No more typing reviews! Try our Samantha, our new voice AI agent.

Fortinet FortiProxy vs Prisma Access by Palo Alto Networks comparison

Sponsored
 

Comparison Buyer's Guide

Executive SummaryUpdated on Dec 4, 2024

Review summaries and opinions

We asked business professionals to review the solutions they use. Here are some excerpts of what they said:
 

Categories and Ranking

iboss
Sponsored
Ranking in Secure Web Gateways (SWG)
5th
Average Rating
8.4
Reviews Sentiment
6.9
Number of Reviews
22
Ranking in other categories
Internet Security (3rd), Web Content Filtering (1st), Cloud Access Security Brokers (CASB) (7th), ZTNA as a Service (8th), Secure Access Service Edge (SASE) (8th)
Fortinet FortiProxy
Ranking in Secure Web Gateways (SWG)
11th
Average Rating
8.0
Reviews Sentiment
6.3
Number of Reviews
11
Ranking in other categories
No ranking in other categories
Prisma Access by Palo Alto ...
Ranking in Secure Web Gateways (SWG)
4th
Average Rating
8.2
Reviews Sentiment
6.9
Number of Reviews
65
Ranking in other categories
Cloud Access Security Brokers (CASB) (1st), Enterprise Infrastructure VPN (5th), ZTNA as a Service (5th), Secure Access Service Edge (SASE) (1st)
 

Mindshare comparison

As of June 2026, in the Secure Web Gateways (SWG) category, the mindshare of iboss is 3.4%, up from 2.0% compared to the previous year. The mindshare of Fortinet FortiProxy is 2.3%, down from 5.4% compared to the previous year. The mindshare of Prisma Access by Palo Alto Networks is 7.6%, down from 10.6% compared to the previous year. It is calculated based on PeerSpot user engagement data.
Secure Web Gateways (SWG) Mindshare Distribution
ProductMindshare (%)
Prisma Access by Palo Alto Networks7.6%
iboss3.4%
Fortinet FortiProxy2.3%
Other86.7%
Secure Web Gateways (SWG)
 

Featured Reviews

Ashok Ananthula - PeerSpot reviewer
Senior Consultant Proxy Engineering at a financial services firm with 10,001+ employees
Cloud gateway has strengthened remote web security and now needs better Mac and ISP support
The problem our organization had is that iboss failed for the Mac devices. It is not able to give a successful agent for the Mac agents. That is where in 2025, we had to migrate to the Palo Alto-based platform. If your use case is for just Windows laptops,you can consider this platform as an option One issue is the data center resiliency part. In India especially, they are not tied up with the Tier 1 ISPs like Tata or Airtel; they were having Tier 2 ISPs and encountered many issues reaching few major sites that my organization depends on, and they were having problems that they could not fix quickly. They also lack a mechanism to route that traffic within their data center; rather, they ask customers to make a pac file change to route it to Singapore explicitly. It would be better if they route from their backend , i mean even if I send it to India DC, they should be able to route it internally to make that work; however, they fail to do that and ask the customer to route it in the pac file. Another suggestion is that in China, they do not have the proper setup; they used to have numerous problems with slowness and lack of premium circuits in China as well. That leads to multiple sites working slowly with latency-related issues. So the main issue is the ISP-related problems that need to be solved.
Emmanuel Dasho - PeerSpot reviewer
Cyber Security Engineer | Network/Security at a tech services company with 11-50 employees
Ease of configuration and seamless integration enhance operational efficiency
The App Control feature in the Fortinet FortiProx * Deep Packet Inspection (DPI): FortiProxy analyzes traffic at the application layer to detect applications even if they use non-standard ports or are encrypted. * Application Signatures: Uses FortiGuard’s application signature database (constantly updated) to recognize thousands of applications. * Policy Enforcement: You can create policies to Allow, Block, Monitor, or Shape (QoS) based on application type, category, or specific apps.
IgorPinter - PeerSpot reviewer
Director at PULSEC
Zero-trust access has improved remote security and now simplifies cloud-based firewall management
Regarding the integration part for Prisma Access by Palo Alto Networks, the integration with identity providers is pretty much good. It is basically firewall as a service, so it performs well. I completed the integration without any issues. What Palo Alto Networks can do better for Prisma Access by Palo Alto Networks is probably to have the point of presence available in more locations. The point of presence from the Serbia region has the nearest POP in Frankfurt, which is an issue since it is your gateway—when you start browsing the internet, you go through a commercial connection in Germany. They definitely need to spread the service in other countries.

Quotes from Members

We asked business professionals to review the solutions they use. Here are some excerpts of what they said:
 

Pros

"I would definitely recommend iboss for web filtering purposes to other organizations or individuals."
"Content filtering is the most useful feature of iboss."
"Valuable features: Within the filter: Controls (Web categories, applications, and Allow/Block list) and Network (local Subnets). Within the reporter: Logs (Event Log) and Reports."
"Technical support is pretty sharp and very responsive."
"iboss is easy to use despite its complexity. Multiple engineers manage it, but it's significantly more straightforward to administer than traditional VPNs and web proxies."
"The iboss system is highly reliable. The false positive rates are small compared to some other systems we've experienced through other partner agencies who use competing solutions."
"iboss has significantly lowered the number of security incidents. It is crazy how much it blocks and how much it is aware of the outside danger."
"From a use-case scenario, what I like the most is the plug-in. I like the fact that we can do the filtering of these devices offsite independent of the network they are connected to, and we do not have to have traffic coming back inside our network."
"It helps to secure the networks at the DNA level and ensure proper identification and filtering of DNS traffic."
"I liked the tool's ability to provide detailed access control. For example, we could allow users to watch YouTube videos but not post comments. This level of control wasn't available in FortiGate."
"The App Control feature in the Fortinet FortiProxy Deep Packet Inspection (DPI): FortiProxy analyzes traffic at the application layer to detect applications even if they use non-standard ports or are encrypted."
"The most valuable feature is intrusion prevention (IPS) and antivirus profiles. These features help control user activity, ensuring that they access only permitted websites and protects from downloading viruses."
"It seamlessly integrates with various security products, enhancing threat intelligence and improving indicators of compromise."
"We can use Fortinet FortiProxy configuration for your network."
"The tool's most valuable feature is traffic inspections."
"The solution's stability is good."
"Prisma Access by Palo Alto Networks is a seamless solution."
"Prisma Access protects all app traffic, so that users can gain access to all apps and that's very important because we need to be able to access everything. It also allows us to access non-web apps; anything internal that we need access to, we can access."
"The solution has all its capabilities in a single cloud delivery platform which is great and it provides overall good protection."
"The most valuable feature of Prisma Cloud-native, in my opinion, is that it assists in identifying, analyzing, and remediating vulnerabilities."
"The visibility perspective is pretty cool. If I want to know how much data is being used for a specific project, I can look at how much data has been used, from which region, and which users have been connected. That visibility is very good so that I can see how many licenses we have and how many are used."
"Security is absolutely spot-on, really top-notch. It's the result of all the components that come together, such as the HIP [Host Information Profile] and components like Forcepoint, providing end-user content inspection, and antivirus. It incorporates DLP features and that's fantastic because Prisma Access makes sure that all of the essential prerequisites are in place before a user can log in or can be tunneled into."
"Prisma SaaS is very easy to use; it's common sense — it's the best-in-class."
"This is the best product that I have looked at, out of all of the competitors."
 

Cons

"It is stable, but due to growth, it can sometimes be less stable than wanted."
"The area I would like to see improvement in is the ability with in the reporter to navigate directly to the content the user is traversing. It is kind of there, but it's not perfect. Quite frequently, I receive links that lead me to pages with error messages."
"Regarding pricing, setup costs, and licensing, iboss is not cheap, and that's my only concern."
"If they could implement an extra security layer preventing access to iboss from the open internet, it would be great."
"I'd like to see them accelerate development on the security side, particularly around data loss prevention."
"SSL decryption: We had issues with learners using apps instead of using web browsers. This type of encryption is tough for any appliance in a BYOD environment."
"I have heard they are doing DDoS filtering, but I am not certain if they are implementing it correctly."
"The reporting feature needs improvement."
"Its web filtering capabilities could be improved."
"I see that the solution's interface is not in French...It would be good for our company if we could have the tool interface in French."
"Its power supply process for some of the proxies needs improvement."
"The tool's most valuable feature is its granular access control. For example, users can browse the main site if you allow access to Amazon, but it stops them from visiting secondary Amazon websites without specific permission. This granular control is really helpful."
"Fortinet FortiProxy should improve by adding more documentation and guides."
"For IT administrators and managers, the reporting features are the main issues that should be addressed in order to improve the performance, security, and effective utilization of the product."
"Fortinet FortiProxy should integrate AI/ML technologies. Its pricing needs to be more flexible."
"Integration with existing infrastructure was generally easy, especially if you had tools like LDAP. However, I had to go through a lot of documentation as it was my first time working with a proxy server. We did experience some issues with certain web applications not working properly after implementing Fortinet FortiProxy."
"The documentation is generally good, but they could provide a more detailed description of all the configuration steps. I have to search for information or call support. Palo Alto could add more knowledge base articles about configuration with screenshots and walkthroughs. That would be helpful. When configuring a product, you want to see examples of how it is done."
"If I had to rate Prisma Access for ease of use, I'd give it two out of ten. It's easy for the users, but it's difficult for admins to configure."
"Prisma Access by Palo Alto Networks should consolidate the portals into a single portal. It is slow and takes more than ten seconds to load a page."
"The one thing that I've been a little bit disappointed with is when we have had to open cases with Palo Alto about Prisma Access issues."
"It is a managed firewall. When you run into issues and have to troubleshoot, there is a fair amount of restriction. You run into a couple of restrictions where you don't have any visibility on what is happening on the Palo Alto managed infrastructure, and you need to get on a call to get technical assistance from Palo Alto's technical support. You have to get them to work with you to fix the problem. I would definitely like them to work on the visibility into what happens inside Palo Alto's infrastructure. It is not about getting our hands onto their infrastructure to do troubleshooting or fixing problems; it is just about getting more visibility. This will help us in guiding technical support folks to the area where they need to work."
"They could add more flexibility and improve product performance."
"Palo Alto Prisma 10 came out over a year ago. Palo Alto added this identity management feature. The legacy way Palo Alto selected which user is sitting on an IP address it passes through has been clunky."
"Lacks a hybrid model which has API plus in-line security."
 

Pricing and Cost Advice

"It is probably in line with other solutions, but I do not deal with the financial side."
"The overall pricing for iboss is very competitive and transparent."
"We had the cost of purchasing a new appliance along with the implementation and licensing costs. However, the following year, the cost of just licensing was similar to what was paid the previous year for a new appliance along with the implementation and licensing costs."
"We have not priced the solution recently, but they were competitive with other vendors in the past."
"It is not expensive, and it is also not cheap. iboss is priced right in the sweet spot for the number of features it offers."
"It is expensive compared to one of its competitors."
"The solution is neither too expensive nor very cheap."
"It can be considered expensive, with a limited lifespan and support that eventually requires updating to newer solutions."
"The tool's pricing is in the middle."
"Price-wise, Fortinet FortiProxy is moderate - not the highest among competitors, but not cheap either."
"It offers a more cost-effective solution than alternatives like FortiMail, FortiGate, and various Barracuda devices."
"It is a cost-effective solution."
"There's no reason not to buy the enterprise version that gives you unlimited PoPs, but you must understand the limitations you impose on yourself if you do that. If you go crazy, that allowlist will be too big for Kubernetes clusters."
"Prisma Access by Palo Alto Networks is an expensive solution, especially when compared to other solutions like Cisco. There are no additional charges apart from the standard licensing costs attached to the solution."
"The pricing for this solution is on the higher end."
"Compared to other products, the price is slightly high."
"Actually the solution is very expensive. I don't know the particulars since the purchasing team dealt with it."
"It's pricey, it's not cheap. But you get what you pay for."
"I'm still comparing, but the solution is quite expensive."
"The price has been good for the ROI during these difficult times for the cruise industry. There are no hidden costs; what the product offers is what you get."
report
Use our free recommendation engine to learn which Secure Web Gateways (SWG) solutions are best for your needs.
902,270 professionals have used our research since 2012.
 

Top Industries

By visitors reading reviews
Financial Services Firm
11%
Manufacturing Company
10%
Computer Software Company
8%
Construction Company
7%
Financial Services Firm
13%
Computer Software Company
12%
Manufacturing Company
7%
Government
7%
Financial Services Firm
12%
Manufacturing Company
10%
Computer Software Company
8%
Construction Company
6%
 

Company Size

By reviewers
Large Enterprise
Midsize Enterprise
Small Business
By reviewers
Company SizeCount
Small Business7
Midsize Enterprise7
Large Enterprise9
By reviewers
Company SizeCount
Small Business7
Midsize Enterprise1
Large Enterprise3
By reviewers
Company SizeCount
Small Business26
Midsize Enterprise20
Large Enterprise27
 

Questions from the Community

What needs improvement with iboss?
The problem our organization had is that iboss failed for the Mac devices. It is not able to give a successful agent ...
What is your primary use case for iboss?
We used iBoss mainly for Internet Access by having an Agent on Windows laptops Primarily because when we try to use i...
What is your experience regarding pricing and costs for iboss?
I am not involved in pricing, but as per the information I have, during that time, the Blue Coat proxies we were usin...
What needs improvement with Fortinet FortiProxy?
For me it may be the wildcards for urls whitelist or blacklist, somehow the page loads. Aside from that there no other..
What advice do you have for others considering Fortinet FortiProxy?
My advice to others who are considering Fortinet FortiProxy is that it is seamless, easy to use, and quite straightfo...
What is your experience regarding pricing and costs for Fortinet FortiProxy?
Fortinet FortiProxy is much cheaper compared to other products like Cisco, Palo Alto, and others. It is reasonably pr...
What is the better solution - Prisma Access or Zscaler Private Access?
We looked into Prisma Access before choosing Zscaler Private Access (ZPA). Palo Alto’s Prisma Access is a secure ac...
What is your experience regarding pricing and costs for Prisma Access by Palo Alto Networks?
From my experience, Palo Alto is more expensive compared to solutions like Netskope and Triscale.
What needs improvement with Prisma Access by Palo Alto Networks?
Regarding the integration part for Prisma Access by Palo Alto Networks, the integration with identity providers is pr...
 

Also Known As

iBoss Cloud Platform
FortiProxy
Palo Alto Networks Prisma Access, Prisma Access, GlobalProtect, Palo Alto GlobalProtect Mobile Security Manager, Prisma SaaS by Palo Alto Networks, Prisma Access
 

Overview

 

Sample Customers

More than 4,000 global enterprises trust the iboss Cloud Platform to support their modern workforces, including a large number of Fortune 50 companies.
Information Not Available
Concord Hospital, State of Colorado, Essilor International, RheinLand Versicherungsgruppe, University of Westminster, Universidade Nove de Julho, SPAR Austria, CAME Group, ZipRealty, Greenhill & Co., IKT Agder, Aviva Stadium, Animal Logic, Management & Training Corporation, Brigham Young University Hawaii, School District of Chilliwack
Find out what your peers are saying about Fortinet FortiProxy vs. Prisma Access by Palo Alto Networks and other solutions. Updated: June 2026.
902,270 professionals have used our research since 2012.