Cisco Duo vs Zscaler Zero Trust Exchange Platform comparison

Cisco Duo vs. Zscaler Zero Trust Exchange Platform

Download the complete report

Helped 885,311 peers since 2012

Review summaries and opinions

We asked business professionals to review the solutions they use. Here are some excerpts of what they said:

Categories and Ranking

iboss

Mindshare comparison

As of March 2026, in the ZTNA as a Service category, the mindshare of iboss is 2.4%, up from 1.7% compared to the previous year. The mindshare of Cisco Duo is 2.3%, down from 2.3% compared to the previous year. The mindshare of Zscaler Zero Trust Exchange Platform is 14.8%, down from 17.7% compared to the previous year. It is calculated based on PeerSpot user engagement data.

ZTNA as a Service Mindshare Distribution
Product	Mindshare (%)
Zscaler Zero Trust Exchange Platform	14.8%
Cisco Duo	2.3%
iboss	2.4%
Other	80.5%

ZTNA as a Service

Featured Reviews

reviewer2701851

Managing Director

Enhances web security with a single pane of glass and flexible deployment

I don't see any need for improvement; one of the really good things about iboss as a company is that they listen to customer feedback. I have suggested enhancements, and they are responsive, making changes for the better, and they do a lot of testing. To improve iboss, although we haven't used it, we considered the VPN solution that comes with the highest tier licensing, which includes DLP and various other add-ons. We prefer using another product which automatically logs you back onto your network when turning on your PC. With iboss, the connection is manual, which doesn't meet our needs. Additionally, sizing can be tricky because, although the initial recommendations may seem adequate, actual usage may require more gateways than anticipated.

Read full review

Charles Slaustas

Information Technology Contractor at Insight global

Supports seamless authentication for users across multiple organizations and personal portals

The features I use in Cisco Duo include Duo Pushes to confirm my identity to the device, and eventually as MFA security was increased, I actually had to use exchange passcodes. Sometimes, I have to go into the site and get into Cisco Duo to retrieve the passcode, and many of them have been two-factor, where the sites send a passcode that I have to enter into Cisco Duo. It has been more of the latter. I have not seen issues with lagging or crashing on Cisco Duo's end; it was usually on the client end, often because someone set up a bad upgrade or there were connection issues with the Cisco Duo cloud through the administrative site.

Read full review

Vibin Thomas

Team Lead, Technical Content Security at Valuepoint Systems

Zero trust access has transformed remote connectivity and now simplifies secure app usage

Zscaler Zero Trust Exchange Platform, especially Zscaler Private Access, is very strong, though there are a few areas where improvements can be made. One challenge observed is around initial troubleshooting and visibility. While Zscaler Private Access provides logs, it can sometimes take time to pinpoint the exact cause of access issues, especially in complex environments with multiple policies and identity integration. Another area is the dependency on identity and connector health. Since Zscaler Private Access is heavily reliant on app connectors and identity providers, any issues with these components can impact user access, making proper monitoring critical. During the initial setup, policy configuration and application onboarding require careful planning, especially for larger environments with many applications. These challenges are manageable with proper design and monitoring. Overall, the platform delivers strong security and user experience. I would recommend a few improvements, especially around user interface, reporting, and troubleshooting experience. From a user interface perspective, while the platform is powerful, the policy configuration and navigation can feel complex, especially for new users. A more simplified and intuitive layout for policy mapping and application access would help reduce the learning curve. In terms of reporting, Zscaler Private Access provides logs, but having more built-in customizable dashboards and analytics would be very helpful. Better visibility into user access patterns, application performance, and real-time troubleshooting insights would improve operational efficiency. From a support and troubleshooting standpoint, it would be beneficial to have more granular centralized visibility, allowing for quick end-to-end tracing of a user request from authentication to application access without switching between multiple views. These improvements would make the platform even more efficient, especially for large-scale enterprise environments.

Read full review

Quotes from Members

We asked business professionals to review the solutions they use. Here are some excerpts of what they said:

Pros

"Granular setup, which was able to set different levels of filters using the OUs in the AD."

"We chose iboss for both zero trust and proxy (SWG) because their SWG was superior."

"Its initial setup was straightforward."

"The security aspect of the solution, particularly the malware behind it, is excellent. That's something that really helped us out. It's not just a simple proxy that just blocks the insights of potential threats that come on behind it. They do malware detection and that helps us a lot."

"iboss has significantly lowered the number of security incidents. It is crazy how much it blocks and how much it is aware of the outside danger."

"From a use-case scenario, what I like the most is the plug-in. I like the fact that we can do the filtering of these devices offsite independent of the network they are connected to, and we do not have to have traffic coming back inside our network."

"Technical support is pretty sharp and very responsive."

"The iboss system is highly reliable. The false positive rates are small compared to some other systems we've experienced through other partner agencies who use competing solutions."

More iboss pros

"Cisco Duo is very user-friendly."

"Duo Security provides a high level of certainty regarding the identity of the individual performing an action. Whether it's logging into a system, using VPN, or utilizing Autopay, establishing that trust is crucial. I can't imagine any security company, organization, or IT team that wouldn't prioritize having multifactor authentication enabled when accessing critical systems."

"The features of Cisco Duo have benefited my organization because it's secure, provides a way of accessing the workspace, and it's easy to operate from mobile."

"Overall, it provides functionality and security with the two-factor authentication, enabling us to mitigate rogue access requests to our network and giving our workers the ability to work hybridly and tackle day-to-day jobs securely without having to come into the office."

"The ease of deploying Cisco Duo Security and onboarding has greatly benefited our customers."

"If you have to log in to something, you must go to Duo Security to confirm that you're who you are on your phone."

"We get fewer threats to remediate due to the two-factor authentication, which does not allow as many threats through."

"The feature of Cisco Duo that I appreciate most is the push notifications."

More Cisco Duo pros

"Users get direct secure access to applications over the internet."

"The UI is easy to use."

"The most valuable features are the File Type Control and SSL bypass policies. We"

"The solution is cloud-based with the latest inspection engines, which I find to be amazing."

"The most valuable feature of Zscaler Private Access is the categorization of the dynamic URLs which keeps the customer's environment protected. The threats and the malware are correctly categorized."

"The solution is the best for storage."

"This is a very good and stable solution that has all the requirements for your security solutions."

"The only advantage I see is no more connection is required by the users."

More Zscaler Zero Trust Exchange Platform pros

Cons

"Their on-premise hardware's network interface is capped at one gigabit, which is sort of a problem. If you stand a filter up where all traffic flows through that, according to them, in order to go above a gigabit, you have to have multiple devices, which in today's IT seems a little bit silly. They could easily put in an SFP port into their device that could accommodate 10 gigs or at least offer a box."

"The area I would like to see improvement in is the ability within the reporter to navigate directly to the content the user is traversing."

"Sometimes the agent stops working in iboss, and we have to reinstall the agent."

"Our iboss subscription access should be more secure with an OTP or VPN etc. It is easy to gain access if, for example, hackers obtain my username and password."

"Our biggest problem with their service was it did not recognize the device and filtering did not always work correctly."

"The solution could be stronger on the integration side and offer more cloud applications like G Suite or Oracle."

"SSL decryption: We had issues with learners using apps instead of using web browsers."

"Our biggest problem with their service was it did not recognize the device and filtering did not always work correctly."

More iboss cons

"There might be a little slowness, but that could be my connection."

"When we try to sell Cisco Duo for any license, sometimes customers approach us and say that Cisco Duo is expensive compared to competitors or that the features are not as good."

"Improving Cisco Duo might involve alerting us about telephony credits when people receive texts. We hit zero at one point, and we were running around in circles without any idea until I discovered it. That's my only complaint."

"Cisco Duo could be improved by building the agent with the many agents we already use, such as Cisco AMP and Cisco Secure Client, which would simplify our environment by eliminating the need for a third agent for secure applications."

"Compared to other vendors, Cisco Duo is on the pricey end."

"The only thing I can think of to improve for tech support is to have a dedicated engineer but then I would get an engineer that has priorities in one area or another and maybe not the scope I need."

"General announcements when new features come out with Cisco Duo should be broadcasted to customers who are using it, which might bring more accessibility to their documents so users can be more in tune with updates."

"Cisco Duo is stable, but occasionally there are emails about incidents that affect some services temporarily."

More Cisco Duo cons

"There is some issue while accessing the portal. It takes too long."

"It's an expensive solution."

"More on-prem infrastructure is required when Zscaler Private Access is to be implemented as a single point of entry."

"What could be improved in Zscaler Private Access is its notification. For example, if there's a speed issue, there should be a pop-up that alerts the user about it. If there is a network quality issue, for example, it isn't good enough to connect to, or the network quality is bad, there should be a notification from the solution. Zscaler Private Access also needs improvement in terms of its interface and security."

"Sometimes, support takes time since the solution has some bugs that need fixing."

"The stability could be improved."

"There aren't really any missing features that I have witnessed."

"On a scale from one to ten, I would rate Zscaler Private Access at only a three or four."

More Zscaler Zero Trust Exchange Platform cons

Pricing and Cost Advice

"We had the cost of purchasing a new appliance along with the implementation and licensing costs. However, the following year, the cost of just licensing was similar to what was paid the previous year for a new appliance along with the implementation and licensing costs."

"It is expensive compared to one of its competitors."

"We have not priced the solution recently, but they were competitive with other vendors in the past."

"It is probably in line with other solutions, but I do not deal with the financial side."

"The overall pricing for iboss is very competitive and transparent."

"It is not expensive, and it is also not cheap. iboss is priced right in the sweet spot for the number of features it offers."

"Our licensing fee is currently on an annual basis."

"Cisco's licensing is always a bit complicated to understand, but the price is fair. It could be more expensive than others, but the way they integrate everything, it has a fair price."

"My experience with the pricing, setup cost, and licensing of Cisco Duo has been great. We've been there for 10 years. While we haven't gone through the setup part for a while, licensing is straightforward and convenient for higher education because student populations are included. So, we don't have to pay extra for it. We just pay for our knowledge workers, which has been great, and the cost is reasonable."

"The pricing is pretty competitive. It's pretty cheap. Anybody can adopt it."

"I rate the product pricing a seven out of ten."

"Price-wise, the solution has been very, very reasonable...Licensing is the last thing I think about Duo Security because it's so easy, and I had no problems with it."

"The cost was reasonable. Licensing was pretty straightforward for a change."

"Overall, the pricing is fair. Customers can wrap it into their Enterprise Agreement, making it easier for them to solve their issues."

More Cisco Duo pricing and cost advice

"It is an auto-renewal subscription service."

"It's expensive currently. But when purchasing for a large number of users, there's room to negotiate. It's really up to the procurement team."

"Zscaler SASE software is quite expensive compared to other solutions"

"The cost is expensive. It depends on the number of users."

"Zscaler DLP solution is expensive, with a fixed pricing structure that is billed annually and monthly. There are no additional costs for licenses."

"The price is competitive."

"In the long run, cloud services are not inherently costly."

"It has been relatively reasonable for what it does. Some of the additional license costs based on the advanced next-generation firewall functions are quite high, and they should have certain features ready and available as a baseline rather than having to purchase additional licenses for it. Overall, the cost seems reasonable."

More Zscaler Zero Trust Exchange Platform pricing and cost advice

See which vendors are best for you

Use our free recommendation engine to learn which ZTNA as a Service solutions are best for your needs.

See recommendations

885,311 professionals have used our research since 2012.

Top Industries

By visitors reading reviews

Financial Services Firm

11%

Computer Software Company

Manufacturing Company

Construction Company

Manufacturing Company

10%

Financial Services Firm

Comms Service Provider

Computer Software Company

Financial Services Firm

12%

Manufacturing Company

10%

Computer Software Company

10%

Insurance Company

Company Size

By reviewers

Large Enterprise

Midsize Enterprise

Small Business

By reviewers
Company Size	Count
Small Business	6
Midsize Enterprise	6
Large Enterprise	6

By reviewers
Company Size	Count
Small Business	41
Midsize Enterprise	24
Large Enterprise	54

By reviewers
Company Size	Count
Small Business	16
Midsize Enterprise	12
Large Enterprise	43

Questions from the Community

What needs improvement with iboss?

For zero trust implementation, we encountered complexity issues, especially with a large infrastructure company Exxon...

What is your primary use case for iboss?

Previously when I used iboss, we did the POC for iboss for ExxonMobil. Four or five people wanted to move from our ol...

What is your experience regarding pricing and costs for iboss?

Regarding pricing, setup costs, and licensing, iboss is not cheap, and that's my only concern. There are cheaper alte...

How does Duo Security compare with Microsoft Authenticator?

We switched to Duo Security for identity verification. We’d been using a competitor but got the chance to evaluate Du...

What is your experience regarding pricing and costs for Duo Security?

I cannot speak to the financial planning of the organization, but I can confirm that Cisco Duo falls within the secur...

What needs improvement with Duo Security?

Areas that have room for improvement in Cisco Duo include pricing, as Cisco is quite expensive, and the fact that Cis...

What is the better solution - Prisma Access or Zscaler Private Access?

We looked into Prisma Access before choosing Zscaler Private Access (ZPA). Palo Alto’s Prisma Access is a secure ac...

What do you like most about Zscaler SASE?

The most valuable features of Zscaler Private Access are reliability, scalability, and availability.

What needs improvement with Zscaler SASE?

The solution needs to improve a lot of aspects.

Prisma Access by Palo Alto Networks vs iboss

Comparisons

Netskope vs iboss

Compared 10% of the time

Compared 8% of the time

Fortinet FortiGate vs iboss

Compared 7% of the time

FortiSASE vs iboss

Compared 7% of the time

Check Point Harmony SASE (formerly Perimeter 81) vs iboss

Compared 4% of the time

More iboss Competitors

Microsoft Entra ID vs Cisco Duo

Compared 9% of the time

Fortinet FortiAuthenticator vs Cisco Duo

Compared 7% of the time

Fortinet FortiToken vs Cisco Duo

Compared 4% of the time

Yubico YubiKey vs Cisco Duo

Compared 4% of the time

RSA Authentication Manager vs Cisco Duo

Compared 3% of the time

More Cisco Duo Competitors

Cato SASE Cloud Platform vs Zscaler Zero Trust Exchange Platform

Compared 8% of the time

Prisma Access by Palo Alto Networks vs Zscaler Zero Trust Exchange Platform

Compared 4% of the time

FortiSASE vs Zscaler Zero Trust Exchange Platform

Compared 4% of the time

Check Point Harmony SASE (formerly Perimeter 81) vs Zscaler Zero Trust Exchange Platform

Compared 4% of the time

Cloudflare One vs Zscaler Zero Trust Exchange Platform

Compared 4% of the time

More Zscaler Zero Trust Exchange Platform Competitors

Product Reports

iboss

Download iboss product report

Cisco Duo

Download Cisco Duo product report

Zscaler Zero Trust Exchange Platform

Download Zscaler Zero Trust Exchange Platform product report

Zscaler Zero Trust Exchange Platform report

Also Known As

iBoss Cloud Platform

Duo Security

Zscaler SASE, Zscaler DLP, Zscaler CASB, Zscaler CSPM, Zscaler Browser Isolation, Zscaler Posture Control

Overview

Iboss offers a comprehensive cloud-based security platform valued for its scalability and autonomous features, ensuring robust security with easy deployment and management capabilities.

Renowned for its robust security architecture, Iboss integrates seamlessly within diverse networks, delivering efficient granular filtering and advanced content categorization. Its single pane of glass console provides ease of management, allowing rapid scalability suitable for rapidly deploying environments. Operates in BYOD setups due to inline filtering without device installation. Integration with cloud-based applications enhances user control, and features like SASE, SSL inspection, and ChatGPT risk protection stand as highlights. Despite its strengths, users have pointed out areas for enhancement like direct navigation in reports, SSL decryption, and better cloud integration while having room to improve data loss prevention.

What are the most important features of Iboss?

Scalability: Supports rapid deployment across diverse networks.
SASE: A consolidated approach to secure access.
SSL Inspection: Ensures safe data transmission.
Granular Filtering: Detailed control over accessible content.
Single Pane Management: Unifies control through a centralized console.

What benefits should users consider in reviews?

Cost-effectiveness: Offers competitive pricing with robust features.
Autonomous Operation: Reduces management overhead.
Responsive Support: Provides assistance when needed.
Flexible Deployment: Available for both cloud and on-premises environments.

The usage of Iboss spans educational institutions, specifically K-12, to enforce internet policies, protect data, and support remote work environments. It provides web filtering and security frameworks to ensure safe browsing. Its platform-as-a-service model offers flexibility for both cloud-based and on-premises requirements, integrating seamlessly to deliver enhanced security features suitable for various deployment needs including zero trust, CASB, and network security for work-from-home setups.

iboss

Cisco Duo is a cloud-based identity security platform safeguarding critical resources for any user and device worldwide. Known for its ease of use, Duo offers seamless protection across multi-cloud, hybrid, and on-premises environments.

Cisco Duo is designed to secure access with identity-first protection and provides extensive visibility throughout an organization's identity ecosystem. Offering multi-factor authentication, Duo facilitates easy integration and management, allowing teams to protect data effectively on VPNs, applications, and networks. Its single-pane management improves security processes while enhancing trust, making it suitable for diverse IT infrastructures.

What are the key features of Cisco Duo?

Multi-factor Authentication: Strengthens user verification with multiple methods.
Push Notifications: Simplifies authentication with quick approvals.
Single Sign-On: Enhances convenience by allowing one set of credentials.
VPN Access: Secures remote connections with reliable authentication.
User Activity Visibility: Offers comprehensive insights into access patterns.

Which benefits and ROI should users consider?

Quick Deployment: Facilitates rapid integration within existing systems.
Effective Management: Streamlines IT operations with centralized control.
Regulatory Compliance: Aids in meeting industry standards for data protection.
Enhanced Trust: Strengthens security posture across networks.
User-friendly Approach: Simplifies authentication for non-technical users.

In industries like education and finance, Cisco Duo is widely employed to secure multi-factor authentication across platforms such as email, databases, and servers. Its integration capabilities with Microsoft 365, Active Directory, and VPNs like AnyConnect are instrumental in verifying user identities using mobile apps or OTPs, catering effectively to both remote and on-premise environments.

Cisco

Zscaler Zero Trust Exchange enhances security with seamless cloud-based connectivity and VPN-less operation, offering integration with multiple identity providers and advanced security features, suitable for remote work environments.

Zscaler Zero Trust Exchange provides secure, adaptive connectivity without traditional VPNs, allowing organizations to replace legacy systems and bolster remote work security. The platform offers cloud-based protection, single sign-on, dynamic URL categorization, and scalable solutions. While advanced security features like DLP and threat protection enhance data protection, users may face issues with speed, connectivity, and some customization options. Integration challenges, latency due to multi-tenant hosting, reporting delays, and licensing costs require consideration. It supports secure internet access and private application security, ensuring traffic control and data compliance.

What are the key features of Zscaler Zero Trust Exchange?

VPN-less Connectivity: Enables secure remote access without traditional VPNs.
Cloud-based Security: Offers scalable protection utilizing cloud infrastructure.
Single Sign-On: Integrates with multiple identity providers for streamlined access.
Dynamic URL Categorization: Provides real-time URL filtering to enhance security.
Advanced Threat Protection: Detects and mitigates sophisticated threats effectively.
Customizable Policies: Allows tailored security protocols to fit unique requirements.
Comprehensive DLP: Protects sensitive data through robust data loss prevention.
Integration Capabilities: Connects seamlessly with cloud services and applications.

What are the benefits of using Zscaler Zero Trust Exchange?

Enhanced Security: Delivers consistent protection regardless of user location.
Improved Compliance: Ensures adherence to data protection regulations.
Streamlined Access: Simplifies connectivity to private and cloud applications.
Scalability: Supports expanding organizational demands with cloud scalability.
Real-time Visibility: Provides instant insights into security incidents and network traffic.

Zscaler Zero Trust Exchange is deployed across industries to secure remote access and enforce zero trust principles. Organizations in finance, healthcare, and technology sectors utilize it for secure internet access and visibility into cloud applications, enhancing performance and compliance in dynamic environments.

Zscaler

Sample Customers

More than 4,000 global enterprises trust the iboss Cloud Platform to support their modern workforces, including a large number of Fortune 50 companies.

Information Not Available

Siemens, AutoNation, GE, NOV

Cisco Duo vs. Zscaler Zero Trust Exchange Platform