Try our new research platform with insights from 80,000+ expert users

Prisma Access by Palo Alto Networks vs Sangfor SSL VPN comparison

 

Comparison Buyer's Guide

Executive SummaryUpdated on Aug 6, 2024

Review summaries and opinions

We asked business professionals to review the solutions they use. Here are some excerpts of what they said:
 

Categories and Ranking

Prisma Access by Palo Alto ...
Ranking in Enterprise Infrastructure VPN
5th
Average Rating
8.2
Reviews Sentiment
6.9
Number of Reviews
66
Ranking in other categories
Secure Web Gateways (SWG) (4th), Cloud Access Security Brokers (CASB) (1st), ZTNA as a Service (2nd), Secure Access Service Edge (SASE) (1st)
Sangfor SSL VPN
Ranking in Enterprise Infrastructure VPN
18th
Average Rating
8.6
Reviews Sentiment
7.6
Number of Reviews
6
Ranking in other categories
SSL VPN (8th)
 

Mindshare comparison

As of February 2026, in the Enterprise Infrastructure VPN category, the mindshare of Prisma Access by Palo Alto Networks is 6.0%, down from 6.4% compared to the previous year. The mindshare of Sangfor SSL VPN is 2.2%, up from 1.0% compared to the previous year. It is calculated based on PeerSpot user engagement data.
Enterprise Infrastructure VPN Market Share Distribution
ProductMarket Share (%)
Prisma Access by Palo Alto Networks6.0%
Sangfor SSL VPN2.2%
Other91.8%
Enterprise Infrastructure VPN
 

Featured Reviews

IgorPinter - PeerSpot reviewer
Director at PULSEC
Zero-trust access has improved remote security and now simplifies cloud-based firewall management
Regarding the integration part for Prisma Access by Palo Alto Networks, the integration with identity providers is pretty much good. It is basically firewall as a service, so it performs well. I completed the integration without any issues. What Palo Alto Networks can do better for Prisma Access by Palo Alto Networks is probably to have the point of presence available in more locations. The point of presence from the Serbia region has the nearest POP in Frankfurt, which is an issue since it is your gateway—when you start browsing the internet, you go through a commercial connection in Germany. They definitely need to spread the service in other countries.
MW
IT & Statistical Officer at THQ Hospital Choubara
Easy-to-use platform with an efficient user authentication process
There is an area of improvement related to the configuration of specific numbers required for compatibility with banks in our country. The platform initially had limited numbers available for configuration, which posed a challenge as banks operate on different numbers. To address this, we had to request Sangfor Management to add the required numbers, which they later accommodated.

Quotes from Members

We asked business professionals to review the solutions they use. Here are some excerpts of what they said:
 

Pros

"It has predefined or preconfigured rules, which are getting periodically updated. They are providing continuous improvements and periodically updating all search queries that they are looking for. That is one thing that helps us to stay vigilant and focused. If we query our AWS account for any breaches or vulnerabilities with any of the cloud tests, and it alerts us based on these predefined rules. It also provides an option to configure our own rules, and based on these rules, it can query the cloud trail logs, pull the information, and trigger alerts in real-time. I haven't explored this feature much because there are multiple accounts, and we don't have enough time to explore this feature. It also provides multiple integrations. When vulnerabilities or breaches are happening, you should be aware of them immediately. It provides integration with tools such as Slack, PagerDuty so that you can get alerted as soon as the high severity stuff comes up. For example, you have a security group that has allowed public traffic on port 22. As TechOps, you should be aware of this immediately. You cannot scan each machine or look into all security groups to identify it. So, Prisma helps us and alerts us when this kind of high-priority stuff comes up. It has different statistics, analytics, and graphs for data. The description of alerts is also pretty good. They describe what are the possible causes for this and what are the solutions. From Prisma Cloud, you can directly go to the AWS account. When you click on an alert, a resource, or a resource ID, it takes you to the AWS console where you need to log in. If you are already logged in, it will take you to that instance directly, and you can fix the issue there. I have found this feature very useful."
"I would recommend Prisma Access by Palo Alto Networks as it is really good, but it would be much better if the pricing were lower so that I could provide cloud firewall services instead of physical firewalls to customers."
"Security is absolutely spot-on, really top-notch. It's the result of all the components that come together, such as the HIP [Host Information Profile] and components like Forcepoint, providing end-user content inspection, and antivirus. It incorporates DLP features and that's fantastic because Prisma Access makes sure that all of the essential prerequisites are in place before a user can log in or can be tunneled into."
"The most valuable feature is the ability to join your network and provide access through the VPN."
"Customers are quite happy with Prisma Access by Palo Alto Networks because there is less spending on technologies."
"It's very stable. Sometimes after installing the boxes, we leave them for one or two years. We would just touch the box in the case of the customer needing new requirements or changes to the setup."
"It supports auto-scaling for mobile users. It auto-scales depending on the mobile user traffic. For example, if 1,000 people are working from home today, and tomorrow, the number increases to 2,000, it is not going to be an issue."
"The most valuable features are ZTNA 2.0, CASB, Threat Prevention, and Autonomous Digital Experience Management (ADAM)."
"Sangfor SSL VPN is a secure and user-friendly solution."
"Sangfor SSL VPN provides secure encryption for communication."
"The most valuable feature is our ability to limit access by user, IP address, or MAC address."
"It is a stable solution...The initial setup of the product is very easy."
"Sangfor SSL VPN has a user-friendly user interface."
"The platform is easy to use."
 

Cons

"Palo Alto Prisma 10 came out over a year ago. Palo Alto added this identity management feature. The legacy way Palo Alto selected which user is sitting on an IP address it passes through has been clunky."
"It wasn't so satisfying to work with it. There is room for improvement in the policy management. It is difficult to cover the entire scenery through Palo Alto products."
"There should be a dedicated portal or SASE-based solution. They're trying to add a plugin but it needs a dedicated portal because it is now an enterprise solution for multiple organizations. People should be able to directly log in to a dedicated page for Prisma Access, rather than going into a Panorama plugin, and always having to update the plugin."
"We are using the SaaS offering. We use our applications for microservices. We use Twistlock to scan containers, and it displays these results in Prisma, which is a good feature because we can see vulnerabilities with respect to these containers. We can see everything in a very detailed manner. However, when you have different environments for a single application, such as DEV, QA, PROD, and TEST, all these environments run multiple containers, which can lead to a very high number of containers. In such a scenario, it shows you the alerts for all those containers that have vulnerabilities. If you show the results of all the containers that share the same image, it is not going to add any value. Therefore, they should narrow down the alerts based on a container. It should show information for a single container. Otherwise, the person who is looking at the results gets the impression that he has to fix all these issues. This is something that they can improve."
"Sometimes, we encountered a portal crash. When we told Palo Alto they said it might be the browser or cache, but I think they need to improve it on their side."
"The licensing model isn't flexible enough. It's an all-or-nothing model. Other providers in the market allow you to buy modules or add-ons separately. With Prisma Access, you have to purchase the same module for all users."
"It is a managed firewall. When you run into issues and have to troubleshoot, there is a fair amount of restriction. You run into a couple of restrictions where you don't have any visibility on what is happening on the Palo Alto managed infrastructure, and you need to get on a call to get technical assistance from Palo Alto's technical support. You have to get them to work with you to fix the problem. I would definitely like them to work on the visibility into what happens inside Palo Alto's infrastructure. It is not about getting our hands onto their infrastructure to do troubleshooting or fixing problems; it is just about getting more visibility. This will help us in guiding technical support folks to the area where they need to work."
"There can be some latency issues with the solution that should be improved."
"No solution is perfect, so there is room for improvement."
"The technical support team takes around two months to respond to queries. It is very time-consuming."
"I think Sangfor can provide a web-based SSL VPN version."
"Sangfor SSL VPN should provide advanced protection against ransomware and better data analysis."
"The solution's integration with other firewall vendors could be improved."
"In redundancy mode, when the firewall goes off, the VPN should be able to connect to the secondary firewall automatically."
 

Pricing and Cost Advice

"The solution requires a license and the technical support has extra costs. The licensing model could improve."
"Prisma is in the middle of the road. It's not the most expensive, but it's not the cheapest. There aren't any additional costs, to my knowledge. I know they have some extra modules, but we didn't use them."
"The pricing for this solution is on the higher end."
"The licensing model for this product is complicated and changes all the time, making it very hard for the user to comprehend the configuration."
"There's no reason not to buy the enterprise version that gives you unlimited PoPs, but you must understand the limitations you impose on yourself if you do that. If you go crazy, that allowlist will be too big for Kubernetes clusters."
"Compared to other products, the price is slightly high."
"Based on what I have heard from others, it is a pricey solution as compared to its peers, but I am not sure. However, considering the features that it offers, it is a break-even point. You get whatever they are promising."
"It's pricey, it's not cheap. But you get what you pay for."
"The pricing is good and the standard license allows for 30 users."
"The product is inexpensive."
"The first 30 licenses are free, and you have to purchase the rest if required."
"Sangfor SSL VPN is a cheap solution."
"My company has a three-year license for Sangfor SSL VPN."
report
Use our free recommendation engine to learn which Enterprise Infrastructure VPN solutions are best for your needs.
881,821 professionals have used our research since 2012.
 

Top Industries

By visitors reading reviews
Financial Services Firm
11%
Manufacturing Company
11%
Computer Software Company
10%
Government
5%
Computer Software Company
13%
Financial Services Firm
9%
Comms Service Provider
8%
Healthcare Company
8%
 

Company Size

By reviewers
Large Enterprise
Midsize Enterprise
Small Business
By reviewers
Company SizeCount
Small Business24
Midsize Enterprise21
Large Enterprise27
No data available
 

Questions from the Community

What is the better solution - Prisma Access or Zscaler Private Access?
We looked into Prisma Access before choosing Zscaler Private Access (ZPA). Palo Alto’s Prisma Access is a secure access service edge (SASE) designed to deliver network security in a cloud-deliver...
What do you like most about Prisma Access by Palo Alto Networks?
The most valuable features of the solution are in the areas of the secure remote access it provides while also being user-friendly.
What is your experience regarding pricing and costs for Prisma Access by Palo Alto Networks?
From my experience, Palo Alto is more expensive compared to solutions like Netskope and Triscale.
What needs improvement with Sangfor SSL VPN?
The solution's integration with other firewall vendors could be improved. Its interoperability matrices and different configurations with other vendor products also need improvements. Our client ha...
 

Also Known As

Palo Alto Networks Prisma Access, Prisma Access, GlobalProtect, Palo Alto GlobalProtect Mobile Security Manager, Prisma SaaS by Palo Alto Networks, Prisma Access
No data available
 

Overview

 

Sample Customers

Concord Hospital, State of Colorado, Essilor International, RheinLand Versicherungsgruppe, University of Westminster, Universidade Nove de Julho, SPAR Austria, CAME Group, ZipRealty, Greenhill & Co., IKT Agder, Aviva Stadium, Animal Logic, Management & Training Corporation, Brigham Young University Hawaii, School District of Chilliwack
Investcorp, Central Bancorp, Griffiths & Armour
Find out what your peers are saying about Prisma Access by Palo Alto Networks vs. Sangfor SSL VPN and other solutions. Updated: December 2025.
881,821 professionals have used our research since 2012.