Forcepoint CASB vs Prisma Access by Palo Alto Networks comparison

Forcepoint CASB vs. Prisma Access by Palo Alto Networks

Download the complete report

Helped 913,683 peers since 2012

Review summaries and opinions

We asked business professionals to review the solutions they use. Here are some excerpts of what they said:

Categories and Ranking

iboss

Mindshare comparison

As of September 2026, in the Cloud Access Security Brokers (CASB) category, the mindshare of iboss is 4.5%, up from 2.0% compared to the previous year. The mindshare of Forcepoint CASB is 1.7%, up from 1.2% compared to the previous year. The mindshare of Prisma Access by Palo Alto Networks is 12.5%, down from 16.5% compared to the previous year. It is calculated based on PeerSpot user engagement data.

Cloud Access Security Brokers (CASB) Mindshare Distribution
Product	Mindshare (%)
Prisma Access by Palo Alto Networks	12.5%
iboss	4.5%
Forcepoint CASB	1.7%
Other	81.3%

Cloud Access Security Brokers (CASB)

Featured Reviews

Ashok Ananthula

Senior Consultant Proxy Engineering at a financial services firm with 10,001+ employees

Cloud gateway has strengthened remote web security and now needs better Mac and ISP support

The problem our organization had is that iboss failed for the Mac devices. It is not able to give a successful agent for the Mac agents. That is where in 2025, we had to migrate to the Palo Alto-based platform. If your use case is for just Windows laptops,you can consider this platform as an option One issue is the data center resiliency part. In India especially, they are not tied up with the Tier 1 ISPs like Tata or Airtel; they were having Tier 2 ISPs and encountered many issues reaching few major sites that my organization depends on, and they were having problems that they could not fix quickly. They also lack a mechanism to route that traffic within their data center; rather, they ask customers to make a pac file change to route it to Singapore explicitly. It would be better if they route from their backend , i mean even if I send it to India DC, they should be able to route it internally to make that work; however, they fail to do that and ask the customer to route it in the pac file. Another suggestion is that in China, they do not have the proper setup; they used to have numerous problems with slowness and lack of premium circuits in China as well. That leads to multiple sites working slowly with latency-related issues. So the main issue is the ISP-related problems that need to be solved.

Read full review

AlexOgbalu

Director at LiveFromSpace Limited

Improving support responsiveness has remained critical while access monitoring and compliance needs have been fully addressed

We have the enterprise licenses for the scanning of the codes, both at runtime and in development, and we also have access to Veracode's e-learning platform as well as a bundle from Veracode.All that has been mentioned is the main benefits Forcepoint CASB provides to us, and it helps us to meet compliance requirements that are necessary in our industry. It's important for enterprises considering Forcepoint to work with very good system integrators and value-added resellers because a lot of things needed go beyond just getting the licenses. You need someone skilled to do all those configurations, write all the rules, and make sure you achieve a very stable environment. I am giving this review an overall rating of eight.

Read full review

IgorPinter

Director at PULSEC

Zero-trust access has improved remote security and now simplifies cloud-based firewall management

Regarding the integration part for Prisma Access by Palo Alto Networks, the integration with identity providers is pretty much good. It is basically firewall as a service, so it performs well. I completed the integration without any issues. What Palo Alto Networks can do better for Prisma Access by Palo Alto Networks is probably to have the point of presence available in more locations. The point of presence from the Serbia region has the nearest POP in Frankfurt, which is an issue since it is your gateway—when you start browsing the internet, you go through a commercial connection in Germany. They definitely need to spread the service in other countries.

Read full review

Quotes from Members

We asked business professionals to review the solutions they use. Here are some excerpts of what they said:

Pros

"I would rate the technical support of iboss a solid 10 without a shadow of a doubt."

"The students were always protected, and the content filtering worked very well, seeming to work better than other products we had tried previously."

"iboss is easy to use despite its complexity. Multiple engineers manage it, but it's significantly more straightforward to administer than traditional VPNs and web proxies."

"Our primary use case for this product is DLP,"

"I would definitely recommend iboss for web filtering purposes to other organizations or individuals."

"The iboss solution gives me the ability to scan the traffic through all the ports, through all the 131,000 PCP and UDP ports, and with this ability, we have the granularity also for consults over social media and applications on mobile, and this is an advantage that the customers are looking for right now."

"From a use-case scenario, what I like the most is the plug-in. I like the fact that we can do the filtering of these devices offsite independent of the network they are connected to, and we do not have to have traffic coming back inside our network."

"The iboss system is highly reliable. The false positive rates are small compared to some other systems we've experienced through other partner agencies who use competing solutions."

More iboss pros

"Macro integration is a good feature."

"As it is based on AWS, it is not a problem."

"Generally, most of our customers are happy with it though."

"I like that the layout and configuration are easy compared to other solutions on the market."

"Forcepoint CASB ensures that access to cloud applications is properly vetted and monitored, helping us unify access across the board regardless of device or location, while advanced notifications and behavior analytics make it easy to detect unknown connections or baseline changes."

"The product offers an easy initial setup."

"The tool's most valuable feature is its management ease."

"The product offers several advantageous features including real-time control and monitoring capabilities, helping identify and manage various activities including shadow IT activities."

More Forcepoint CASB pros

"The remediation process is easy compared to other platforms."

"Ultimately, Palo Alto is a very advanced firewall."

"It has predefined or preconfigured rules, which are getting periodically updated. They are providing continuous improvements and periodically updating all search queries that they are looking for. That is one thing that helps us to stay vigilant and focused. If we query our AWS account for any breaches or vulnerabilities with any of the cloud tests, and it alerts us based on these predefined rules. It also provides an option to configure our own rules, and based on these rules, it can query the cloud trail logs, pull the information, and trigger alerts in real-time. I haven't explored this feature much because there are multiple accounts, and we don't have enough time to explore this feature. It also provides multiple integrations. When vulnerabilities or breaches are happening, you should be aware of them immediately. It provides integration with tools such as Slack, PagerDuty so that you can get alerted as soon as the high severity stuff comes up. For example, you have a security group that has allowed public traffic on port 22. As TechOps, you should be aware of this immediately. You cannot scan each machine or look into all security groups to identify it. So, Prisma helps us and alerts us when this kind of high-priority stuff comes up. It has different statistics, analytics, and graphs for data. The description of alerts is also pretty good. They describe what are the possible causes for this and what are the solutions. From Prisma Cloud, you can directly go to the AWS account. When you click on an alert, a resource, or a resource ID, it takes you to the AWS console where you need to log in. If you are already logged in, it will take you to that instance directly, and you can fix the issue there. I have found this feature very useful."

"Palo Alto Firewall is one of the best firewalls in the world."

"The solution improved the consistency of our security controls and the BCP, there has been a 20 percent reduction in TCO, and Prisma Access also enabled us to deliver better applications by centralizing security management."

"Prisma Access provides comprehensive security. It provides URL filtering, application control, SSL, DLP, etc. It provides complete security for the cloud environment."

"Prisma Access is very stable, and I am very much satisfied with its stability, rating it nine to ten out of ten."

"The most valuable feature is the zero-trust part of this solution."

More Prisma Access by Palo Alto Networks pros

Cons

"For zero trust implementation, we encountered complexity issues, especially with a large infrastructure company ExxonMobil."

"Our biggest problem with their service was it did not recognize the device and filtering did not always work correctly."

"The solution could be stronger on the integration side and offer more cloud applications like G Suite or Oracle."

"Fold that in with the risk intelligence they're getting from all of the different subscriptions they are a part of. Now, these security companies subscribe to things like emerging threats, databases, etc. You can fold all this intelligence to decide what's happening on an endpoint. I would love to see them start moving into that space. That would compete directly with Microsoft. Maybe that's why they haven't. Having that ability native within the solution would be great. The other area in which I would love to see improvement is more detailed descriptions of why they block websites."

"iboss can be improved because the integration could be better; you need to import all the sites that you access today, and there are a few problems whenever you import thousands of websites, making the integration process messy for the users."

"The reporting feature needs improvement."

"The area I would like to see improvement in is the ability with in the reporter to navigate directly to the content the user is traversing. It is kind of there, but it's not perfect. Quite frequently, I receive links that lead me to pages with error messages."

"To scale up, a new iboss Node Blade Chassis must be purchased."

More iboss cons

"Forcepoint removed the ability to scan for unsanctioned applications on the CASB."

"Forcepoint technical support in general could improve in this area."

"Integration is an area of the solution that needs to be improved."

"Lacks different ways to authenticate users."

"We are not happy with the solution."

"I'd like to see different ways to authenticate users, perhaps different types of authentication."

"There are various modules to secure a public cloud, such as Cloud Security Posture Management. You might have seen these features available if you've reviewed solutions like Zscaler or Netskope. A full-fledged CASB should be manageable. However, the tool does not seem to offer complete public cloud visibility. While it provides some cloud visibility and can manage API traffic for Web 2.0, it lacks a specific module for securing public cloud environments."

"They should work on the possibility of consolidating all of the products with the group of agents."

More Forcepoint CASB cons

"I haven't seen any SD-WAN configuration capability. If Prisma Access would support SD-WAN, that would help... SD-WAN devices should be able to reach Prisma Access, and Palo Alto should support different, vendor-specific devices, not just Palo Alto devices, for SD-WAN configuration."

"It is a managed firewall. When you run into issues and have to troubleshoot, there is a fair amount of restriction."

"My clients would like to see a more feature-rich product."

"If you compare Prisma SaaS against other products, such as Cloud Log, it's a little bit tricky to understand, but it offers different functionality that other products don't have. From a user usability point of view, you need some training for this product, as an admin, you need a couple of demos."

"Compared to other products, the price is slightly high. In fact, sometimes there is a large pricing gap."

"We've run into some challenges, having hit a lot of bugs over the past year in the deployment of GlobalProtect. We've had our fair share of issues that I haven't been happy with. We're working with the support organization to remediate them and waiting for updated releases. The response on getting the bugs fixed has not been what I would consider adequate for a product like this."

"Palo Alto Prisma 10 came out over a year ago. Palo Alto added this identity management feature. The legacy way Palo Alto selected which user is sitting on an IP address it passes through has been clunky."

"The one point I have deducted is because it is very hard to get support sometimes."

More Prisma Access by Palo Alto Networks cons

Pricing and Cost Advice

"It is probably in line with other solutions, but I do not deal with the financial side."

"The overall pricing for iboss is very competitive and transparent."

"It is not expensive, and it is also not cheap. iboss is priced right in the sweet spot for the number of features it offers."

"It is expensive compared to one of its competitors."

"We had the cost of purchasing a new appliance along with the implementation and licensing costs. However, the following year, the cost of just licensing was similar to what was paid the previous year for a new appliance along with the implementation and licensing costs."

"We have not priced the solution recently, but they were competitive with other vendors in the past."

"The pricing really depends on the size of the customer's business because it is price-relevant to the environment."

"The solution is not that expensive compared to Zscaler. Netskope is between Forcepoint CASB and Zscaler in terms of cost. Forcepoint CASB would be the first choice because it negotiates well and offers a perpetual license, though it may seem subscription-based. I rate its pricing a six out of ten."

"It is not cheap. It is expensive. The good thing is that you are able to pay for what you need, but overall, it is not cheap. The pricing is not based on packages. You pay based on the features. If you want DLP, you only pay for DLP. They are very flexible. It is not cheap, but the licensing is flexible. There are no additional costs in addition to the standard licensing fees."

"It is pretty expensive. We have to balance the cost of some features. They need to work on some of the services and products, price-wise."

"Prisma SaaS is more expensive than similar solutions but I think it's worth it."

"Based on what I have heard from others, it is a pricey solution as compared to its peers, but I am not sure. However, considering the features that it offers, it is a break-even point. You get whatever they are promising."

"This is not an expensive product and everything is included with one license."

"The pricing for this solution is on the higher end."

"We have to pay additional costs for maintenance and support services."

"There's no reason not to buy the enterprise version that gives you unlimited PoPs, but you must understand the limitations you impose on yourself if you do that. If you go crazy, that allowlist will be too big for Kubernetes clusters."

More Prisma Access by Palo Alto Networks pricing and cost advice

See which vendors are best for you

Use our free recommendation engine to learn which Cloud Access Security Brokers (CASB) solutions are best for your needs.

See recommendations

913,683 professionals have used our research since 2012.

Top Industries

By visitors reading reviews

Financial Services Firm

11%

Manufacturing Company

Comms Service Provider

Computer Software Company

Comms Service Provider

11%

Outsourcing Company

10%

Construction Company

10%

Manufacturing Company

Financial Services Firm

11%

Manufacturing Company

10%

Outsourcing Company

Computer Software Company

Company Size

By reviewers

Large Enterprise

Midsize Enterprise

Small Business

By reviewers
Company Size	Count
Small Business	12
Midsize Enterprise	8
Large Enterprise	10

By reviewers
Company Size	Count
Small Business	6
Midsize Enterprise	2
Large Enterprise	3

By reviewers
Company Size	Count
Small Business	26
Midsize Enterprise	20
Large Enterprise	27

Questions from the Community

What needs improvement with iboss?

I think iboss could be improved by making reporting and dashboard customization more flexible, and simplifying troubl...

What is your primary use case for iboss?

I use iboss as a cloud-based secure web gateway to provide secure internet access, web filtering, and protect remote ...

What is your experience regarding pricing and costs for iboss?

My experience with iboss's pricing structure, setup cost, and licensing model has been positive, straightforward, and...

What is your experience regarding pricing and costs for Forcepoint CASB?

I would put the pricing of Forcepoint CASB at a five, closer to a four. I don't think it's very expensive, but it's a...

What needs improvement with Forcepoint CASB?

From a functionality perspective, I don't have any recommendations, but in terms of support, the speed of support is ...

What is your primary use case for Forcepoint CASB?

Forcepoint CASB ensures that access to cloud applications is properly vetted and monitored. We have a lot of remote a...

What is the better solution - Prisma Access or Zscaler Private Access?

We looked into Prisma Access before choosing Zscaler Private Access (ZPA). Palo Alto’s Prisma Access is a secure ac...

What is your experience regarding pricing and costs for Prisma Access by Palo Alto Networks?

From my experience, Palo Alto is more expensive compared to solutions like Netskope and Triscale.

What needs improvement with Prisma Access by Palo Alto Networks?

Regarding the integration part for Prisma Access by Palo Alto Networks, the integration with identity providers is pr...

Fortinet FortiGate vs iboss

Comparisons

Netskope vs iboss

Compared 9% of the time

Compared 7% of the time

Cisco Umbrella vs iboss

Compared 6% of the time

FortiSASE vs iboss

Compared 6% of the time

Zscaler Internet Access vs iboss

Compared 5% of the time

More iboss Competitors

Akamai Enterprise Application Access vs Forcepoint CASB

Compared 20% of the time

Netskope vs Forcepoint CASB

Compared 15% of the time

Proofpoint Cloud App Security Broker vs Forcepoint CASB

Compared 9% of the time

Microsoft Defender for Cloud Apps vs Forcepoint CASB

Compared 8% of the time

Zscaler Internet Access vs Forcepoint CASB

Compared 6% of the time

More Forcepoint CASB Competitors

Netskope vs Prisma Access by Palo Alto Networks

Compared 12% of the time

FortiSASE vs Prisma Access by Palo Alto Networks

Compared 5% of the time

Check Point Harmony SASE (formerly Perimeter 81) vs Prisma Access by Palo Alto Networks

Compared 4% of the time

Cato SASE Cloud Platform vs Prisma Access by Palo Alto Networks

Compared 4% of the time

Fortinet FortiGate vs Prisma Access by Palo Alto Networks

Compared 2% of the time

More Prisma Access by Palo Alto Networks Competitors

Product Reports

iboss

Download iboss product report

Forcepoint CASB

Download Forcepoint CASB product report

Prisma Access by Palo Alto Networks

Download Prisma Access by Palo Alto Networks product report

Prisma Access by Palo Alto Networks report

Also Known As

iBoss Cloud Platform

Imperva Skyfence

Palo Alto Networks Prisma Access, Prisma Access, GlobalProtect, Palo Alto GlobalProtect Mobile Security Manager, Prisma SaaS by Palo Alto Networks, Prisma Access

Overview

Iboss offers a comprehensive cloud-based security platform valued for its scalability and autonomous features, ensuring robust security with easy deployment and management capabilities.

Renowned for its robust security architecture, Iboss integrates seamlessly within diverse networks, delivering efficient granular filtering and advanced content categorization. Its single pane of glass console provides ease of management, allowing rapid scalability suitable for rapidly deploying environments. Operates in BYOD setups due to inline filtering without device installation. Integration with cloud-based applications enhances user control, and features like SASE, SSL inspection, and ChatGPT risk protection stand as highlights. Despite its strengths, users have pointed out areas for enhancement like direct navigation in reports, SSL decryption, and better cloud integration while having room to improve data loss prevention.

What are the most important features of Iboss?

Scalability: Supports rapid deployment across diverse networks.
SASE: A consolidated approach to secure access.
SSL Inspection: Ensures safe data transmission.
Granular Filtering: Detailed control over accessible content.
Single Pane Management: Unifies control through a centralized console.

What benefits should users consider in reviews?

Cost-effectiveness: Offers competitive pricing with robust features.
Autonomous Operation: Reduces management overhead.
Responsive Support: Provides assistance when needed.
Flexible Deployment: Available for both cloud and on-premises environments.

The usage of Iboss spans educational institutions, specifically K-12, to enforce internet policies, protect data, and support remote work environments. It provides web filtering and security frameworks to ensure safe browsing. Its platform-as-a-service model offers flexibility for both cloud-based and on-premises requirements, integrating seamlessly to deliver enhanced security features suitable for various deployment needs including zero trust, CASB, and network security for work-from-home setups.

iboss

Forcepoint CASB offers robust features for integrating with Forcepoint DLP, implementing adaptive security, and ensuring cloud application visibility. Its real-time monitoring and management simplicity are valued. Integration ease with macro and credential IDs, favorable pricing, and a straightforward setup are additional strengths.

Forcepoint CASB supports data protection in cloud environments, empowering organizations to manage and monitor access seamlessly across devices and locations. It provides behavior analytics, advanced notifications, and geo-specific login detections. However, there are integration challenges and backend reliability concerns. Enhancements are needed in system integration and dashboard usability. Authentication options are limited, and there are complexities with multiple agents that affect ease of use.

What features make Forcepoint CASB effective?

Integration with Forcepoint DLP: Ensures seamless data loss prevention capabilities.
Adaptive Security Policies: Tailors security measures to changing threats.
Shadow IT Discovery: Detects unauthorized applications in use.
Real-Time Monitoring: Provides immediate insights into application usage.

What ROI benefits should users anticipate?

Scalability: Adaptable to growing security demands.
Favorable Pricing: Cost-effective compared to competitors.
Easy Configuration: Simplifies initial deployment processes.

In industries relying on remote workforces, Forcepoint CASB integrates with tools like Secure Web Gateway to unify and secure access. It is instrumental in providing analytics for connection monitoring and notifications for proactive threat management. Its applications in telecommunications and finance sectors demonstrate the importance of protecting remote environments and controlling access efficiently.

Forcepoint

Prisma Access by Palo Alto Networks delivers robust security features including secure remote access across apps and traffic monitoring. It integrates smoothly with cloud environments to provide advanced threat protection and visibility into network traffic.

Prisma Access offers a comprehensive suite of security tools designed to protect cloud environments and remote workforces. With its focus on real-time risk identification and threat prevention, Prisma Access provides encrypted tunnels and centralized management for seamless connectivity and enhanced data security. Designed to scale across platforms like AWS, Azure, and GCP, it optimizes traffic and connectivity while offering extensive visibility into vulnerabilities. However, integration with third-party products, usability, and support services are areas for development, as users report interface challenges and desire improved scalability and geographic coverage, especially in regions like China and South America.

What are the key features of Prisma Access?

Real-Time Risk Identification: Detects and manages potential threats instantly.
Secure Remote Access: Ensures secure connectivity to applications from anywhere.
Traffic Monitoring: Provides comprehensive oversight of network traffic.
Seamless Integration: Works well with platforms like AWS, Azure, and GCP.
Firewall Capabilities: Blocks unauthorized access and threats.
Scalability: Adapts to various cloud environments to meet growing demands.

What benefits should users expect when evaluating Prisma Access?

Reduced Data Breach Risk: Protects sensitive information through encrypted connections.
User-Friendly Interface: Simplifies management and configuration tasks.
Centralized Management: Offers a single view for managing all security policies.
Advanced Threat Protection: Regular updates guard against new threats.

Prisma Access is effectively used in industries requiring secure remote access and stringent data protection, such as finance and healthcare. Organizations leverage it to enforce Zero Trust policies, optimize network performance with SD-WAN, and ensure security compliance across multiple platforms.

Palo Alto Networks

Sample Customers

More than 4,000 global enterprises trust the iboss Cloud Platform to support their modern workforces, including a large number of Fortune 50 companies.

Zions Bank, GE Healthcare, HomeAway, Logitech, Universal, California National Resources Agency and many mor

Concord Hospital, State of Colorado, Essilor International, RheinLand Versicherungsgruppe, University of Westminster, Universidade Nove de Julho, SPAR Austria, CAME Group, ZipRealty, Greenhill & Co., IKT Agder, Aviva Stadium, Animal Logic, Management & Training Corporation, Brigham Young University Hawaii, School District of Chilliwack

Forcepoint CASB vs. Prisma Access by Palo Alto Networks