Cato SASE Cloud Platform vs Netskope Next Gen Secure Web Gateway comparison

Why PeerSpot?

The compared Cato Networks and Netskope solutions aren't in the same category. Cato Networks is ranked #5 in SASE , with an average rating of 9.3, and holds a 6.6% mindshare in the category. Netskope is ranked #12 in WSG , with an average rating of 10.0, and holds a 2.1% mindshare. Additionally, 100% of Cato Networks users are willing to recommend the solution, compared to 100% of Netskope users who would recommend it.

Comparison Buyer's Guide

Download the report

Executive Summary

We performed a comparison between Cato SASE Cloud Platform and Netskope Next Gen Secure Web Gateway based on real PeerSpot user reviews.

Find out what your peers are saying about Palo Alto Networks, Zscaler, Cisco and others in Secure Access Service Edge (SASE).

To learn more, read our detailed Secure Access Service Edge (SASE) Report (Updated: September 2026).

Buyer's Guide

Secure Access Service Edge (SASE)

September 2026

Download the complete report

Helped 918,957 peers since 2012

Review summaries and opinions

We asked business professionals to review the solutions they use. Here are some excerpts of what they said:

Categories and Ranking

iboss

Mindshare comparison

Secure Access Service Edge (SASE) Mindshare Distribution
Product	Mindshare (%)
Cato SASE Cloud Platform	6.6%
Prisma Access by Palo Alto Networks	10.1%
Zscaler Zero Trust Exchange Platform	8.7%
Other	74.6%

Secure Access Service Edge (SASE)

Secure Web Gateways (SWG) Mindshare Distribution
Product	Mindshare (%)
Netskope Next Gen Secure Web Gateway	2.1%
Zscaler Internet Access	9.7%
Cisco Umbrella	9.4%
Other	78.8%

Secure Web Gateways (SWG)

Featured Reviews

Ashok Ananthula

Senior Consultant Proxy Engineering at a financial services firm with 10,001+ employees

Cloud gateway has strengthened remote web security and now needs better Mac and ISP support

The problem our organization had is that iboss failed for the Mac devices. It is not able to give a successful agent for the Mac agents. That is where in 2025, we had to migrate to the Palo Alto-based platform. If your use case is for just Windows laptops,you can consider this platform as an option One issue is the data center resiliency part. In India especially, they are not tied up with the Tier 1 ISPs like Tata or Airtel; they were having Tier 2 ISPs and encountered many issues reaching few major sites that my organization depends on, and they were having problems that they could not fix quickly. They also lack a mechanism to route that traffic within their data center; rather, they ask customers to make a pac file change to route it to Singapore explicitly. It would be better if they route from their backend , i mean even if I send it to India DC, they should be able to route it internally to make that work; however, they fail to do that and ask the customer to route it in the pac file. Another suggestion is that in China, they do not have the proper setup; they used to have numerous problems with slowness and lack of premium circuits in China as well. That leads to multiple sites working slowly with latency-related issues. So the main issue is the ISP-related problems that need to be solved.

Read full review

reviewer2697738

Product & Services Integrator at a comms service provider with 10,001+ employees

Cloud security has unified global network design and has simplified threat visibility

I think all of the functionalities, such as the secure web gateway feature, are quite good. I also believe Cato SASE Cloud Platform is one of the only solutions that has not only a software firewall solution but also a physical software solution where you can change the company's firewalls and put in sockets from Cato SASE Cloud Platform, which I see as an advantage for them. The single-pass architecture has improved user experience with Cato SASE Cloud Platform as it provides security teams in companies a platform where they can easily obtain information if there are breaches or security issues. I assess the benefit of integrating WAN optimization as good. There is ease in making rules between WAN optimization, especially when it comes to global connections because of all their points of presence that are spread over the world. I think the real-time threat protection of Cato SASE Cloud Platform is also good. Their points of presence are quite efficient, and I do not see any delays in that area.

Read full review

reviewer2811576

Experto de Seguridad Informática at a financial services firm with 1,001-5,000 employees

Granular web controls have improved user-specific access and reduced security incidents

For the moment, the solution is going quite well, and I cannot think of anything specific we could improve at the moment.Perhaps in file control, the maximum size of the files that can be analyzed is a negative aspect or an improvement that I consider necessary in Netskope Next Gen Secure Web Gateway.

Read full review

Quotes from Members

We asked business professionals to review the solutions they use. Here are some excerpts of what they said:

Pros

"Deploying iboss leads to good return on investment, estimated around 70% to 80%."

"The iboss solution gives me the ability to scan the traffic through all the ports, through all the 131,000 PCP and UDP ports, and with this ability, we have the granularity also for consults over social media and applications on mobile, and this is an advantage that the customers are looking for right now."

"Granular setup, which was able to set different levels of filters using the OUs in the AD."

"The main advantage of iboss is its cloud-based security centralized policy management, which helps organizations protect users working from different locations, secure access to cloud applications, and reduce security risks."

"The console is cloud-based, which is something I really appreciate."

"We were impressed by the solution's mental health function, which can detect if someone needs help. It scans what users are browsing and flags warning signs so we can check to see if they are okay. We've had to use it a couple of times."

"iboss is easy to use despite its complexity. Multiple engineers manage it, but it's significantly more straightforward to administer than traditional VPNs and web proxies."

"The students were always protected, and the content filtering worked very well, seeming to work better than other products we had tried previously."

More iboss pros

"We appreciate the optimization and acceleration of the performance of SDP users."

"One of the advantages of Cato is that they provide a static IP from their cloud and assign it to us, and this is a service that comes with an additional cost but is cheap compared to getting it from my service provider."

"The most valuable features of Cato Networks are the always-on VPN for remote workers and centralized management. Additionally, web filtering and antivirus are good."

"The scalability is quite good."

"The product is very simple, and everything can be done very quickly."

"The feature that I find to be the most valuable is the bandwidth aggregation."

"The product is efficient and easy to use."

"Cato Networks works; I haven't had any trouble and practically forget that I'm using it."

More Cato SASE Cloud Platform pros

"The solution's CASB, DLP, and threat protection features are very good."

"One of the valuable features of the solution is that everything is on the cloud. It has no on-premise hardware to deal with."

"As Netskope is a cloud-based application, it is possible to analyze and distinguish personal and enterprise instances."

"There are a lot of features, but the groups that are created for the policy groups available with Netskope are already relevant to any industry. So grouping the policies is the easiest part and a valuable feature."

"The solution offers good security functionality."

"The most valuable features of the solution are its three modules, which are SWG, ZTNA, and CASB."

"The ROI is in the security I'm getting for my users, which is also beneficial for me."

"So far, the solution has been excellent."

More Netskope Next Gen Secure Web Gateway pros

Cons

"Sometimes when you call in support, you get someone who is just following a sheet. It feels like a runaround. You feel that you are running into that support wall."

"Iboss is growing so fast that it is often hard for them to keep up with the challenges."

"The reporting feature needs improvement."

"I am currently doing a PoC of the zero trust aspect of it. Compared to other similar solutions, it is hard to get around each feature. It takes a while to get used to it."

"I have heard they are doing DDoS filtering, but I am not certain if they are implementing it correctly."

"I appreciate that iboss's single pane of glass console gives centralized visibility into web traffic, user activity, security policies, and alerts from one dashboard, allowing us to quickly investigate incidents and monitor policy violations without switching between multiple tools, improving operational efficiency; however, the dashboard customization and reporting could be more flexible."

"Its pricing could be better."

"The solution could be stronger on the integration side and offer more cloud applications like G Suite or Oracle."

More iboss cons

"The different languages in the user interface should be enhanced to include other languages."

"The platform lacks strong security features on the edge. All security features are on the cloud."

"There should be a Web Application Firewall feature in the product nodes."

"Its functionality is a bit limited in some areas as compared to a Cisco solution. It is not as granular. It doesn't have the manageability, feature set, and capabilities of a larger or an enterprise-level solution. It just needs a more robust feature set and granularity."

"They should add more sophisticated security features. It should also be integrated into the cloud."

"For a packaged solution, needing external intervention or a system integrator to get other features not offered by Cato Networks could be an area for improvement. Cato Networks does what it's meant to do and is even overstretching capabilities when introducing new features. The product can only have very few features added on top of what its currently doing. Managed service providers can deliver the extra features you'd need. It's a set of managed services, and what Cato Networks does is very comprehensive. So, for the time being, when the actual incarnation of the SASE solution is deployed, Cato Networks is a very effective product. Naturally, technology will evolve, so everybody knows that in three, four, or five years, there will be a new kid on the block, a new game. Still, at the moment, Cato Networks only needs to improve a little regarding SASE delivery. The product is doing very well, but one feature the Cato Networks team is doing right is preparing for the future through deploying the SSE 360, so the security service is at that edge. It's an excellent strategy to prepare for the future. SSE 360 is what Cato Networks should invest in the most to keep prospering."

"Cato Networks could improve their intrusion detection. There is not a lot in place."

"There's no principal in Malaysia, only a distributor."

More Cato SASE Cloud Platform cons

"They should work on marketing material to put out their work with a little more effort."

"The solution needs to improve its on-premise detection technique."

"Improvement in the solution is required in certain areas where the product does not provide access to its direct end users, who use the portal as an administrator."

"The solution lacks a good reporting feature."

"The initial setup is a bit complex in that it takes a lot of time. In order to get the product to work as you need it to, there is a lot of configuration required."

"The initial setup and implementation are not straightforward."

"There is room for improvement in streamlining policies. So what happens is that when you apply a specific Netskope policy, you never know the kind of content it will automatically block, or it will allow."

"Netskope provides vigorous policy enforcement for SaaS platforms based on how we configure it, but its vulnerability management and threat intelligence capabilities could be stronger."

More Netskope Next Gen Secure Web Gateway cons

Pricing and Cost Advice

"We have not priced the solution recently, but they were competitive with other vendors in the past."

"We had the cost of purchasing a new appliance along with the implementation and licensing costs. However, the following year, the cost of just licensing was similar to what was paid the previous year for a new appliance along with the implementation and licensing costs."

"The overall pricing for iboss is very competitive and transparent."

"It is not expensive, and it is also not cheap. iboss is priced right in the sweet spot for the number of features it offers."

"It is probably in line with other solutions, but I do not deal with the financial side."

"It is expensive compared to one of its competitors."

"The solution's pricing is flexible."

"The pricing of this solution depends on what you need. It is based on bandwidth."

"I rate the price of Cato Networks a four out of five."

"The product is very competitively priced, and that's compelling. They don't charge the customer based on the operational cost like other brands such as Palo Alto. Cato has its own fully-fledged cloud, with their own data centers, equipment, and so on, which is an advantage. I rate the solution five out of five for affordability."

"You pay yearly based on the speed of your network. If you increase the speed of your network, you increase the cost for your throughput. It is by bandwidth for the most part and then licenses for VPN. There is some per-seat licensing for VPN access, but the majority of it is minimal. It is like $30 a year per client. The rest is based on how much bandwidth you'll use. You pay for that upfront for the year, and if you have to increase it, you increase it, and then they let you send more data through. There are no additional costs in addition to the standard licensing fees."

"If you compare with VeloCloud, the price is the same or even cheaper."

"The pricing of the solution depends upon the bandwidth required for different branches"

"Cato Networks seems more expensive than Cisco Meraki."

More Cato SASE Cloud Platform pricing and cost advice

"The solution's overall cost is cheaper than regular web security solutions."

"We pay a licensing fee of $10,000 on a yearly basis."

"The price is average. Because the license is user-based, you can increase it as per the user quantity."

"The product is cheap."

"The license model is based on the number of users. You have the possibility to have 10,000 users if you wish."

See which vendors are best for you

Use our free recommendation engine to learn which Secure Access Service Edge (SASE) solutions are best for your needs.

See recommendations

918,957 professionals have used our research since 2012.

Top Industries

By visitors reading reviews

Financial Services Firm

11%

Manufacturing Company

10%

Comms Service Provider

Construction Company

Manufacturing Company

14%

Comms Service Provider

10%

Financial Services Firm

Computer Software Company

Financial Services Firm

17%

Construction Company

Manufacturing Company

Outsourcing Company

Company Size

By reviewers

Large Enterprise

Midsize Enterprise

Small Business

By reviewers
Company Size	Count
Small Business	14
Midsize Enterprise	8
Large Enterprise	14

By reviewers
Company Size	Count
Small Business	16
Midsize Enterprise	7
Large Enterprise	11

By reviewers
Company Size	Count
Small Business	8
Midsize Enterprise	3
Large Enterprise	4

Questions from the Community

What needs improvement with iboss?

I think iboss could be improved by emphasizing the modular function even more during sales presentations and demonstr...

See all answers

What is your primary use case for iboss?

iboss is primarily used for content filtering within school districts and public K-12 school districts, and it can al...

See all answers

What is your experience regarding pricing and costs for iboss?

The pricing and licensing for iboss were reasonable for the security features. The setup costs were manageable, thoug...

See all answers

What is your primary use case for Cato Networks?

I can see that I am a consultant at a reseller and I am the architect of Cato SASE Cloud Platform designs. In the bas...

See all answers

What advice do you have for others considering Cato Networks?

It is difficult to find types of companies I would not recommend Cato SASE Cloud Platform to, and I believe you can u...

See all answers

What is your experience regarding pricing and costs for Cato Networks?

I do not find it particularly expensive, but for some companies, they may not have the budget to be at that level of ...

See all answers

Which lesser known firewall product has the best chance at unseating the market leaders?

Netscope, Zscaler if they continue route they are on now. FIrewalls needs great deal of automation on each end, datac...

See all answers

Which lesser known firewall product has the best chance at unseating the market leaders?

Those firewalls that allow extend the perimeter. Nowadays, there is a issue with the static perimeter and all is goin...

See all answers

What needs improvement with Netskope Next Gen Secure Web Gateway?

For the moment, the solution is going quite well, and I cannot think of anything specific we could improve at the mom...

See all answers

Comparisons

Prisma Access by Palo Alto Networks vs iboss

Compared 10% of the time

Netskope vs iboss

Compared 8% of the time

Fortinet FortiGate vs iboss

Compared 7% of the time

Cisco Umbrella vs iboss

Compared 6% of the time

More iboss Competitors

Zscaler Zero Trust Exchange Platform vs Cato SASE Cloud Platform

Compared 6% of the time

Prisma Access by Palo Alto Networks vs Cato SASE Cloud Platform

Compared 6% of the time

Fortinet FortiGate vs Cato SASE Cloud Platform

Compared 5% of the time

Aryaka Unified SASE Platform vs Cato SASE Cloud Platform

Compared 5% of the time

Cloudflare One vs Cato SASE Cloud Platform

Compared 5% of the time

More Cato SASE Cloud Platform Competitors

Prisma Access by Palo Alto Networks vs Netskope Next Gen Secure Web Gateway

Compared 14% of the time

Menlo Secure vs Netskope Next Gen Secure Web Gateway

Compared 13% of the time

Fortinet FortiGate vs Netskope Next Gen Secure Web Gateway

Compared 9% of the time

dope.swg vs Netskope Next Gen Secure Web Gateway

Compared 6% of the time

Skyhigh Security vs Netskope Next Gen Secure Web Gateway

Compared 4% of the time

More Netskope Next Gen Secure Web Gateway Competitors

Product Reports

Buyer's Guide

iboss

October 2026

Download iboss product report

Buyer's Guide

Cato SASE Cloud Platform

October 2026

Download Cato SASE Cloud Platform product report

Buyer's Guide

Netskope Next Gen Secure Web Gateway

October 2026

Netskope Next Gen Secure Web Gateway report

Download Netskope Next Gen Secure Web Gateway product report

Also Known As

iBoss Cloud Platform

Cato Networks

No data available

Overview

iboss is the Zero Trust SASE platform that gives organizations complete visibility and governance over their AI, data, and applications through one unified platform, one console, one policy engine, and one data lake.

Your endpoints may already stop malware. Your data and application activity can still be invisible. iboss decrypts and understands every connection, then turns that signal into answers security leaders can act on.

The platform leads with three capabilities in this order: AI Security and Visibility, Data Security and Visibility, and App Visibility and Control. Zero Trust Network Access, VPN replacement, and SD-WAN sit underneath as the access fabric that carries those three. Trusted by global enterprises and government agencies.

What are the most important features of Iboss?

- AI Security and Visibility: conversation capture, shadow-AI discovery, AI DLP, and agent governance across Claude, Co-Work, ChatGPT, Gemini, and Grok, and emerging services.

- Data Security and Visibility: full SSL/TLS decryption, deep content inspection, MIP label compliance, and one-click compliance reporting.

- App Visibility and Control: signatureless CASB, dual risk scoring, in-app controls, and SSPM for major SaaS.

- Containerized Zero Trust SASE: dedicated containers, isolated SSL keys, one console, one policy engine, one data lake.

- Access fabric: ZTNA, VPN replacement, and SD-WAN under the same platform.

What benefits should users consider in reviews?

- Complete visibility over AI, data, and applications from one platform instead of separate point tools.

- Encrypted traffic is inspected by default so data decisions use content and context together.

- Shadow SaaS and new web tools appear as they are used, with enforceable controls in one console.

- Native data sovereignty through dedicated containers, in-region inspection, and per-customer SSL key custody.

- Scale proven in published materials: 10M+ users, 100+ countries, 150B+ transactions, 2.5B+ threats blocked.

Economic buyers are CISOs, CIOs, and VPs of Security. Champions include security architects, network and infrastructure leaders, SecOps, and GRC. Primary segments: enterprise and business, financial services, government (including FedRAMP Gov Cloud), healthcare, manufacturing, legal and professional services, retail and hospitality, and MSP/MSSP partners. Education, including K-12, is one vertical among these.

iboss

Cato SASE Cloud Platform delivers a comprehensive approach to network security and connectivity, integrating SASE, CASB, and zero-trust network access for improved performance and scalability in diverse locations.

Cato SASE Cloud Platform offers robust security solutions, including a next-gen firewall and VPN support. It provides a unified management system that is easy to use and integrates seamlessly with existing infrastructures. The platform's self-healing model ensures real-time threat mitigation, enhancing connectivity and performance even in challenging locations. Users appreciate the platform's scalability, integration capabilities, and significant cost savings. However, there is room for improvement in security, network integration, feature enhancement, and affordability to better support larger enterprises and improve user experience.

What are the essential features of Cato SASE Cloud Platform?

SASE: Integrates security and networking functions for seamless performance.
CASB: Provides secure access to cloud applications.
Zero-trust Network Access: Offers secure and direct access without the need for traditional VPNs.
Unified Management: Centralizes control for ease of use and improved efficiency.
Next-Gen Firewall: Robust protection against diverse threats with advanced firewall capabilities.

What benefits or ROI can users expect?

Scalability: Easily adapts to growing organizational needs.
Cost Savings: Reduces expenses through efficient integration and operations.
Operational Efficiency: Streamlined processes save time and resources.
Responsive Support: Quick access to help when needed enhances user satisfaction.

Organizations in sectors like finance, telecommunications, and construction use Cato SASE Cloud Platform for enhanced network security and global connectivity. It effectively replaces MPLS with a cloud-native SD-WAN, integrates security measures for public clouds, and provides centralized management. Its implementation supports a zero-trust model, redundancy, and ISP integration, ensuring scalable remote access and improved security measures.

Cato Networks

Netskope Next Gen Secure Web Gateway delivers advanced web security with features like malware control, DLP, and swift connectivity. With cloud-native operations, it enhances security without on-premise hardware.

Organizations leveraging Netskope Next Gen Secure Web Gateway benefit from its ease of policy management, swift connections, and consolidation of technologies. The gateway ensures robust security with features such as CASB, URL filtering, threat prevention, and sandboxing. Its operations are cloud-native, eliminating the need for on-premise hardware, and it integrates effectively with IAM and PAM systems. Broad SaaS coverage and an emphasis on architectural governance enhance web activity security and visibility. While there is room to improve file control, IoT functionality, and endpoint features, it remains a trusted option for safe web browsing, filtering, and security through advanced policy controls and prevention methods.

What are the key features of Netskope Next Gen Secure Web Gateway?

Policy Ease: Simplifies managing security policies for diverse web applications.
Swift Connections: Ensures fast and secure internet connections for uninterrupted workflow.
Malware Control: Provides robust protection against malware with comprehensive control features.
Data Loss Prevention (DLP): Prevents data breaches through effective monitoring and management.
Cloud-Native Operations: Operates fully in the cloud, eliminating the need for physical hardware.
CASB Integration: Offers seamless integration with Cloud Access Security Broker for enhanced security.
Threat Prevention: Detects and prevents potential online threats effectively.

What benefits and ROI should be considered when evaluating Netskope Next Gen Secure Web Gateway?

Security Enhancement: Provides increased security through advanced threat prevention and control tools.
Cost Efficiency: Reduces the need for on-premise hardware, lowering total cost of ownership.
Operational Efficiency: Enhances operational workflow with faster and more secure internet connections.
Comprehensive Integration: Integrates seamlessly with existing IAM and PAM systems, facilitating ease of use.
Actionable Insights: Offers detailed reporting and analytics for informed decision-making.

Netskope Next Gen Secure Web Gateway is widely implemented across industries for secure internet navigation, application control, and threat prevention. Enterprises use it to prevent shadow IT, manage SaaS traffic, and enforce governance according to specific industry regulations, ensuring security and compliance.

Netskope

Sample Customers

Trusted by global enterprises and government agencies.

Paysafe, AdRoll, Pet Lovers Centre, Arlington Orthopedics, Humphreys & Partners Architects

Arrow, Cloudrise, Sainsbury, Evalueserve, Stroock, Apria, Ather Energy, CSA, AVX Corporation Nuna, City of San Diego Case, Genomic Health Case Study, Oak Hill Advisors, MaRS Discovery District.

Buyer's Guide

Secure Access Service Edge (SASE)

September 2026

Download Free Report

Find out what your peers are saying about Palo Alto Networks, Zscaler, Cisco and others in Secure Access Service Edge (SASE). Updated: September 2026.

DOWNLOAD NOW

918,957 professionals have used our research since 2012.

We monitor all Secure Access Service Edge (SASE) reviews to prevent fraudulent reviews and keep review quality high. We do not post reviews by company employees or direct competitors. We validate each review for authenticity via cross-reference with LinkedIn, and personal follow-up with the reviewer when necessary.