Try our new research platform with insights from 80,000+ expert users

Cisco Umbrella vs Sangfor Internet Access Gateway (IAG) comparison

Sponsored
 

Comparison Buyer's Guide

Executive SummaryUpdated on Aug 6, 2024
 

Categories and Ranking

iboss
Sponsored
Ranking in Secure Web Gateways (SWG)
13th
Average Rating
8.6
Reviews Sentiment
7.0
Number of Reviews
13
Ranking in other categories
Internet Security (4th), Web Content Filtering (4th), Cloud Access Security Brokers (CASB) (8th), ZTNA as a Service (13th), Secure Access Service Edge (SASE) (10th)
Cisco Umbrella
Ranking in Secure Web Gateways (SWG)
1st
Average Rating
8.8
Number of Reviews
109
Ranking in other categories
Internet Security (1st), Cloud Access Security Brokers (CASB) (2nd), Secure Access Service Edge (SASE) (3rd), Domain Name System (DNS) Security (1st), Cisco Security Portfolio (2nd)
Sangfor Internet Access Gat...
Ranking in Secure Web Gateways (SWG)
25th
Average Rating
8.6
Number of Reviews
4
Ranking in other categories
No ranking in other categories
 

Featured Reviews

Jack Hamm - PeerSpot reviewer
Sep 20, 2024
We experienced benefits immediately but the report generation is lagging
iboss excels on the networking side but lags slightly behind competitors like Zscaler and Netskope in terms of security feature parity. I'd like to see them accelerate development on the security side, particularly around data loss prevention. Using iboss for DLP instead of traditional endpoint solutions is preferable, but its current feature set requires some clunky workarounds. I'd also like to see better integration of DLP into the platform. Additionally, while it's improving, reporting can be slow at times. This is problematic when generating reports for executives who expect them immediately. I'd like to see further improvements in reporting speed and efficiency.
Rohan Singh - PeerSpot reviewer
Jun 26, 2022
Protects endpoints wherever they are, always pushing people to the right locations to avoid malicious intent
The most valuable thing is how easy it is to deploy. We did it with 9,000 users at my last job, and it took a week to get to all the endpoints. Doing that without having to physically touch all those endpoints was very simple. The single pane of glass management makes it very easy to manage your rollout. We get a lot of "single panes of glass" and, eventually, you need a pane of panes of glass. But it's always good to have a clear and graphical view, and Umbrella's is nice and easy to read. Definitely, of the panes of glass that we do have, it's one of the easiest to use. The single pane of glass is good to group users together and separate people out. Some people need different types of security. Some people are more vulnerable. Some have more highly valuable assets, like C-suite people. It's really good to be able to have end-users defined inside of that. You don't have to jump around. You don't have to figure out who's who. It's all done through one pane of glass. What most people don't realize is that it's running in the background, which is a really nice aspect when it comes to security. Often, when you deploy a security tool, it takes up CPU performance. Everything slows to a grind. But Umbrella is so simple and easy and it doesn't affect the end-user experience. It's the best of all worlds. It's nice when people realize that they're being protected when they go to the wrong site. I think people are happy that they're protected, but it's nice that they rarely notice it. It's generally easy to maintain network connectivity, but with Umbrella, the nice part is that whichever connectivity you're on, you're always secure. With Umbrella, as long as you're online, you're going to be protected.
Muhammad Asif Shaikh - PeerSpot reviewer
Oct 25, 2023
Designed to provide comprehensive and secure internet access with high visibility into users
After my purchase, I noticed a need for improvements, particularly in the area of identifying the source user of the device, which can sometimes roll back to the base. Additionally, there were challenges with SSL gate traffic, which wasn't functioning as effectively as expected. Even though there have been fixes to these issues, they should be inherent to the product and need further attention. These aspects, especially sub-features, aren't very robust and seem complex. Regarding integration, while Sangfor Internet Access Gateway (IAG) integrates well with its own products, its compatibility with third-party tools like QB is limited. There's room for improvement in making protocols compatible with various third-party products.

Quotes from Members

We asked business professionals to review the solutions they use. Here are some excerpts of what they said:
 

Pros

"Granular setup, which was able to set different levels of filters using the OUs in the AD."
"Because of iboss, I did not have to assign web filtering tasks to my techs on a daily basis."
"Iboss is a solution that prevents advanced persistent threats, and has a zero tolerance for attacks."
"It was a very easy product to install. It can be deployed very fast."
"Valuable features: Within the filter: Controls (Web categories, applications, and Allow/Block list) and Network (local Subnets). Within the reporter: Logs (Event Log) and Reports."
"Content filtering is the most useful feature of iboss."
"Our primary use case for this product is DLP,"
"Its initial setup was straightforward."
"I haven't found any issues related to latency or any other issue."
"The most valuable feature is the ability to block users from reaching places that they should not even try to reach has been a boon."
"When it comes to hybrid work it's pretty effective. We've got the agents. We can protect people inside our building and, when they're using their laptops out in the field, they're still protected. It's working well."
"​They have a wealth of articles in their knowledge base. This has given me the freedom to troubleshoot on my own time. ​​"
"The user interface is great. It's very easy to tailor to our client's environment and needs."
"I also think that the dashboard view is really helpful. Whenever sites get blocked, we get the details and the users who are connecting to them."
"The most valuable feature for us is the DNS-based protection."
"Some clients only want DNS security, while others want more of the advanced features that it has available."
"The most significant aspect is the control it offers over internet traffic, like managing computer access to specific sites such as Facebook. I find particular value in its ability to control the depth of internal traffic, enabling actions like blocking specific file extensions on social media or specific IPs. This control by categories is a standout feature for us in Sangfor Internet Access Gateway (IAG)."
"Stability-wise, I rate the solution a ten out of ten."
"The solution is interoperable and has centralized management."
"The tool has comprehensive reporting capabilities, making it a convincing choice for potential customers."
 

Cons

"Sometimes, obviously, there are bugs."
"I am currently doing a PoC of the zero trust aspect of it. Compared to other similar solutions, it is hard to get around each feature. It takes a while to get used to it."
"File integrity monitoring would be very advantageous as an additional feature."
"To scale up, a new iboss Node Blade Chassis must be purchased."
"SSL decryption: We had issues with learners using apps instead of using web browsers. This type of encryption is tough for any appliance in a BYOD environment."
"Iboss is growing so fast that it is often hard for them to keep up with the challenges."
"I'd like to see them accelerate development on the security side, particularly around data loss prevention."
"Sometimes when you call in support, you get someone who is just following a sheet. It feels like a runaround. You feel that you are running into that support wall."
"The solution could be faster as the process is very slow."
"There are a couple of interface issues. I know that they say that there are feature enhancements that are noted. For example, we've got the Cisco Meraki security appliances, and there, we geofence our company to where we're allowed to send and receive traffic. So, in our case, by default, we only allow traffic to six different countries, which allows us to effectively prevent traffic for the majority of bad players in the world, but they don't give you an easy way to do that in Cisco Umbrella. With Cisco Meraki, I can specify or pick the countries. I can say that I want to only allow traffic from these six countries, and I'm done. With Cisco Umbrella, I have to rely on the fact that they're going to prevent traffic to other countries. They're going to decide if it's good or bad."
"We faced an issue regarding virtual appliances (VAs) during deployment. They could improve the quality and management of the virtual appliances offered right now. You can't see much because it is a Linux machine, and they have customized it. You don't have any route access to the machine, only seeing limited things in it. When we opened a ticket, they didn't know much about VAs themselves. So, that is where it is lacking right now. I know this will improve in the long run."
"I would like to see integration with SecurNX in the future."
"Lower costs including licensing, support, and renewals would be beneficial."
"They should provide more integrations and bring things together so that there is a more standard feel to their platform. We also use Cisco ISE, and it has a very different feel from Cisco Umbrella."
"Its on-prem rollout is quite challenging. It needs better coordination with the Internet Service Provider. It is a cloud-based solution, and any endpoint that connects to it has to go through all the gateway ISPs, but some of the ISPs block HTTPS-based DNS. That's where the challenge occurs with Umbrella."
"Its DNS service does not support IPv6 query."
"After my purchase, I noticed a need for improvements, particularly in the area of identifying the source user of the device, which can sometimes roll back to the base. Additionally, there were challenges with SSL gate traffic, which wasn't functioning as effectively as expected. Even though there have been fixes to these issues, they should be inherent to the product and need further attention. These aspects, especially sub-features, aren't very robust and seem complex. Regarding integration, while Sangfor Internet Access Gateway (IAG) integrates well with their own products, its compatibility with third-party tools like QB is limited. There's room for improvement in making protocols compatible with various third-party products."
"The solution's logging system should be improved because its logs are not precise and are a little confusing."
"We encountered an issue where the IAG could not connect to IBM QRadar to provide the necessary logs."
"In Sangfor Internet Access Gateway (IAG), its speed is an area of concern where improvements are required."
 

Pricing and Cost Advice

"It is not expensive, and it is also not cheap. iboss is priced right in the sweet spot for the number of features it offers."
"It is probably in line with other solutions, but I do not deal with the financial side."
"We have not priced the solution recently, but they were competitive with other vendors in the past."
"It is expensive compared to one of its competitors."
"The overall pricing for iboss is very competitive and transparent."
"Our licensing fees are on a yearly basis."
"When talking about Cisco solutions in general there pricing model is horrible. For example, you can sell a Meraki-based solution, but if the customer starts shopping around, someone is going to have access to the pricing at a level that you cannot compete because they do not have uniform pricing. Not everybody gets fair pricing. Unless you are one of the real major corporations selling the solution your ability to compete is impossible. Cisco will acknowledge the situation and assure you next time it will be in your favor but it never becomes favorable for you. Cisco is not very good in this regard. However, Umbrella is good."
"Cisco uses subscription models for the pricing and there are three subscription plans."
"Cisco has a model called ELA. With ELA, if you buy the solution you will have the complete security portfolio and you can pay it yearly or after three years, it depends on the contract."
"The pricing model is easier compared to some of the other solutions, and it is also competitive."
"Cisco is expensive. For example, we are looking at Nexus Dashboard, and it's costing about 250,000 euros. I ask, "What do I get from it?" I'm still not convinced that we have to spend on it, so pricing is a problem."
"I am not sure, I don't have the numbers in front of me, but I think it's $1.00 or so per device/month."
"I rate the tool's pricing a five out of ten."
"The solution’s pricing is cheaper than any other solution."
"It is one of the reason for choosing it over other available products. However, recently, this year, there have been recurring concerns. I believe we might consider migrating to another solution."
"I rate the product pricing a five or six out of ten on a scale of one to ten."
"The cost varies with models starting from $2,000 a year."
report
Use our free recommendation engine to learn which Secure Web Gateways (SWG) solutions are best for your needs.
814,649 professionals have used our research since 2012.
 

Top Industries

By visitors reading reviews
Financial Services Firm
13%
Computer Software Company
13%
Manufacturing Company
9%
Government
6%
Educational Organization
21%
Computer Software Company
19%
Financial Services Firm
8%
Manufacturing Company
7%
University
13%
Construction Company
11%
Computer Software Company
11%
Manufacturing Company
9%
 

Company Size

By reviewers
Large Enterprise
Midsize Enterprise
Small Business
No data available
 

Questions from the Community

What do you like most about iboss?
Content filtering is the most useful feature of iboss.
What needs improvement with iboss?
A positive improvement would be to expand into more areas for product monitoring. You have an agent that resides on t...
What is your primary use case for iboss?
We use it for URL filtering to enforce our enterprise Internet use policy. We use it for our current initiatives in a...
Which is the better security solution - Cisco Umbrella or Zscaler?
Cisco Umbrella and Zscaler Internet Access are two broad-spectrum Internet security solutions that I have tried. Zs...
Which is the better security solution - Cisco Umbrella or Microsoft Cloud App Security?
Cisco Umbrella is an integral component of the Cisco SASE architecture. It integrates security in a single, cloud-nat...
What do you like most about Cisco Umbrella?
Cisco Umbrella is easy to monitor, manage, and deploy.
What do you like most about Sangfor Internet Access Gateway (IAG)?
The solution is interoperable and has centralized management.
What is your experience regarding pricing and costs for Sangfor Internet Access Gateway (IAG)?
The tool is cheap compared to American brands. When compared to Blue Coat, Sangfor offers superior value in terms of ...
What needs improvement with Sangfor Internet Access Gateway (IAG)?
The solution's logging system should be improved because its logs are not precise and are a little confusing.
 

Also Known As

iBoss Cloud Platform
OpenDNS
No data available
 

Learn More

 

Overview

 

Sample Customers

More than 4,000 global enterprises trust the iboss Cloud Platform to support their modern workforces, including a large number of Fortune 50 companies.
Chart Industries, City of Aspen, Eastern Mountain Sports, FLEXcon, George Washington University, Jackson Municipal Airport Authority, Ohio Public Library Information Network, PTC, Richland Community College, Smart Motors, Tulane University, VeriClaim
Information Not Available
Find out what your peers are saying about Cisco Umbrella vs. Sangfor Internet Access Gateway (IAG) and other solutions. Updated: October 2024.
814,649 professionals have used our research since 2012.