Fortinet FortiProxy vs Prisma Access by Palo Alto Networks comparison

Fortinet and Palo Alto Networks are both solutions in the Secure Web Gateways (SWG) category. Fortinet is ranked #11 with an average rating of 7.8, while Palo Alto Networks is ranked #4 with an average rating of 8.2. Fortinet holds a 3.5% mindshare in WSG, compared to Palo Alto Networks’s 9.2% mindshare. Additionally, 100% of Fortinet users are willing to recommend the solution, compared to 92% of Palo Alto Networks users who would recommend it.

Comparison Buyer's Guide

Download the report

Executive SummaryUpdated on Dec 4, 2024

Prisma Access by Palo Alto Networks and Fortinet FortiProxy compete in the security and proxy solutions market. Prisma Access has the upper hand due to its comprehensive security features and integration capabilities, whereas FortiProxy is noted for its simplicity and user-friendliness.

Features: Prisma Access offers zero-trust capabilities, scalable architecture, and seamless integration with other Palo Alto products. It provides robust user accessibility, thorough traffic analysis, and threat prevention. FortiProxy excels in effective web traffic inspection, granular access control, and intrusion prevention, providing flexibility in managing web access.

Room for Improvement: Prisma Access users face challenges with updates, third-party integration, application dependencies, and documentation. They desire more pricing flexibility and improved deployment processes. Fortinet FortiProxy needs enhancement in web filtering, documentation updates, and integration with AI/ML technologies, requiring better usage guidance and policy management solutions.

Ease of Deployment and Customer Service: Prisma Access offers a versatile deployment model, including hybrid and public cloud options, with variable technical support quality for non-premium users. Fortinet FortiProxy provides straightforward deployment focusing on on-premises and hybrid cloud environments, with consistent and responsive support.

Pricing and ROI: Prisma Access is perceived as expensive but delivers significant ROI due to advanced features and comprehensive security, justifying higher costs. Licensing flexibility varies, and the investment is often deemed worthwhile. Fortinet FortiProxy is more affordable, offering good value for money, though its pricing model may need modifications for better scalability.

To learn more, read our detailed Fortinet FortiProxy vs. Prisma Access by Palo Alto Networks Report (Updated: February 2026).

Buyer's Guide

Fortinet FortiProxy vs. Prisma Access by Palo Alto Networks

February 2026

Download the complete report

Helped 881,757 peers since 2012

Review summaries and opinions

We asked business professionals to review the solutions they use. Here are some excerpts of what they said:

Categories and Ranking

iboss

Mindshare comparison

As of February 2026, in the Secure Web Gateways (SWG) category, the mindshare of iboss is 2.4%, up from 1.9% compared to the previous year. The mindshare of Fortinet FortiProxy is 3.5%, down from 5.5% compared to the previous year. The mindshare of Prisma Access by Palo Alto Networks is 9.2%, down from 11.1% compared to the previous year. It is calculated based on PeerSpot user engagement data.

Secure Web Gateways (SWG) Market Share Distribution
Product	Market Share (%)
Prisma Access by Palo Alto Networks	9.2%
iboss	2.4%
Fortinet FortiProxy	3.5%
Other	84.9%

Secure Web Gateways (SWG)

Featured Reviews

reviewer2701851

Managing Director

Enhances web security with a single pane of glass and flexible deployment

I don't see any need for improvement; one of the really good things about iboss as a company is that they listen to customer feedback. I have suggested enhancements, and they are responsive, making changes for the better, and they do a lot of testing. To improve iboss, although we haven't used it, we considered the VPN solution that comes with the highest tier licensing, which includes DLP and various other add-ons. We prefer using another product which automatically logs you back onto your network when turning on your PC. With iboss, the connection is manual, which doesn't meet our needs. Additionally, sizing can be tricky because, although the initial recommendations may seem adequate, actual usage may require more gateways than anticipated.

Read full review

Emmanuel Dasho

Cyber Security Engineer | Network/Security at a tech services company with 11-50 employees

Ease of configuration and seamless integration enhance operational efficiency

The App Control feature in the Fortinet FortiProx * Deep Packet Inspection (DPI): FortiProxy analyzes traffic at the application layer to detect applications even if they use non-standard ports or are encrypted. * Application Signatures: Uses FortiGuard’s application signature database (constantly updated) to recognize thousands of applications. * Policy Enforcement: You can create policies to Allow, Block, Monitor, or Shape (QoS) based on application type, category, or specific apps.

Read full review

IgorPinter

Director at PULSEC

Zero-trust access has improved remote security and now simplifies cloud-based firewall management

Regarding the integration part for Prisma Access by Palo Alto Networks, the integration with identity providers is pretty much good. It is basically firewall as a service, so it performs well. I completed the integration without any issues. What Palo Alto Networks can do better for Prisma Access by Palo Alto Networks is probably to have the point of presence available in more locations. The point of presence from the Serbia region has the nearest POP in Frankfurt, which is an issue since it is your gateway—when you start browsing the internet, you go through a commercial connection in Germany. They definitely need to spread the service in other countries.

Read full review

Quotes from Members

We asked business professionals to review the solutions they use. Here are some excerpts of what they said:

Pros

"The iboss system is highly reliable. The false positive rates are small compared to some other systems we've experienced through other partner agencies who use competing solutions."

"Granular setup, which was able to set different levels of filters using the OUs in the AD."

"The console is cloud-based, which is something I really appreciate."

"First of all, the security policies are essential. I do not have to rely solely on Active Directory for our users."

"Technical support is pretty sharp and very responsive."

"iboss has significantly lowered the number of security incidents. It is crazy how much it blocks and how much it is aware of the outside danger."

"I would rate the technical support of iboss a solid 10 without a shadow of a doubt."

"From a use-case scenario, what I like the most is the plug-in. I like the fact that we can do the filtering of these devices offsite independent of the network they are connected to, and we do not have to have traffic coming back inside our network."

More iboss pros

"The most valuable feature is intrusion prevention (IPS) and antivirus profiles. These features help control user activity, ensuring that they access only permitted websites and protects from downloading viruses."

"It is a really stable solution."

"The App Control feature in the Fortinet FortiProxy Deep Packet Inspection (DPI): FortiProxy analyzes traffic at the application layer to detect applications even if they use non-standard ports or are encrypted."

"The tool's most valuable feature is traffic inspections."

"The most valuable features of Fortinet FortiProxy are its simplicity and performance."

"The solution's stability is good."

"It helps to secure the networks at the DNA level and ensure proper identification and filtering of DNS traffic."

"I liked the tool's ability to provide detailed access control. For example, we could allow users to watch YouTube videos but not post comments. This level of control wasn't available in FortiGate."

More Fortinet FortiProxy pros

"The stacked policies, event policies, and routing policies are easy to understand for someone with general knowledge."

"There are plenty of features this solution provides and the most valuable would be the complete security protection we are receiving. We are provided with similar security that the Palo Alto AWS solution has. This includes features such as a firewall and machine learning AI."

"The users can securely access any cloud data centers or cloud platforms. In terms of the features, it has all the features that Palo Alto Next-Generation Firewall has. It is also very stable and scalable."

"Prisma SaaS is very easy to use; it's common sense — it's the best-in-class."

"The solution also provides traffic analysis, threat prevention, URL filtering, and segmentation. That combination is important because it enhances the protection and makes the traffic more secure. It also keeps things more up-to-date, enabling us to deal with more of the current threats."

"The product's initial setup phase is simple."

"The most valuable feature is the ability to change the gateway. For example, if there's a problem with a specific region or vendor, we can make modifications. The solution is scalable, and there are different gateways that can be created depending on the demand."

"The solution has all its capabilities in a single cloud delivery platform which is great and it provides overall good protection."

More Prisma Access by Palo Alto Networks pros

Cons

"Sometimes the agent stops working in iboss, and we have to reinstall the agent."

"Iboss is growing so fast that it is often hard for them to keep up with the challenges."

"File integrity monitoring would be very advantageous as an additional feature."

"Regarding pricing, setup costs, and licensing, iboss is not cheap, and that's my only concern."

"For zero trust implementation, we encountered complexity issues, especially with a large infrastructure company ExxonMobil."

"The dashboards for local use could be better."

"Sometimes, obviously, there are bugs."

"To scale up, a new iboss Node Blade Chassis must be purchased."

More iboss cons

"Its power supply process for some of the proxies needs improvement."

"Integration with existing infrastructure was generally easy, especially if you had tools like LDAP. However, I had to go through a lot of documentation as it was my first time working with a proxy server. We did experience some issues with certain web applications not working properly after implementing Fortinet FortiProxy."

"For IT administrators and managers, the reporting features are the main issues that should be addressed in order to improve the performance, security, and effective utilization of the product."

"Its web filtering capabilities could be improved."

"The tool's most valuable feature is its granular access control. For example, users can browse the main site if you allow access to Amazon, but it stops them from visiting secondary Amazon websites without specific permission. This granular control is really helpful."

"I see that the solution's interface is not in French...It would be good for our company if we could have the tool interface in French."

"Fortinet FortiProxy should improve by adding more documentation and guides."

"Fortinet FortiProxy should integrate AI/ML technologies. Its pricing needs to be more flexible."

"One thing that would help is if we could get a guide. With Cisco, for example, you can just type the problem regarding your Cisco product and you will easily get your solution. In Palo Alto, however, it's not easy to find the solutions."

"One area for improvement is for them to stay on top of keeping their CVEs on their platform up to date."

"The price can be reduced to make it more competitive."

"When we deploy firewall rules via Panorama, we find it's a little bit slow. We have a global environment and might have 100 gateways or VPNs in the cloud. When we deploy something, it tries to deploy it one-by-one, and that can be slow."

"The user interface could be better. They need to work a little bit on the console. It is similar to their firewalls but not exactly. They need to clean it up a bit."

"It applies commits to the firewalls slowly. There isn't an API you can use for anything. We've previously had trouble with the egress IP addresses though we expressed to engineering that those mustn't change. They changed several times without warning, causing a lot of headaches."

"They can add some new characteristics. For example, when an incident triggers, they can automatically send a template for a particular match that is related to the policy. We don't have that right now. It is something to improve. There could be more automation for certain actions. For example, for a particular group, it can send an administrator alert to their manager. It was one of the concerns of our customers."

"Better integration with the MDM solution would be useful."

More Prisma Access by Palo Alto Networks cons

Pricing and Cost Advice

"It is expensive compared to one of its competitors."

"We have not priced the solution recently, but they were competitive with other vendors in the past."

"It is not expensive, and it is also not cheap. iboss is priced right in the sweet spot for the number of features it offers."

"The overall pricing for iboss is very competitive and transparent."

"It is probably in line with other solutions, but I do not deal with the financial side."

"We had the cost of purchasing a new appliance along with the implementation and licensing costs. However, the following year, the cost of just licensing was similar to what was paid the previous year for a new appliance along with the implementation and licensing costs."

"Price-wise, Fortinet FortiProxy is moderate - not the highest among competitors, but not cheap either."

"It can be considered expensive, with a limited lifespan and support that eventually requires updating to newer solutions."

"It offers a more cost-effective solution than alternatives like FortiMail, FortiGate, and various Barracuda devices."

"It is a cost-effective solution."

"The solution is neither too expensive nor very cheap."

"The tool's pricing is in the middle."

"Actually the solution is very expensive. I don't know the particulars since the purchasing team dealt with it."

"Prisma is in the middle of the road. It's not the most expensive, but it's not the cheapest. There aren't any additional costs, to my knowledge. I know they have some extra modules, but we didn't use them."

"Prisma Access is one of the best compared to other products on the market. The cost is favorable, and Palo Alto provides a simple architecture, so I recommend the solution to anyone using a different product. There are no hidden costs besides the license; what you see is what you get."

"The pricing can be difficult because it came to us with another agreement, but it can be negotiated. I highly recommend people to compare this product's performance and pricing against BetterCloud, because I feel BetterCloud is better than Prisma SaaS if they're starting from scratch."

"Palo Alto is the Cadillac solution, so their products are pretty expensive. That's just the way it is. Their solution surpasses anything else. Cisco AnyConnect, Zscaler, and all of the other products don't compare. Palo Alto is the market leader with the most features. It saves you work, and you don't have to worry about it."

"The licensing cost is about 18,000 euros."

"The price has been good for the ROI during these difficult times for the cruise industry. There are no hidden costs; what the product offers is what you get."

"It is a little expensive. Because it is one of the best in the market, it is a little bit more expensive than other vendors."

More Prisma Access by Palo Alto Networks pricing and cost advice

See which vendors are best for you

Use our free recommendation engine to learn which Secure Web Gateways (SWG) solutions are best for your needs.

See recommendations

881,757 professionals have used our research since 2012.

Top Industries

By visitors reading reviews

Financial Services Firm

11%

Computer Software Company

10%

Manufacturing Company

Comms Service Provider

Computer Software Company

14%

Financial Services Firm

13%

Manufacturing Company

Government

Financial Services Firm

11%

Manufacturing Company

11%

Computer Software Company

10%

Government

Company Size

By reviewers

Large Enterprise

Midsize Enterprise

Small Business

By reviewers
Company Size	Count
Small Business	6
Midsize Enterprise	6
Large Enterprise	5

By reviewers
Company Size	Count
Small Business	7
Midsize Enterprise	1
Large Enterprise	3

By reviewers
Company Size	Count
Small Business	24
Midsize Enterprise	21
Large Enterprise	27

Questions from the Community

What needs improvement with iboss?

For zero trust implementation, we encountered complexity issues, especially with a large infrastructure company Exxon...

See all answers

What is your primary use case for iboss?

Previously when I used iboss, we did the POC for iboss for ExxonMobil. Four or five people wanted to move from our ol...

See all answers

What is your experience regarding pricing and costs for iboss?

Regarding pricing, setup costs, and licensing, iboss is not cheap, and that's my only concern. There are cheaper alte...

See all answers

What needs improvement with Fortinet FortiProxy?

For me it may be the wildcards for urls whitelist or blacklist, somehow the page loads. Aside from that there no other..

See all answers

What advice do you have for others considering Fortinet FortiProxy?

My advice to others who are considering Fortinet FortiProxy is that it is seamless, easy to use, and quite straightfo...

See all answers

What is your experience regarding pricing and costs for Fortinet FortiProxy?

Fortinet FortiProxy is much cheaper compared to other products like Cisco, Palo Alto, and others. It is reasonably pr...

See all answers

What is the better solution - Prisma Access or Zscaler Private Access?

We looked into Prisma Access before choosing Zscaler Private Access (ZPA). Palo Alto’s Prisma Access is a secure ac...

See all answers

What do you like most about Prisma Access by Palo Alto Networks?

The most valuable features of the solution are in the areas of the secure remote access it provides while also being ...

See all answers

What is your experience regarding pricing and costs for Prisma Access by Palo Alto Networks?

From my experience, Palo Alto is more expensive compared to solutions like Netskope and Triscale.

See all answers

Comparisons

Netskope vs iboss

Compared 12% of the time

FortiSASE vs iboss

Compared 8% of the time

Cisco Umbrella vs iboss

Compared 7% of the time

Zscaler Internet Access vs iboss

Compared 6% of the time

Fortinet FortiGate vs iboss

Compared 6% of the time

More iboss Competitors

Fortinet FortiGate vs Fortinet FortiProxy

Compared 34% of the time

Forcepoint Secure Web Gateway vs Fortinet FortiProxy

Compared 9% of the time

Blue Coat Secure Web Gateway Virtual Appliance vs Fortinet FortiProxy

Compared 6% of the time

Zscaler Internet Access vs Fortinet FortiProxy

Compared 6% of the time

F5 BIG-IP Access Policy Manager (APM) vs Fortinet FortiProxy

Compared 6% of the time

More Fortinet FortiProxy Competitors

Netskope vs Prisma Access by Palo Alto Networks

Compared 13% of the time

Zscaler Internet Access vs Prisma Access by Palo Alto Networks

Compared 9% of the time

FortiSASE vs Prisma Access by Palo Alto Networks

Compared 9% of the time

Cato SASE Cloud Platform vs Prisma Access by Palo Alto Networks

Compared 6% of the time

More Prisma Access by Palo Alto Networks Competitors

Product Reports

Buyer's Guide

iboss

January 2026

Download iboss product report

Buyer's Guide

Fortinet FortiProxy

February 2026

Download Fortinet FortiProxy product report

Buyer's Guide

Prisma Access by Palo Alto Networks

January 2026

Prisma Access by Palo Alto Networks report

Download Prisma Access by Palo Alto Networks product report

Also Known As

iBoss Cloud Platform

FortiProxy

Palo Alto Networks Prisma Access, Prisma Access, GlobalProtect, Palo Alto GlobalProtect Mobile Security Manager, Prisma SaaS by Palo Alto Networks, Prisma Access

Overview

Iboss offers a comprehensive cloud-based security platform valued for its scalability and autonomous features, ensuring robust security with easy deployment and management capabilities.

Renowned for its robust security architecture, Iboss integrates seamlessly within diverse networks, delivering efficient granular filtering and advanced content categorization. Its single pane of glass console provides ease of management, allowing rapid scalability suitable for rapidly deploying environments. Operates in BYOD setups due to inline filtering without device installation. Integration with cloud-based applications enhances user control, and features like SASE, SSL inspection, and ChatGPT risk protection stand as highlights. Despite its strengths, users have pointed out areas for enhancement like direct navigation in reports, SSL decryption, and better cloud integration while having room to improve data loss prevention.

What are the most important features of Iboss?

Scalability: Supports rapid deployment across diverse networks.
SASE: A consolidated approach to secure access.
SSL Inspection: Ensures safe data transmission.
Granular Filtering: Detailed control over accessible content.
Single Pane Management: Unifies control through a centralized console.

What benefits should users consider in reviews?

Cost-effectiveness: Offers competitive pricing with robust features.
Autonomous Operation: Reduces management overhead.
Responsive Support: Provides assistance when needed.
Flexible Deployment: Available for both cloud and on-premises environments.

The usage of Iboss spans educational institutions, specifically K-12, to enforce internet policies, protect data, and support remote work environments. It provides web filtering and security frameworks to ensure safe browsing. Its platform-as-a-service model offers flexibility for both cloud-based and on-premises requirements, integrating seamlessly to deliver enhanced security features suitable for various deployment needs including zero trust, CASB, and network security for work-from-home setups.

iboss

Fortinet FortiProxy is a secure web gateway that provides advanced web filtering, malware protection, and SSL inspection capabilities. It is designed to protect organizations from web-based threats and prevent data loss by enforcing granular policies for web access. FortiProxy is available as a physical or virtual appliance and can be deployed on-premises or in the cloud. FortiProxy uses a combination of signature-based and behavior-based detection techniques to identify and block known and unknown threats. It also includes advanced features such as sandboxing and machine learning to detect and prevent zero-day attacks. FortiProxy can inspect SSL traffic to detect and block threats hidden in encrypted traffic. FortiProxy provides granular control over web access by allowing administrators to create policies based on user identity, device type, time of day, and other factors. It also includes pre-defined categories for web filtering, such as social media, gambling, and adult content. FortiProxy can also enforce compliance with regulatory requirements such as GDPR and HIPAA. FortiProxy integrates with Fortinet's Security Fabric, allowing it to share threat intelligence with other Fortinet products and provide a coordinated response to threats. It also includes a web-based management console that provides real-time visibility into web traffic and allows administrators to quickly respond to security incidents.

Fortinet FortiProxy is a comprehensive web security solution that provides advanced protection against web-based threats and allows organizations to enforce granular policies for web access.

Fortinet

Prisma Access by Palo Alto Networks provides consistent security for all users and applications across your remote networks. Prisma Access grants users safe access to the cloud and data center applications and the internet as well. In addition, the solution combines all of your security and networking capabilities into a single cloud-delivered platform, enabling flexible hybrid workforces.

Prisma Access can be managed two ways:

Cloud Managed
Panorama Managed

Prisma Access delivers both networking and security services, including:

SD-WAN
VPN
Zero Trust network access (ZTNA)
Quality of service (QoS)
Clean Pipe
Firewall as a service (FWaaS)
DNS Security
Threat Prevention
Cloud secure web gateway (SWG)
Data loss prevention (DLP)
Cloud access security broker (CASB)

Prisma Access by Palo Alto Networks Features

Prisma Access by Palo Alto Networks has many valuable key features including: App-ID, User-ID, Device-ID, SSL Decryption, Dynamic User Group (DUG) Monitoring, AI/ML-Based Detection, IoT Security, Reporting, URL Filtering, Enterprise Data Loss Prevention (DLP), Digital Experience Monitoring (DEM)*, Logging, Policy Automation, Intrusion Prevention System (IPS), and many more.

Prisma Access by Palo Alto Networks Benefits

Some of the benefits of using Prisma Access by Palo Alto Networks include:

Security: Prisma Access gives you consistent security to protect against cyberattacks, with enforcement of policy at every location. By implementing Prisma Access, you also gain protection that works to prevent known and unknown malware, exploits, credential theft, command and control, and many other attack vectors across all ports and protocols.
Global connectivity: Prisma Access provides global coverage through use of its connectivity layer.
Scalability: With Prisma Access, scaling is automatically managed and is scalable, flexible, and agile.
Instant deployment: Deployment is fast, eliminating wasted time that may otherwise be associated with setting up a solution, operating it, or shipping hardware in order to get started.

Reviews from Real Users

Below are some reviews and helpful feedback written by Microsoft Azure Synapse Analytics

users who are currently using the solution.

PeerSpot user Partha D., Global Network Tech Lead at a computer software company, speaks about his experience using the product, saying, "It protects all app traffic so that users can gain access to all apps. Unlike other solutions that only work from ports 80 and 443, which are predominantly for web traffic, Prisma Access covers all protocols and works on all traffic patterns... The most sophisticated attacks can arise from sources that are not behind 80/443."

Tejas J., a Sr. Cloud Security Architect at a computer software company, mentions that "it is geographically dispersed, and it sits on top of Google and AWS platforms. Therefore, you don't face the standard issues, such as latency or bandwidth issues, that you usually face in the case of on-prem data centers.”

Another PeerSpot reviewer, Max I., Associate Director at Cognizant, comments that "Security is absolutely spot-on, really top-notch. It's the result of all the components that come together, such as the HIP [Host Information Profile] and components like Forcepoint, providing end-user content inspection, and antivirus. It incorporates DLP features and that's fantastic because Prisma Access makes sure that all of the essential prerequisites are in place before a user can log in or can be tunneled into."

Palo Alto Networks

Sample Customers

More than 4,000 global enterprises trust the iboss Cloud Platform to support their modern workforces, including a large number of Fortune 50 companies.

Information Not Available

Concord Hospital, State of Colorado, Essilor International, RheinLand Versicherungsgruppe, University of Westminster, Universidade Nove de Julho, SPAR Austria, CAME Group, ZipRealty, Greenhill & Co., IKT Agder, Aviva Stadium, Animal Logic, Management & Training Corporation, Brigham Young University Hawaii, School District of Chilliwack

Buyer's Guide

Fortinet FortiProxy vs. Prisma Access by Palo Alto Networks

February 2026

Free Report: Fortinet FortiProxy vs. Prisma Access by Palo Alto Networks

Find out what your peers are saying about Fortinet FortiProxy vs. Prisma Access by Palo Alto Networks and other solutions. Updated: February 2026.

DOWNLOAD NOW

881,757 professionals have used our research since 2012.

See our Fortinet FortiProxy vs. Prisma Access by Palo Alto Networks report.

See our list of best Secure Web Gateways (SWG) vendors.

We monitor all Secure Web Gateways (SWG) reviews to prevent fraudulent reviews and keep review quality high. We do not post reviews by company employees or direct competitors. We validate each review for authenticity via cross-reference with LinkedIn, and personal follow-up with the reviewer when necessary.