:

SD-WAN
VPN
Zero Trust network access (ZTNA)
Quality of service (QoS)
Clean Pipe
Firewall as a service (FWaaS)
DNS Security
Threat Prevention
Cloud secure web gateway (SWG)
Data loss prevention (DLP)
Cloud access security broker (CASB)

Prisma Access by Palo Alto Networks Features

Prisma Access by Palo Alto Networks has many valuable key features including: App-ID, User-ID, Device-ID, SSL Decryption, Dynamic User Group (DUG) Monitoring, AI/ML-Based Detection, IoT Security, Reporting, URL Filtering, Enterprise Data Loss Prevention (DLP), Digital Experience Monitoring (DEM)*, Logging, Policy Automation, Intrusion Prevention System (IPS), and many more.

Prisma Access by Palo Alto Networks Benefits

Some of the benefits of using Prisma Access by Palo Alto Networks include:

Security: Prisma Access gives you consistent security to protect against cyberattacks, with enforcement of policy at every location. By implementing Prisma Access, you also gain protection that works to prevent known and unknown malware, exploits, credential theft, command and control, and many other attack vectors across all ports and protocols.
Global connectivity: Prisma Access provides global coverage through use of its connectivity layer.
Scalability: With Prisma Access, scaling is automatically managed and is scalable, flexible, and agile.
Instant deployment: Deployment is fast, eliminating wasted time that may otherwise be associated with setting up a solution, operating it, or shipping hardware in order to get started.

Reviews from Real Users

Below are some reviews and helpful feedback written by Microsoft Azure Synapse Analytics

users who are currently using the solution.

PeerSpot user Partha D., Global Network Tech Lead at a computer software company, speaks about his experience using the product, saying, "It protects all app traffic so that users can gain access to all apps. Unlike other solutions that only work from ports 80 and 443, which are predominantly for web traffic, Prisma Access covers all protocols and works on all traffic patterns... The most sophisticated attacks can arise from sources that are not behind 80/443."

Tejas J., a Sr. Cloud Security Architect at a computer software company, mentions that "it is geographically dispersed, and it sits on top of Google and AWS platforms. Therefore, you don't face the standard issues, such as latency or bandwidth issues, that you usually face in the case of on-prem data centers.”

Another PeerSpot reviewer, Max I., Associate Director at Cognizant, comments that "Security is absolutely spot-on, really top-notch. It's the result of all the components that come together, such as the HIP [Host Information Profile] and components like Forcepoint, providing end-user content inspection, and antivirus. It incorporates DLP features and that's fantastic because Prisma Access makes sure that all of the essential prerequisites are in place before a user can log in or can be tunneled into."

Palo Alto Networks

Sample Customers

More than 4,000 global enterprises trust the iboss Cloud Platform to support their modern workforces, including a large number of Fortune 50 companies.

City Bank, Ricacorp Properties, Miele, American Systems, Bangladesh Post Office

Concord Hospital, State of Colorado, Essilor International, RheinLand Versicherungsgruppe, University of Westminster, Universidade Nove de Julho, SPAR Austria, CAME Group, ZipRealty, Greenhill & Co., IKT Agder, Aviva Stadium, Animal Logic, Management & Training Corporation, Brigham Young University Hawaii, School District of Chilliwack

Buyer's Guide

F5 BIG-IP Access Policy Manager (APM) vs. Prisma Access by Palo Alto Networks

December 2025

Free Report: F5 BIG-IP Access Policy Manager (APM) vs. Prisma Access by Palo Alto Networks

Find out what your peers are saying about F5 BIG-IP Access Policy Manager (APM) vs. Prisma Access by Palo Alto Networks and other solutions. Updated: December 2025.

DOWNLOAD NOW

881,082 professionals have used our research since 2012.

See our F5 BIG-IP Access Policy Manager (APM) vs. Prisma Access by Palo Alto Networks report.

See our list of best Secure Web Gateways (SWG) vendors.

We monitor all Secure Web Gateways (SWG) reviews to prevent fraudulent reviews and keep review quality high. We do not post reviews by company employees or direct competitors. We validate each review for authenticity via cross-reference with LinkedIn, and personal follow-up with the reviewer when necessary.