Cato SASE Cloud Platform vs Netskope Next Gen Secure Web Gateway comparison

Why PeerSpot?

The compared Cato Networks and Netskope solutions aren't in the same category. Cato Networks is ranked #5 in SASE , with an average rating of 9.5, and holds a 6.8% mindshare in the category. Netskope is ranked #13 in WSG , with an average rating of 9.0, and holds a 2.1% mindshare. Additionally, 100% of Cato Networks users are willing to recommend the solution, compared to 100% of Netskope users who would recommend it.

Comparison Buyer's Guide

Download the report

Executive Summary

We performed a comparison between Cato SASE Cloud Platform and Netskope Next Gen Secure Web Gateway based on real PeerSpot user reviews.

Find out what your peers are saying about Palo Alto Networks, Zscaler, Cisco and others in Secure Access Service Edge (SASE).

To learn more, read our detailed Secure Access Service Edge (SASE) Report (Updated: September 2026).

Buyer's Guide

Secure Access Service Edge (SASE)

September 2026

Download the complete report

Helped 914,889 peers since 2012

Review summaries and opinions

We asked business professionals to review the solutions they use. Here are some excerpts of what they said:

Categories and Ranking

iboss

Mindshare comparison

Secure Access Service Edge (SASE) Mindshare Distribution
Product	Mindshare (%)
Cato SASE Cloud Platform	6.8%
Prisma Access by Palo Alto Networks	10.1%
Zscaler Zero Trust Exchange Platform	8.8%
Other	74.3%

Secure Access Service Edge (SASE)

Secure Web Gateways (SWG) Mindshare Distribution
Product	Mindshare (%)
Netskope Next Gen Secure Web Gateway	2.1%
Zscaler Internet Access	9.7%
Cisco Umbrella	9.3%
Other	78.9%

Secure Web Gateways (SWG)

Featured Reviews

Ashok Ananthula

Senior Consultant Proxy Engineering at a financial services firm with 10,001+ employees

Cloud gateway has strengthened remote web security and now needs better Mac and ISP support

The problem our organization had is that iboss failed for the Mac devices. It is not able to give a successful agent for the Mac agents. That is where in 2025, we had to migrate to the Palo Alto-based platform. If your use case is for just Windows laptops,you can consider this platform as an option One issue is the data center resiliency part. In India especially, they are not tied up with the Tier 1 ISPs like Tata or Airtel; they were having Tier 2 ISPs and encountered many issues reaching few major sites that my organization depends on, and they were having problems that they could not fix quickly. They also lack a mechanism to route that traffic within their data center; rather, they ask customers to make a pac file change to route it to Singapore explicitly. It would be better if they route from their backend , i mean even if I send it to India DC, they should be able to route it internally to make that work; however, they fail to do that and ask the customer to route it in the pac file. Another suggestion is that in China, they do not have the proper setup; they used to have numerous problems with slowness and lack of premium circuits in China as well. That leads to multiple sites working slowly with latency-related issues. So the main issue is the ISP-related problems that need to be solved.

Read full review

reviewer2697738

Product & Services Integrator at a comms service provider with 10,001+ employees

Cloud security has unified global network design and has simplified threat visibility

I think all of the functionalities, such as the secure web gateway feature, are quite good. I also believe Cato SASE Cloud Platform is one of the only solutions that has not only a software firewall solution but also a physical software solution where you can change the company's firewalls and put in sockets from Cato SASE Cloud Platform, which I see as an advantage for them. The single-pass architecture has improved user experience with Cato SASE Cloud Platform as it provides security teams in companies a platform where they can easily obtain information if there are breaches or security issues. I assess the benefit of integrating WAN optimization as good. There is ease in making rules between WAN optimization, especially when it comes to global connections because of all their points of presence that are spread over the world. I think the real-time threat protection of Cato SASE Cloud Platform is also good. Their points of presence are quite efficient, and I do not see any delays in that area.

Read full review

Btejedor Tejedor

Experto de Seguridad Informática at a financial services firm with 1,001-5,000 employees

Granular web controls have improved user-specific access and reduced security incidents

For the moment, the solution is going quite well, and I cannot think of anything specific we could improve at the moment.Perhaps in file control, the maximum size of the files that can be analyzed is a negative aspect or an improvement that I consider necessary in Netskope Next Gen Secure Web Gateway.

Read full review

Quotes from Members

We asked business professionals to review the solutions they use. Here are some excerpts of what they said:

Pros

"The console is cloud-based, which is something I really appreciate."

"Content filtering is the most useful feature of iboss."

"The iboss system is highly reliable. The false positive rates are small compared to some other systems we've experienced through other partner agencies who use competing solutions."

"iboss is among the few products providing inline filtering where no application is needed on the device. It operates on the network side and is not device-based. This feature was one of the main reasons why we stayed with them for so long."

"The solution has massively improved our security posture, giving us full visibility into what our staff does online."

"Because of iboss, I did not have to assign web filtering tasks to my techs on a daily basis."

"The security aspect of the solution, particularly the malware behind it, is excellent."

"I would definitely recommend iboss for web filtering purposes to other organizations or individuals."

More iboss pros

"The solution is a simple WAN solution. We've onboarded the socket on the Cato platform, and it provides connectivity. There is no complex routing."

"It is a stable solution...it is a scalable solution."

"It is difficult to find types of companies I would not recommend Cato SASE Cloud Platform to, and I believe you can use Cato SASE Cloud Platform in most environments, although there could be some cases where organizations are really cost-sensitive."

"Unified management and internet duplication are our most valuable features. They provide a seamless experience for end users—if one link goes down, they can still work without noticing."

"The ability for this system to handle outages on one circuit out of four meant that we didn't have any downtime because of one of our circuits going down or having a performance issue."

"The visibility control and security aspects are amazing."

"It's a cloud-based solution that integrates well with everything."

"This solution has allowed us to have more points of presence around the world, improved bandwidth across different areas, and provided data leak prevention, CASB, a better dashboard, and the ability to drill down into security problems in a few clicks."

More Cato SASE Cloud Platform pros

"So far, the solution has been excellent."

"The solution's CASB, DLP, and threat protection features are very good."

"The most valuable features of the solution are its three modules, which are SWG, ZTNA, and CASB."

"The ROI is in the security I'm getting for my users, which is also beneficial for me."

"My advice for others looking into implementing the solution it is easy to use, and it is one of the best solutions on the market."

"The solution has some useful features, such as microservices. They have sandboxing that allows the prevention, encryption, and remote browser isolation."

"There are a lot of features, but the groups that are created for the policy groups available with Netskope are already relevant to any industry. So grouping the policies is the easiest part and a valuable feature."

"As Netskope is a cloud-based application, it is possible to analyze and distinguish personal and enterprise instances."

More Netskope Next Gen Secure Web Gateway pros

Cons

"Their on-premise hardware's network interface is capped at one gigabit, which is sort of a problem. If you stand a filter up where all traffic flows through that, according to them, in order to go above a gigabit, you have to have multiple devices, which in today's IT seems a little bit silly. They could easily put in an SFP port into their device that could accommodate 10 gigs or at least offer a box."

"I'd like to see them accelerate development on the security side, particularly around data loss prevention."

"The easiest device I have set up was the Barracuda line of products."

"If they could implement an extra security layer preventing access to iboss from the open internet, it would be great."

"The endpoint-type solution is an area that needs some improvement."

"For zero trust implementation, we encountered complexity issues, especially with a large infrastructure company ExxonMobil."

"The problem our organization had is that iboss failed for the Mac devices; it is not able to give a successful agent for the Mac agents, and that is where in 2025 we had to migrate to the Palo Alto-based platform."

"I appreciate that iboss's single pane of glass console gives centralized visibility into web traffic, user activity, security policies, and alerts from one dashboard, allowing us to quickly investigate incidents and monitor policy violations without switching between multiple tools, improving operational efficiency; however, the dashboard customization and reporting could be more flexible."

More iboss cons

"They can't do one-to-one NAT (Network Address Translation) in AP (their access point), and that is something that Palo Alto can do."

"They should include a web application firewall feature in the solution."

"I'd rate Cato SASE Cloud Platform's pricing as about five or six out of ten. It's not the cheapest solution, but it is cheaper than Palo Alto and even VeloCloud."

"However, Cato's solution is modular. You don't have to buy the whole package; instead, you can start with some of the functionality and then expand it as you see fit, based on its value and as your other contracts expire."

"The solution is not cheap."

"For a packaged solution, needing external intervention or a system integrator to get other features not offered by Cato Networks could be an area for improvement."

"They should add more sophisticated security features. It should also be integrated into the cloud."

"There should be a Web Application Firewall feature in the product nodes."

More Cato SASE Cloud Platform cons

"The solution lacks a good reporting feature."

"The initial setup is a bit complex in that it takes a lot of time. In order to get the product to work as you need it to, there is a lot of configuration required."

"The solution could improve the features for Zero Trust Network Access. They should add more security components to that module."

"The stability of the solution to be very good. It is not the best and could improve but it is better than other solutions, such as Forcepoint."

"Improvement in the solution is required in certain areas where the product does not provide access to its direct end users, who use the portal as an administrator."

"Netskope Next Gen Secure Web Gateway needs to integrate IoT, which can help to control devices."

"The initial setup and implementation are not straightforward."

"Perhaps in file control, the maximum size of the files that can be analyzed is a negative aspect or an improvement that I consider necessary in Netskope Next Gen Secure Web Gateway."

More Netskope Next Gen Secure Web Gateway cons

Pricing and Cost Advice

"It is probably in line with other solutions, but I do not deal with the financial side."

"It is expensive compared to one of its competitors."

"It is not expensive, and it is also not cheap. iboss is priced right in the sweet spot for the number of features it offers."

"We had the cost of purchasing a new appliance along with the implementation and licensing costs. However, the following year, the cost of just licensing was similar to what was paid the previous year for a new appliance along with the implementation and licensing costs."

"We have not priced the solution recently, but they were competitive with other vendors in the past."

"The overall pricing for iboss is very competitive and transparent."

"You pay yearly based on the speed of your network. If you increase the speed of your network, you increase the cost for your throughput. It is by bandwidth for the most part and then licenses for VPN. There is some per-seat licensing for VPN access, but the majority of it is minimal. It is like $30 a year per client. The rest is based on how much bandwidth you'll use. You pay for that upfront for the year, and if you have to increase it, you increase it, and then they let you send more data through. There are no additional costs in addition to the standard licensing fees."

"The platform is expensive."

"The product is very competitively priced, and that's compelling. They don't charge the customer based on the operational cost like other brands such as Palo Alto. Cato has its own fully-fledged cloud, with their own data centers, equipment, and so on, which is an advantage. I rate the solution five out of five for affordability."

"Cato Networks is an expensive product, but it works out of the box, so that's the usual trade-off, make versus buy. If you decide to buy a product that doesn't require much programming, then you'd want to go for Cato Networks, which will work naturally, and immediately without any complex setup. However, the product is a little bit more expensive than the competitors. On a scale of one to five, I'd rate the pricing for Cato Networks as four."

"The solution's pricing is flexible."

"The price is not an issue for us, as it is priced more competitively than some other vendors."

"The solution has reasonable pricing. It has a yearly subscription. The pricing depends on the permit to code. Sometimes, we need to increase the permit, and the cost will automatically change. There's no fixed cost. Unless we request additional modules such as DNS security, ELP, and decent features, there will be no additional cost."

"I'd rate Cato SASE Cloud Platform's pricing as about five or six out of ten. It's not the cheapest solution, but it is cheaper than Palo Alto and even VeloCloud. We've been working with them for a while and have significant discounts. Our licensing costs vary because we keep adding sites, but it's about 280 per month per site. This includes additional features beyond the base product, starting at around 200."

More Cato SASE Cloud Platform pricing and cost advice

"The license model is based on the number of users. You have the possibility to have 10,000 users if you wish."

"The product is cheap."

"The price is average. Because the license is user-based, you can increase it as per the user quantity."

"We pay a licensing fee of $10,000 on a yearly basis."

"The solution's overall cost is cheaper than regular web security solutions."

See which vendors are best for you

Use our free recommendation engine to learn which Secure Access Service Edge (SASE) solutions are best for your needs.

See recommendations

914,889 professionals have used our research since 2012.

Top Industries

By visitors reading reviews

Financial Services Firm

11%

Manufacturing Company

10%

Comms Service Provider

Construction Company

Manufacturing Company

14%

Comms Service Provider

10%

Financial Services Firm

Computer Software Company

Financial Services Firm

17%

Construction Company

Manufacturing Company

Outsourcing Company

Company Size

By reviewers

Large Enterprise

Midsize Enterprise

Small Business

By reviewers
Company Size	Count
Small Business	12
Midsize Enterprise	7
Large Enterprise	11

By reviewers
Company Size	Count
Small Business	16
Midsize Enterprise	7
Large Enterprise	11

By reviewers
Company Size	Count
Small Business	8
Midsize Enterprise	3
Large Enterprise	4

Questions from the Community

What needs improvement with iboss?

I think iboss could be improved by making reporting and dashboard customization more flexible, and simplifying troubl...

See all answers

What is your primary use case for iboss?

I use iboss as a cloud-based secure web gateway to provide secure internet access, web filtering, and protect remote ...

See all answers

What is your experience regarding pricing and costs for iboss?

My experience with iboss's pricing structure, setup cost, and licensing model has been positive, straightforward, and...

See all answers

What is your primary use case for Cato Networks?

I can see that I am a consultant at a reseller and I am the architect of Cato SASE Cloud Platform designs. In the bas...

See all answers

What advice do you have for others considering Cato Networks?

It is difficult to find types of companies I would not recommend Cato SASE Cloud Platform to, and I believe you can u...

See all answers

What is your experience regarding pricing and costs for Cato Networks?

I do not find it particularly expensive, but for some companies, they may not have the budget to be at that level of ...

See all answers

Which lesser known firewall product has the best chance at unseating the market leaders?

Netscope, Zscaler if they continue route they are on now. FIrewalls needs great deal of automation on each end, datac...

See all answers

Which lesser known firewall product has the best chance at unseating the market leaders?

Those firewalls that allow extend the perimeter. Nowadays, there is a issue with the static perimeter and all is goin...

See all answers

What is your experience regarding pricing and costs for Netskope Next Gen Secure Web Gateway?

It is fairly priced.

See all answers

Comparisons

Prisma Access by Palo Alto Networks vs iboss

Compared 10% of the time

Netskope vs iboss

Compared 9% of the time

Fortinet FortiGate vs iboss

Compared 7% of the time

Cisco Umbrella vs iboss

Compared 6% of the time

More iboss Competitors

Zscaler Zero Trust Exchange Platform vs Cato SASE Cloud Platform

Compared 7% of the time

Prisma Access by Palo Alto Networks vs Cato SASE Cloud Platform

Compared 6% of the time

Fortinet FortiGate vs Cato SASE Cloud Platform

Compared 5% of the time

Aryaka Unified SASE Platform vs Cato SASE Cloud Platform

Compared 5% of the time

Cloudflare One vs Cato SASE Cloud Platform

Compared 5% of the time

More Cato SASE Cloud Platform Competitors

Prisma Access by Palo Alto Networks vs Netskope Next Gen Secure Web Gateway

Compared 14% of the time

Menlo Secure vs Netskope Next Gen Secure Web Gateway

Compared 12% of the time

Fortinet FortiGate vs Netskope Next Gen Secure Web Gateway

Compared 9% of the time

dope.swg vs Netskope Next Gen Secure Web Gateway

Compared 6% of the time

Prisma Access Browser vs Netskope Next Gen Secure Web Gateway

Compared 5% of the time

More Netskope Next Gen Secure Web Gateway Competitors

Product Reports

Buyer's Guide

iboss

September 2026

Download iboss product report

Buyer's Guide

Cato SASE Cloud Platform

September 2026

Download Cato SASE Cloud Platform product report

Buyer's Guide

Netskope Next Gen Secure Web Gateway

September 2026

Netskope Next Gen Secure Web Gateway report

Download Netskope Next Gen Secure Web Gateway product report

Also Known As

iBoss Cloud Platform

Cato Networks

No data available

Overview

iboss is the Zero Trust SASE platform that gives organizations complete visibility and governance over their AI, data, and applications through one unified platform, one console, one policy engine, and one data lake.

Your endpoints may already stop malware. Your data and application activity can still be invisible. iboss decrypts and understands every connection, then turns that signal into answers security leaders can act on.

The platform leads with three capabilities in this order: AI Security and Visibility, Data Security and Visibility, and App Visibility and Control. Zero Trust Network Access, VPN replacement, and SD-WAN sit underneath as the access fabric that carries those three. Trusted by global enterprises and government agencies.

What are the most important features of Iboss?

- AI Security and Visibility: conversation capture, shadow-AI discovery, AI DLP, and agent governance across Claude, Co-Work, ChatGPT, Gemini, and Grok, and emerging services.

- Data Security and Visibility: full SSL/TLS decryption, deep content inspection, MIP label compliance, and one-click compliance reporting.

- App Visibility and Control: signatureless CASB, dual risk scoring, in-app controls, and SSPM for major SaaS.

- Containerized Zero Trust SASE: dedicated containers, isolated SSL keys, one console, one policy engine, one data lake.

- Access fabric: ZTNA, VPN replacement, and SD-WAN under the same platform.

What benefits should users consider in reviews?

- Complete visibility over AI, data, and applications from one platform instead of separate point tools.

- Encrypted traffic is inspected by default so data decisions use content and context together.

- Shadow SaaS and new web tools appear as they are used, with enforceable controls in one console.

- Native data sovereignty through dedicated containers, in-region inspection, and per-customer SSL key custody.

- Scale proven in published materials: 10M+ users, 100+ countries, 150B+ transactions, 2.5B+ threats blocked.

Economic buyers are CISOs, CIOs, and VPs of Security. Champions include security architects, network and infrastructure leaders, SecOps, and GRC. Primary segments: enterprise and business, financial services, government (including FedRAMP Gov Cloud), healthcare, manufacturing, legal and professional services, retail and hospitality, and MSP/MSSP partners. Education, including K-12, is one vertical among these.

iboss

Cato SASE Cloud Platform delivers a comprehensive approach to network security and connectivity, integrating SASE, CASB, and zero-trust network access for improved performance and scalability in diverse locations.

Cato SASE Cloud Platform offers robust security solutions, including a next-gen firewall and VPN support. It provides a unified management system that is easy to use and integrates seamlessly with existing infrastructures. The platform's self-healing model ensures real-time threat mitigation, enhancing connectivity and performance even in challenging locations. Users appreciate the platform's scalability, integration capabilities, and significant cost savings. However, there is room for improvement in security, network integration, feature enhancement, and affordability to better support larger enterprises and improve user experience.

What are the essential features of Cato SASE Cloud Platform?

SASE: Integrates security and networking functions for seamless performance.
CASB: Provides secure access to cloud applications.
Zero-trust Network Access: Offers secure and direct access without the need for traditional VPNs.
Unified Management: Centralizes control for ease of use and improved efficiency.
Next-Gen Firewall: Robust protection against diverse threats with advanced firewall capabilities.

What benefits or ROI can users expect?

Scalability: Easily adapts to growing organizational needs.
Cost Savings: Reduces expenses through efficient integration and operations.
Operational Efficiency: Streamlined processes save time and resources.
Responsive Support: Quick access to help when needed enhances user satisfaction.

Organizations in sectors like finance, telecommunications, and construction use Cato SASE Cloud Platform for enhanced network security and global connectivity. It effectively replaces MPLS with a cloud-native SD-WAN, integrates security measures for public clouds, and provides centralized management. Its implementation supports a zero-trust model, redundancy, and ISP integration, ensuring scalable remote access and improved security measures.

Cato Networks

Netskope Next Gen Secure Web Gateway delivers advanced web security with features like malware control, DLP, and swift connectivity. With cloud-native operations, it enhances security without on-premise hardware.

Organizations leveraging Netskope Next Gen Secure Web Gateway benefit from its ease of policy management, swift connections, and consolidation of technologies. The gateway ensures robust security with features such as CASB, URL filtering, threat prevention, and sandboxing. Its operations are cloud-native, eliminating the need for on-premise hardware, and it integrates effectively with IAM and PAM systems. Broad SaaS coverage and an emphasis on architectural governance enhance web activity security and visibility. While there is room to improve file control, IoT functionality, and endpoint features, it remains a trusted option for safe web browsing, filtering, and security through advanced policy controls and prevention methods.

What are the key features of Netskope Next Gen Secure Web Gateway?

Policy Ease: Simplifies managing security policies for diverse web applications.
Swift Connections: Ensures fast and secure internet connections for uninterrupted workflow.
Malware Control: Provides robust protection against malware with comprehensive control features.
Data Loss Prevention (DLP): Prevents data breaches through effective monitoring and management.
Cloud-Native Operations: Operates fully in the cloud, eliminating the need for physical hardware.
CASB Integration: Offers seamless integration with Cloud Access Security Broker for enhanced security.
Threat Prevention: Detects and prevents potential online threats effectively.

What benefits and ROI should be considered when evaluating Netskope Next Gen Secure Web Gateway?

Security Enhancement: Provides increased security through advanced threat prevention and control tools.
Cost Efficiency: Reduces the need for on-premise hardware, lowering total cost of ownership.
Operational Efficiency: Enhances operational workflow with faster and more secure internet connections.
Comprehensive Integration: Integrates seamlessly with existing IAM and PAM systems, facilitating ease of use.
Actionable Insights: Offers detailed reporting and analytics for informed decision-making.

Netskope Next Gen Secure Web Gateway is widely implemented across industries for secure internet navigation, application control, and threat prevention. Enterprises use it to prevent shadow IT, manage SaaS traffic, and enforce governance according to specific industry regulations, ensuring security and compliance.

Netskope

Sample Customers

Trusted by global enterprises and government agencies.

Paysafe, AdRoll, Pet Lovers Centre, Arlington Orthopedics, Humphreys & Partners Architects

Arrow, Cloudrise, Sainsbury, Evalueserve, Stroock, Apria, Ather Energy, CSA, AVX Corporation Nuna, City of San Diego Case, Genomic Health Case Study, Oak Hill Advisors, MaRS Discovery District.

Buyer's Guide

Secure Access Service Edge (SASE)

September 2026

Download Free Report

Find out what your peers are saying about Palo Alto Networks, Zscaler, Cisco and others in Secure Access Service Edge (SASE). Updated: September 2026.

DOWNLOAD NOW

914,889 professionals have used our research since 2012.

We monitor all Secure Access Service Edge (SASE) reviews to prevent fraudulent reviews and keep review quality high. We do not post reviews by company employees or direct competitors. We validate each review for authenticity via cross-reference with LinkedIn, and personal follow-up with the reviewer when necessary.