Forcepoint ONE vs Prisma Access by Palo Alto Networks comparison

Forcepoint and Palo Alto Networks are both solutions in the Secure Access Service Edge (SASE) category. Forcepoint is ranked #14 with an average rating of 7.4, while Palo Alto Networks is ranked #2 with an average rating of 8.2. Forcepoint holds a 1.5% mindshare in SASE, compared to Palo Alto Networks’s 15.3% mindshare. Additionally, 100% of Forcepoint users are willing to recommend the solution, compared to 92% of Palo Alto Networks users who would recommend it.

Comparison Buyer's Guide

Download the report

Executive SummaryUpdated on Oct 6, 2024

Prisma Access by Palo Alto Networks and Forcepoint ONE compete in the network security category. Forcepoint ONE appears to have the upper hand due to its innovation and versatility, offering advanced threat protection and data security features.

Features:Prisma Access is recognized for comprehensive security capabilities and robust threat prevention. It is ideal for scalable deployment. Forcepoint ONE provides advanced threat protection, data security features, and versatility, appealing to customers seeking adaptability.

Room for Improvement:Prisma Access users suggest better integration capabilities, adaptability to diverse environments, and scalability. Forcepoint ONE feedback highlights enhancing reporting tools, user policy customization, and management ease.

Ease of Deployment and Customer Service:Prisma Access deployment is straightforward, though some users face initial setup challenges. Customer service is favorable but needs more personalized support. Forcepoint ONE features quicker deployment and responsive support teams, offering greater satisfaction, especially in complex environments.

Pricing and ROI:Prisma Access is seen as cost-effective with balanced ROI aligning with expenditure. Forcepoint ONE, viewed as premium-priced, is considered worth the investment for its features and security benefits, offering substantial lasting value with strong ROI.

To learn more, read our detailed Forcepoint ONE vs. Prisma Access by Palo Alto Networks Report (Updated: July 2025).

Buyer's Guide

Forcepoint ONE vs. Prisma Access by Palo Alto Networks

July 2025

Download the complete report

Helped 865,295 peers since 2012

Review summaries and opinions

We asked business professionals to review the solutions they use. Here are some excerpts of what they said:

Categories and Ranking

iboss

Mindshare comparison

As of August 2025, in the Secure Access Service Edge (SASE) category, the mindshare of iboss is 1.8%, up from 1.2% compared to the previous year. The mindshare of Forcepoint ONE is 1.5%, down from 1.6% compared to the previous year. The mindshare of Prisma Access by Palo Alto Networks is 15.3%, down from 18.9% compared to the previous year. It is calculated based on PeerSpot user engagement data.

Secure Access Service Edge (SASE)

Featured Reviews

Matt Crockford

Head of Cybersecurity at SES Water

It's easy to roll out, and their understanding of our business made it seamless

One aspect we value about iboss is its simplicity. Their customer service is brilliant, and they are super responsive and knowledgeable. It's easy to roll out, and their understanding of our business made it seamless. We were impressed by the solution's mental health function, which can detect if someone needs help. It scans what users are browsing and flags warning signs so we can check to see if they are okay. We've had to use it a couple of times. The user interface is highly intuitive. Our IT team picked it up with minimal training. It's arranged so that it's easy to find where things are. Another advantage is the single pane of glass console, which gives you visibility into what's happening. We're not fully there yet because we haven't implemented zero trust, but we're excited about the possibilities from the demos we've seen. We launched a POC of iboss' ChatGPT Risk Protection feature two weeks ago. AI is a great tool, but you need to be careful what you put into it. My biggest fear is employees inputting sensitive corporate information or customer PII data into one of these chatbots. I was impressed by our trial of the feature. It's exactly what we wanted. Now, when a user goes to ChatGPT, there's a banner warning them not to share information, and we can block conversations containing customer data like bank details and email addresses. I don't want to stop people from using it, but we need visibility. We've only tried it on a test group of 15 people. You can configure it to look for specific keywords or integrate it with your DLP policy if you have that configured

Read full review

Edwin Eze-Osiago

Regional Solutions Manager Sub Saharan Africa at Infodata Professional Services Limited

Easy to deploy, stable, and scalable

Bitglass integration with some IDP providers needs improvement. Currently, the solution is not compatible with Azure AD for third-party authentication. The fraud proxy in the SmartEdge agent is not compatible with Forcepoint DLP or a web hybrid agent. I would like the developers to consolidate multiple agents across systems for better integration.

Read full review

Amar-Patil

Security Engineer at a tech services company with 1,001-5,000 employees

Enables seamless policy management and supports secure remote work

Our primary use case for Prisma Access by Palo Alto Networks is to control the internet and serve as an internet proxy. Additionally, we use it for secure remote work One of the most valuable features of Prisma Access by Palo Alto Networks is the ability to manage on-premise firewalls. We can…

Read full review

Quotes from Members

We asked business professionals to review the solutions they use. Here are some excerpts of what they said:

Pros

"We chose iboss for both zero trust and proxy (SWG) because their SWG was superior."

"Granular setup, which was able to set different levels of filters using the OUs in the AD."

"iboss is among the few products providing inline filtering where no application is needed on the device. It operates on the network side and is not device-based. This feature was one of the main reasons why we stayed with them for so long."

"iboss has significantly lowered the number of security incidents. It is crazy how much it blocks and how much it is aware of the outside danger."

"Our primary use case for this product is DLP,"

"Because of iboss, I did not have to assign web filtering tasks to my techs on a daily basis."

"Valuable features: Within the filter: Controls (Web categories, applications, and Allow/Block list) and Network (local Subnets). Within the reporter: Logs (Event Log) and Reports."

"iboss is pretty scalable. They provide good support. The case managers you work with to coordinate what you need are pretty good."

More iboss pros

"The core CASB solution is the most valuable part. It allows us to put policies in place around which devices can log into our cloud applications. We have a policy that states that only company devices can access these cloud applications."

"By default without a policy, Bitglass has the capability to notify the admin of multiple or simultaneous logins across a wide range of geographical regions."

"The setup is relatively straightforward."

"The solution’s AJAX-VM provides constant reverse proxy uptime. It has been very positive for our security operations. When people are trying to access the SaaS solution, it protects us from downloading any of that data and experiencing any type of attacks"

"The solution is very good when it comes to securing us against data leakage, because of the other proxy. It also has API scanning or data at rest. It inspects data in motion, which is the proxy, and then it has the data at rest, which is the API scanning. We can inspect for anything we want: file fingerprinting, PHI-sensitive data, PCI-sensitive data. It does not matter. We can usually find it and block it in transit and do our remediation with it. It could either be block, encrypt, or allow and watermark the file to follow it and see where it goes. It allows for those different scenarios."

"The initial setup was straightforward, which was a huge win. That mostly goes to the fact that they are agentless. We didn't have to sit there deploying thousands of agents and all the things that go along with that type of deployment. We were up and running very quickly."

"The most valuable features of Forcepoint include Zero Trust Network Access and remote user protection for private applications."

"Forcepoint ONE is okay for me, and I find it a very good solution. Its most valuable feature is monitoring. Its monitoring is very good, and it can communicate with a SIEM system. I also find the DLP feature of Forcepoint ONE good."

More Forcepoint ONE pros

"There are plenty of features this solution provides and the most valuable would be the complete security protection we are receiving. We are provided with similar security that the Palo Alto AWS solution has. This includes features such as a firewall and machine learning AI."

"Palo Alto Firewall is one of the best firewalls in the world."

"The solution's most valuable features were the model's reduced complexity on the client side and its capability to provide security."

"It's very stable. Sometimes after installing the boxes, we leave them for one or two years. We would just touch the box in the case of the customer needing new requirements or changes to the setup."

"The always-on feature is fantastic for the users. They don't have to think about it. When they go to a coffee shop to do work, there's no need to remember to toggle the VPN on. We'll protect them. URL filtering is the same at home as it is in the office."

"Overall, the cost savings, ease of deployment, and better VPN user experience and performance are valuable."

"The most valuable feature of Prisma Access is its ability to provide enterprise-class security for both Internet and internal application access."

"Prisma SaaS is very easy to use; it's common sense — it's the best-in-class."

More Prisma Access by Palo Alto Networks pros

Cons

"I am currently doing a PoC of the zero trust aspect of it. Compared to other similar solutions, it is hard to get around each feature. It takes a while to get used to it."

"Our biggest problem with their service was it did not recognize the device and filtering did not always work correctly."

"The dashboards for local use could be better."

"File integrity monitoring would be very advantageous as an additional feature."

"Sometimes the agent stops working in iboss, and we have to reinstall the agent."

"The reporting feature needs improvement."

"To scale up, a new iboss Node Blade Chassis must be purchased."

"The area I would like to see improvement in is the ability with in the reporter to navigate directly to the content the user is traversing. It is kind of there, but it's not perfect. Quite frequently, I receive links that lead me to pages with error messages."

More iboss cons

"We encounter challenges in determining whether certain features for blocking certain file types or preventing automatic downloads are functioning correctly."

"In our environment, when an Active Directory password changes, we tend to have some latency issues with access. It takes about 15 minutes before that password is accessible through Bitglass after the change. That would be the major thing I see as a negative."

"Initially, we had some challenges that Bitglass resolved quickly. The challenges were around communication. There didn't seem like there was the right level of communication within the Bitglass organization. Once we brought the issues up at a higher level, then they were resolved."

"I need control over access to web WhatsApp, which the solution cannot resolve yet."

"I wish they would advance more into the endpoint DLP solution. Currently they do not do anything around endpoint, they're still strictly cloud-based. The forward proxy is really the only thing they do. What I would like to see them do is to scan machines, workstations and servers, for information we might not want on those machines. That would be huge."

"There is room for improvement in making the reporting closer to real-time, ideally around five or ten minutes instead of half an hour. The interface could also be updated as it was quite dated."

"Bitglass integration with some IDP providers needs improvement."

"Areas for improvement for the platform include addressing scalability and architecture concerns, especially for large deployments involving more than 500 or 1,000 users."

More Forcepoint ONE cons

"I would like to see better pricing and an easier logging process. Also, if there was a way to log a global log, everything could go onto the system. It would be better if there was a third log, otherwise one would have to do everything manually."

"The one thing that I've been a little bit disappointed with is when we have had to open cases with Palo Alto about Prisma Access issues. Versus their other platforms, like their firewalls, where we tend to get really quick responses and very definitive answers, the few tickets I've had to open for Prisma Access have taken them longer to respond to. And they haven't necessarily given me the kind of answer I was looking for, meaning a fix to the problem."

"There is some particular traffic that the security team wants to filter out and apply their own policies and they cannot."

"The product's current price is an area of shortcoming where improvements are required."

"There can be some latency issues with the solution that should be improved."

"One area for improvement is for them to stay on top of keeping their CVEs on their platform up to date."

"Palo Alto Prisma 10 came out over a year ago. Palo Alto added this identity management feature. The legacy way Palo Alto selected which user is sitting on an IP address it passes through has been clunky."

"We would like to see improvements in the licensing; currently, Palo Alto provides 500 to 1000 licenses for users, and we want to see 1500 to 2000 licenses for one version."

More Prisma Access by Palo Alto Networks cons

Pricing and Cost Advice

"We have not priced the solution recently, but they were competitive with other vendors in the past."

"It is not expensive, and it is also not cheap. iboss is priced right in the sweet spot for the number of features it offers."

"It is probably in line with other solutions, but I do not deal with the financial side."

"The overall pricing for iboss is very competitive and transparent."

"It is expensive compared to one of its competitors."

"We had the cost of purchasing a new appliance along with the implementation and licensing costs. However, the following year, the cost of just licensing was similar to what was paid the previous year for a new appliance along with the implementation and licensing costs."

"When considering only the cost, the solution may appear to be costly; however, when evaluated in terms of commercial value, Bitglass is not expensive."

"Typically, the longer you price forward, the better off you're going to be. They have been very willing to work with us on pricing."

"There is training involved. If you're going to add more people to it, such as cross train more of your group, there's a cost. Other than that, that's it. We have paid exactly what the invoices have said. We signed a three-year contract and not gone above it."

"We have our pricing by user. We do our pricing agreements annually. There are also additional costs for maintenance."

"The product is reasonably priced compared to other vendors. I rate the pricing a two or three."

"The licensing cost for Forcepoint ONE would depend on the features, but the pricing is very competitive here in Brazil. The solution offers a good price, and I would rate it a three or a four in terms of pricing. I don't have information on whether there are additional costs apart from the standard licensing fees for Forcepoint ONE."

"The licensing cost is about 18,000 euros."

"There's no reason not to buy the enterprise version that gives you unlimited PoPs, but you must understand the limitations you impose on yourself if you do that. If you go crazy, that allowlist will be too big for Kubernetes clusters."

"We have to pay additional costs for maintenance and support services."

"Prisma SaaS is more expensive than similar solutions but I think it's worth it."

"I would advise choosing your options according to your company's needs. Just go for what you want and do not pay for anything extra in terms of licensing. You need to determine how much bandwidth is required in your company network, and according to that, you should pay for the license. The mobile user license is based on the number of users who are going to use the VPN solution. You need to determine how many mobile users you are going to have in your network, and you should pay according to that. There are no other costs in addition to licensing, but if you go for the consultant services of Palo Alto networks to deliver the solution for you, then you need to pay something extra. That is not a part of licensing."

"Prisma Access is a little bit expensive."

"The pricing for this solution is on the higher end."

"Prisma Access is one of the best compared to other products on the market. The cost is favorable, and Palo Alto provides a simple architecture, so I recommend the solution to anyone using a different product. There are no hidden costs besides the license; what you see is what you get."

More Prisma Access by Palo Alto Networks pricing and cost advice

See which vendors are best for you

Use our free recommendation engine to learn which Secure Access Service Edge (SASE) solutions are best for your needs.

See recommendations

865,295 professionals have used our research since 2012.

Top Industries

By visitors reading reviews

Computer Software Company

12%

Financial Services Firm

11%

Manufacturing Company

Healthcare Company

Computer Software Company

14%

Government

11%

Financial Services Firm

10%

Manufacturing Company

Computer Software Company

13%

Manufacturing Company

12%

Financial Services Firm

12%

Government

Company Size

By reviewers

Large Enterprise

Midsize Enterprise

Small Business

Questions from the Community

What needs improvement with iboss?

For zero trust implementation, we encountered complexity issues, especially with a large infrastructure company Exxon...

See all answers

What is your primary use case for iboss?

Previously when I used iboss, we did the POC for iboss for ExxonMobil. Four or five people wanted to move from our ol...

See all answers

What is your experience regarding pricing and costs for iboss?

Regarding pricing, setup costs, and licensing, iboss is not cheap, and that's my only concern. There are cheaper alte...

See all answers

What do you like most about Forcepoint ONE?

The platform's feature that has been most beneficial for our web security is its capability to replicate rules.

See all answers

What is your experience regarding pricing and costs for Forcepoint ONE?

The licensing and pricing were fine with no issues. I took over from somebody else, and it stayed as it was until we ...

See all answers

What needs improvement with Forcepoint ONE?

There is room for improvement in making the reporting closer to real-time, ideally around five or ten minutes instead...

See all answers

What is the better solution - Prisma Access or Zscaler Private Access?

We looked into Prisma Access before choosing Zscaler Private Access (ZPA). Palo Alto’s Prisma Access is a secure ac...

See all answers

What do you like most about Prisma Access by Palo Alto Networks?

The most valuable features of the solution are in the areas of the secure remote access it provides while also being ...

See all answers

What is your experience regarding pricing and costs for Prisma Access by Palo Alto Networks?

From my experience, Palo Alto is more expensive compared to solutions like Netskope and Triscale.

See all answers

Comparisons

Zscaler Internet Access vs iboss

Compared 15% of the time

Cisco Umbrella vs iboss

Compared 14% of the time

Netskope vs iboss

Compared 13% of the time

Check Point Harmony SASE (formerly Perimeter 81) vs iboss

Compared 9% of the time

Cloudflare One vs iboss

Compared 8% of the time

More iboss Competitors

Netskope vs Forcepoint ONE

Compared 16% of the time

Microsoft Defender for Cloud Apps vs Forcepoint ONE

Compared 14% of the time

Zscaler Internet Access vs Forcepoint ONE

Compared 12% of the time

Fortinet FortiProxy vs Forcepoint ONE

Compared 5% of the time

Forescout Platform vs Forcepoint ONE

Compared 5% of the time

More Forcepoint ONE Competitors

Netskope vs Prisma Access by Palo Alto Networks

Compared 12% of the time

Zscaler Internet Access vs Prisma Access by Palo Alto Networks

Compared 10% of the time

Cisco Umbrella vs Prisma Access by Palo Alto Networks

Compared 10% of the time

Cato SASE Cloud Platform vs Prisma Access by Palo Alto Networks

Compared 6% of the time

FortiSASE vs Prisma Access by Palo Alto Networks

Compared 6% of the time

More Prisma Access by Palo Alto Networks Competitors

Product Reports

Buyer's Guide

iboss

August 2025

Download iboss product report

Buyer's Guide

Forcepoint ONE

August 2025

Download Forcepoint ONE product report

Buyer's Guide

Prisma Access by Palo Alto Networks

August 2025

Prisma Access by Palo Alto Networks report

Download Prisma Access by Palo Alto Networks product report

Also Known As

iBoss Cloud Platform

Bitglass

Palo Alto Networks Prisma Access, Prisma Access, GlobalProtect, Palo Alto GlobalProtect Mobile Security Manager, Prisma SaaS by Palo Alto Networks, Prisma Access

Overview

iboss offers a comprehensive security platform designed for diverse use cases such as web filtering, data loss protection, corporate proxy services, and URL filtering.

iboss integrates advanced features to address dynamic security needs, leveraging its strength in SASE, ZTNA, AI initiatives, and cloud integration, while ensuring seamless operations for remote work. It excels in historical forensics, malware protection, and flexible cloud deployments. Users benefit from comprehensive traffic scanning, robust malware detection, and PaaS capabilities that reduce hardware management. An intuitive admin console ensures efficient management with content filtering and low false positives. SSL decryption enhances security, while DLP protects data in AI conversations. Deployment is rapid and scalable, allowing effortless integration with emerging technologies.

What features does iboss offer?

Granular Web Filtering: Provides precise control over web content access.
Traffic Scanning: Monitors data through multiple ports for security breaches.
Malware Detection: Ensures superior protection against malware threats.
PaaS Capabilities: Eliminates need for hardware management.
SSL Decryption: Enhances data protection by decrypting secure connections.
DLP Capabilities: Safeguards data during AI interactions.

What benefits and ROI should users consider?

Scalability: Adapts quickly to growing demands and emerging tech integration.
Rapid Deployment: Reduces time to implement security measures.
User-Friendly Admin Console: Facilitates efficient operations management.
Low False Positives: Increases accuracy of threat detection systems.

iboss finds significant application in sectors such as education, where web filtering for K-12 is crucial, and in corporate environments requiring robust proxy services and URL filtering for network security. Its adaptability is essential in scenarios demanding flexible, decentralized security frameworks, particularly for remote work setups.

iboss

Forcepoint ONE is a comprehensive cybersecurity platform that provides organizations with a unified approach to protecting their critical data and assets. It offers a range of solutions that cover everything from network security and cloud security to data protection and insider threat prevention.

With Forcepoint ONE, organizations can gain complete visibility into their security posture, identify potential threats, and take proactive measures to mitigate risks.

One of the key features of Forcepoint ONE is its ability to provide real-time visibility into user behavior across all endpoints, networks, and cloud environments. This allows organizations to quickly identify and respond to potential threats, such as insider threats or malicious activity from external actors. Additionally, Forcepoint ONE offers advanced threat intelligence capabilities that leverage machine learning and AI to detect and respond to emerging threats. Another important aspect of Forcepoint ONE is its data protection capabilities.

The platform offers a range of solutions for protecting sensitive data, including data loss prevention (DLP), encryption, and secure web gateways. These solutions help organizations ensure that their critical data is protected both at rest and in transit, regardless of where it is stored or accessed.

Forcepoint ONE is a powerful cybersecurity platform that offers a comprehensive set of solutions for protecting organizations against a wide range of threats. With its advanced threat intelligence capabilities, real-time visibility into user behavior, and robust data protection features, Forcepoint ONE is an ideal choice for organizations looking to take a proactive approach to cybersecurity.

Forcepoint

Prisma Access by Palo Alto Networks provides consistent security for all users and applications across your remote networks. Prisma Access grants users safe access to the cloud and data center applications and the internet as well. In addition, the solution combines all of your security and networking capabilities into a single cloud-delivered platform, enabling flexible hybrid workforces.

Prisma Access can be managed two ways:

Cloud Managed
Panorama Managed

Prisma Access delivers both networking and security services, including:

SD-WAN
VPN
Zero Trust network access (ZTNA)
Quality of service (QoS)
Clean Pipe
Firewall as a service (FWaaS)
DNS Security
Threat Prevention
Cloud secure web gateway (SWG)
Data loss prevention (DLP)
Cloud access security broker (CASB)

Prisma Access by Palo Alto Networks Features

Prisma Access by Palo Alto Networks has many valuable key features including: App-ID, User-ID, Device-ID, SSL Decryption, Dynamic User Group (DUG) Monitoring, AI/ML-Based Detection, IoT Security, Reporting, URL Filtering, Enterprise Data Loss Prevention (DLP), Digital Experience Monitoring (DEM)*, Logging, Policy Automation, Intrusion Prevention System (IPS), and many more.

Prisma Access by Palo Alto Networks Benefits

Some of the benefits of using Prisma Access by Palo Alto Networks include:

Security: Prisma Access gives you consistent security to protect against cyberattacks, with enforcement of policy at every location. By implementing Prisma Access, you also gain protection that works to prevent known and unknown malware, exploits, credential theft, command and control, and many other attack vectors across all ports and protocols.
Global connectivity: Prisma Access provides global coverage through use of its connectivity layer.
Scalability: With Prisma Access, scaling is automatically managed and is scalable, flexible, and agile.
Instant deployment: Deployment is fast, eliminating wasted time that may otherwise be associated with setting up a solution, operating it, or shipping hardware in order to get started.

Reviews from Real Users

Below are some reviews and helpful feedback written by Microsoft Azure Synapse Analytics

users who are currently using the solution.

PeerSpot user Partha D., Global Network Tech Lead at a computer software company, speaks about his experience using the product, saying, "It protects all app traffic so that users can gain access to all apps. Unlike other solutions that only work from ports 80 and 443, which are predominantly for web traffic, Prisma Access covers all protocols and works on all traffic patterns... The most sophisticated attacks can arise from sources that are not behind 80/443."

Tejas J., a Sr. Cloud Security Architect at a computer software company, mentions that "it is geographically dispersed, and it sits on top of Google and AWS platforms. Therefore, you don't face the standard issues, such as latency or bandwidth issues, that you usually face in the case of on-prem data centers.”

Another PeerSpot reviewer, Max I., Associate Director at Cognizant, comments that "Security is absolutely spot-on, really top-notch. It's the result of all the components that come together, such as the HIP [Host Information Profile] and components like Forcepoint, providing end-user content inspection, and antivirus. It incorporates DLP features and that's fantastic because Prisma Access makes sure that all of the essential prerequisites are in place before a user can log in or can be tunneled into."

Palo Alto Networks

Sample Customers

More than 4,000 global enterprises trust the iboss Cloud Platform to support their modern workforces, including a large number of Fortune 50 companies.

UNC-Charlotte

Concord Hospital, State of Colorado, Essilor International, RheinLand Versicherungsgruppe, University of Westminster, Universidade Nove de Julho, SPAR Austria, CAME Group, ZipRealty, Greenhill & Co., IKT Agder, Aviva Stadium, Animal Logic, Management & Training Corporation, Brigham Young University Hawaii, School District of Chilliwack

Buyer's Guide

Forcepoint ONE vs. Prisma Access by Palo Alto Networks

July 2025

Free Report: Forcepoint ONE vs. Prisma Access by Palo Alto Networks

Find out what your peers are saying about Forcepoint ONE vs. Prisma Access by Palo Alto Networks and other solutions. Updated: July 2025.

DOWNLOAD NOW

865,295 professionals have used our research since 2012.

See our Forcepoint ONE vs. Prisma Access by Palo Alto Networks report.

See our list of best Secure Access Service Edge (SASE) vendors, best Secure Web Gateways (SWG) vendors, and best Cloud Access Security Brokers (CASB) vendors.

We monitor all Secure Access Service Edge (SASE) reviews to prevent fraudulent reviews and keep review quality high. We do not post reviews by company employees or direct competitors. We validate each review for authenticity via cross-reference with LinkedIn, and personal follow-up with the reviewer when necessary.