Cloudflare One vs Prisma SD-WAN comparison

Cloudflare and Palo Alto Networks are both solutions in the Secure Access Service Edge (SASE) category. Cloudflare is ranked #7 with an average rating of 8.8, while Palo Alto Networks is ranked #8 with an average rating of 8.7. Cloudflare holds a 7.1% mindshare in SASE, compared to Palo Alto Networks’s 2.1% mindshare. Additionally, 100% of Cloudflare users are willing to recommend the solution, compared to 100% of Palo Alto Networks users who would recommend it.

Comparison Buyer's Guide

Download the report

Executive SummaryUpdated on Dec 12, 2024

Prisma SD-WAN and Cloudflare One both compete in the network and security solutions category. Based on user feedback, Prisma SD-WAN stands out for its extensive features and application insight, while Cloudflare One is noted for its ease of use and economical pricing.

Features: Prisma SD-WAN offers excellent VPN tunnel management, deep application visibility, and advanced capabilities like Zero Touch Provisioning. It supports application prioritization and provides comprehensive analytics. Cloudflare One delivers strong DDoS protection, convenient rate limiting, and user-friendly application-based access. Its integration into a single console further simplifies management.

Room for Improvement: Prisma SD-WAN needs more intuitive traffic alerts, enhanced documentation, and faster technical support. Cloudflare One could improve by offering better rule insights, more detailed onboarding guidance, and refined cost management. Both solutions also have room for a more streamlined setup experience.

Ease of Deployment and Customer Service: Prisma SD-WAN is favored for hybrid and on-premises setups, offering flexibility but necessitating significant initial configuration. Customer support response times can be slow. Cloudflare One, being primarily cloud-based, is easy to deploy yet has opportunities to improve its customer service and support documentation.

Pricing and ROI: Prisma SD-WAN is considered premium with high initial costs but offers substantial ROI thanks to automation and reduced outages. Cloudflare One, with more transparent and cost-effective pricing, provides significant savings over traditional tools. Both solutions justify their pricing with enhanced network capabilities and security features.

To learn more, read our detailed Cloudflare One vs. Prisma SD-WAN Report (Updated: January 2025).

Buyer's Guide

Cloudflare One vs. Prisma SD-WAN

January 2025

Download the complete report

Helped 832,891 peers since 2012

Review summaries and opinions

We asked business professionals to review the solutions they use. Here are some excerpts of what they said:

Categories and Ranking

iboss

Mindshare comparison

As of February 2025, in the Secure Access Service Edge (SASE) category, the mindshare of iboss is 1.5%, up from 1.2% compared to the previous year. The mindshare of Cloudflare One is 7.1%, up from 6.0% compared to the previous year. The mindshare of Prisma SD-WAN is 2.1%, down from 3.2% compared to the previous year. It is calculated based on PeerSpot user engagement data.

Secure Access Service Edge (SASE)

Featured Reviews

Matt Crockford

Head of Cybersecurity at SES Water

It's easy to roll out, and their understanding of our business made it seamless

One aspect we value about iboss is its simplicity. Their customer service is brilliant, and they are super responsive and knowledgeable. It's easy to roll out, and their understanding of our business made it seamless. We were impressed by the solution's mental health function, which can detect if someone needs help. It scans what users are browsing and flags warning signs so we can check to see if they are okay. We've had to use it a couple of times. The user interface is highly intuitive. Our IT team picked it up with minimal training. It's arranged so that it's easy to find where things are. Another advantage is the single pane of glass console, which gives you visibility into what's happening. We're not fully there yet because we haven't implemented zero trust, but we're excited about the possibilities from the demos we've seen. We launched a POC of iboss' ChatGPT Risk Protection feature two weeks ago. AI is a great tool, but you need to be careful what you put into it. My biggest fear is employees inputting sensitive corporate information or customer PII data into one of these chatbots. I was impressed by our trial of the feature. It's exactly what we wanted. Now, when a user goes to ChatGPT, there's a banner warning them not to share information, and we can block conversations containing customer data like bank details and email addresses. I don't want to stop people from using it, but we need visibility. We've only tried it on a test group of 15 people. You can configure it to look for specific keywords or integrate it with your DLP policy if you have that configured

Read full review

Carlos Alam Hernandez Baruch

Engineer at SITMEXICO

The solution enables seamless security management and fosters a learning environment

Feedback could be enhanced. While I work efficiently with Clover as a partner in Mexico City, sometimes the information and requests are easier to manage with more concrete solutions. For the solution stopping us for e-learning, I appreciate the concept yet need more resources or courses in Mexico, preferably in Spanish. Certifications are easy, however, I require more real-world environments and instructors.

Read full review

Libin Joseph

Network Administrator at Wipro

Administration is very flexible for devices and policies; everything is in a single portal

In some areas, compared to other SD-WANs, Prisma SD-WAN has fewer features. First of all, sometimes, if one device is down, the other device will not come up. When there are two devices and we have created HA, that means one device gets a priority of 100 and the other is given 90. The 100 priority is active and the 90 is the backup. In some cases, the primary device is down, but the secondary device is not becoming active. In that case, we have to reboot the devices, causing an outage. I would also like to see improvement in the product training for customers. Palo Alto has not initiated very much training but they have to do so because this is a new product. If you have experience in a legacy environment, and you are moving to Prisma SD-WAN, you don't have a training framework. That is one of the disadvantages. Although they have a training portal, it is a read-only platform. They need training for engineers so that engineers can work very quickly and properly. And with software upgrades, sometimes the device does not come up and we have to do a manual restart. It doesn't happen every time, maybe one or two times out of 100. It's minimal but it does happen.

Read full review

Quotes from Members

We asked business professionals to review the solutions they use. Here are some excerpts of what they said:

Pros

"The solution has massively improved our security posture, giving us full visibility into what our staff does online."

"Because of iboss, I did not have to assign web filtering tasks to my techs on a daily basis."

"Our primary use case for this product is DLP,"

"iboss has significantly lowered the number of security incidents. It is crazy how much it blocks and how much it is aware of the outside danger."

"iboss is easy to use despite its complexity. Multiple engineers manage it, but it's significantly more straightforward to administer than traditional VPNs and web proxies."

"It was a very easy product to install. It can be deployed very fast."

"Iboss is a solution that prevents advanced persistent threats, and has a zero tolerance for attacks."

"Content filtering is the most useful feature of iboss."

More iboss pros

"For Cloudflare Access, I am using the free plan...The most valuable feature is their protection."

"Cloudflare DDoS is better than its competitors for its security, deployment, and scalability."

"This solution is easy to understand and easy to configure."

"It's the endpoint exposition. We don't need to expose our VPN server to the internet and need a zero-test solution. I can apply some conditional access to the endpoint that's connecting to our network to check their security policies or the security condition of their workstation. Once the workstation is trying to connect to my internal network, then I would like to check the discrete condition of these endpoints that are trying to access my internal network. We created some conditional access. We have CrowdStrike, to check if the CrowdStrike is installed, to check if it's updated, and to check for Windows updates. We created some conditional policies to check it."

"It will take the blow rather than our applications should an attack occur."

"Cloudflare, in my opinion, was easy to implement."

"Cloudflare is simple to use."

"Clover is the best product globally."

More Cloudflare One pros

"The product's initial setup phase is straightforward."

"It is flexible to use the internet connection via local breakouts without going to data centers."

"Prisma's analytics provide a lot of valuable data. I like the internet health chart that shows latency, dropped packets, MOS for data quality, etc. It also runs a continuous speed test in the background. I've used it multiple times to troubleshoot internet connections when the service provider has attempted to claim nothing is wrong with the circuit. It gives me data to send them showing we're not getting the speed we should, or there is constant packet loss."

"When it comes to supporting large, complex, network architectures, it's a very simple architecture. The main component is the fabric. It's very easy to troubleshoot if there is an issue happening in the underlying network."

"Prisma SD-WAN is intuitive. We have a better idea of the different tools we can use and jump between the menus quickly."

"The security offered by the solution is pretty good."

"Prisma SD-WAN is recommended due to its comprehensive capabilities."

"The solution allows our network to be self-healing in the event of a loss of connectivity between different locations."

More Prisma SD-WAN pros

Cons

"To scale up, a new iboss Node Blade Chassis must be purchased."

"The reporting feature needs improvement. It doesn't give you the expected results. It is quite difficult to get the specific reports needed, and it is not as intuitive as the rest of the platform."

"Their on-premise hardware's network interface is capped at one gigabit, which is sort of a problem. If you stand a filter up where all traffic flows through that, according to them, in order to go above a gigabit, you have to have multiple devices, which in today's IT seems a little bit silly. They could easily put in an SFP port into their device that could accommodate 10 gigs or at least offer a box."

"Sometimes when you call in support, you get someone who is just following a sheet. It feels like a runaround. You feel that you are running into that support wall."

"The area I would like to see improvement in is the ability with in the reporter to navigate directly to the content the user is traversing. It is kind of there, but it's not perfect. Quite frequently, I receive links that lead me to pages with error messages."

"The solution could be stronger on the integration side and offer more cloud applications like G Suite or Oracle."

"Its pricing could be better."

"Fold that in with the risk intelligence they're getting from all of the different subscriptions they are a part of. Now, these security companies subscribe to things like emerging threats, databases, etc. You can fold all this intelligence to decide what's happening on an endpoint. I would love to see them start moving into that space. That would compete directly with Microsoft. Maybe that's why they haven't. Having that ability native within the solution would be great. The other area in which I would love to see improvement is more detailed descriptions of why they block websites."

More iboss cons

"They don't have a person to provide support for customers using the solution under their free plan."

"The pricing is an area that can be improved. Pricing, as far as I recall, was the source of our problems."

"The software has automated alerts, but the automated alerts are not available in the mobile app."

"When there are any dynamic changes in complex applications, the tool takes a lot of time, making its analytics-related area a major matter of concern where improvements are needed."

"Operating and tuning the product is difficult."

"Cloudflare Zero Trust Platform needs to improve its documentation. It took time to do the implementation."

"Feedback could be enhanced. While I work efficiently with Clover as a partner in Mexico City, sometimes the information and requests are easier to manage with more concrete solutions."

"For the topic of improvement, providing some training material is one of my suggestions."

More Cloudflare One cons

"Prisma SD-WAN can be built on top of a couple of hardware platforms, including the Palo Alto Next-Generation Firewall or the CloudGenix infrastructure."

"I'd like to see them move more towards CASB."

"Sometimes, during the product's initial setup phase, bypass pair or couple ports don't come up normally, and it requires an hour and a half to troubleshoot to reset the box from Prisma SD-WAN to factory default."

"I would also like to see improvement in the product training for customers. Palo Alto has not initiated very much training but they have to do so because this is a new product. If you have experience in a legacy environment, and you are moving to Prisma SD-WAN, you don't have a training framework. That is one of the disadvantages."

"The only con is the pricing because it's more premium."

"There are two parallel things that we want Palo Alto to work on. First, customers want a unified appliance that does the work of all firewalls in addition to SD-WAN. Second, the cloud presence should be completely automated. If I purchase the SASE architecture, I shouldn't worry about deployments in Prisma Access or on Prisma SD-WAN. It should be deployed in one go."

"Accessibility could be improved. Any new person attempting to access Prisma will have difficulty. It doesn't have CLI available."

"The pricing for Prisma SD-WAN needs improvement."

More Prisma SD-WAN cons

Pricing and Cost Advice

"The overall pricing for iboss is very competitive and transparent."

"It is not expensive, and it is also not cheap. iboss is priced right in the sweet spot for the number of features it offers."

"We have not priced the solution recently, but they were competitive with other vendors in the past."

"It is expensive compared to one of its competitors."

"It is probably in line with other solutions, but I do not deal with the financial side."

"The price tag is no longer $200,000, but rather $300,000 to $400,000. It's twice."

"The prices are slightly expensive."

"Cloudflare Zero Trust Platform's pricing is good."

"The solution is not that expensive."

"My company has to make yearly payments towards the licensing costs attached to the solution. There are no hidden charges apart from the licensing costs of the solution."

"The solution's pricing lacks transparency."

"The pricing is somewhere in the middle. I would rate the pricing a seven out of ten."

"The pricing of the solution is cheap. The licensing cost is also very low. I rate the cost and pricing a three out of ten."

"This solution stood out because it cost considerably less than the other SD-WAN solutions out there from Cisco."

"If you're already invested in a Palo Alto product, it would be logical to use this solution. If not, there might be some other solutions that are more viable in terms of pricing."

"Prisma SD-WAN is a pretty expensive solution."

"On a scale from one to ten, where one is cheap and ten is expensive, I rate the solution's pricing an eight out of ten."

"It is more expensive than Fortinet."

See which vendors are best for you

Use our free recommendation engine to learn which Secure Access Service Edge (SASE) solutions are best for your needs.

See recommendations

832,891 professionals have used our research since 2012.

Top Industries

By visitors reading reviews

Computer Software Company

13%

Financial Services Firm

12%

Manufacturing Company

Government

Computer Software Company

16%

Financial Services Firm

10%

Comms Service Provider

Manufacturing Company

Educational Organization

28%

Computer Software Company

10%

Manufacturing Company

Financial Services Firm

Company Size

By reviewers

Large Enterprise

Midsize Enterprise

Small Business

Questions from the Community

What do you like most about iboss?

Content filtering is the most useful feature of iboss.

See all answers

What needs improvement with iboss?

I have the same complaint about them that I have about other software companies. Sometimes when you call in support, ...

See all answers

What is your primary use case for iboss?

We are a PreK-12 public school district, and we use iboss to filter internet content for our students at home and sta...

See all answers

What do you like most about Cloudflare Access?

The tool also offers good scalability, and the dashboard, along with real-time analytics, is very good.

See all answers

What is your experience regarding pricing and costs for Cloudflare Access?

The price of Cloudflare Access is the same as compared to Akamai, but I get better performance from Cloudflare. My co...

See all answers

What needs improvement with Cloudflare Access?

Cloudflare Access has strong integration with Microsoft, among other platforms. However, when it comes to Kaspersky, ...

See all answers

What do you like most about Prisma SD-WAN?

The product's initial setup phase is straightforward.

See all answers

What is your experience regarding pricing and costs for Prisma SD-WAN?

The price for Prisma is a bit high, but it is a premium service. The higher tier provides flexibility and scalability...

See all answers

What needs improvement with Prisma SD-WAN?

If Palo Alto could open the platform to manage other SD-WANs, it would be beneficial. Currently, it only manages Palo...

See all answers

Comparisons

Zscaler Internet Access vs iboss

Compared 19% of the time

Cisco Umbrella vs iboss

Compared 14% of the time

Netskope vs iboss

Compared 11% of the time

Prisma Access by Palo Alto Networks vs iboss

Compared 10% of the time

Zscaler Zero Trust Exchange Platform vs iboss

Compared 9% of the time

More iboss Competitors

Twingate vs Cloudflare One

Compared 11% of the time

AWS Shield vs Cloudflare One

Compared 8% of the time

Prisma Access by Palo Alto Networks vs Cloudflare One

Compared 7% of the time

Cato SASE Cloud Platform vs Cloudflare One

Compared 7% of the time

Zscaler Zero Trust Exchange Platform vs Cloudflare One

Compared 4% of the time

More Cloudflare One Competitors

Prisma Access by Palo Alto Networks vs Prisma SD-WAN

Compared 24% of the time

Cisco Catalyst SD-WAN vs Prisma SD-WAN

Compared 21% of the time

Fortinet FortiGate vs Prisma SD-WAN

Compared 17% of the time

Meraki SD-WAN vs Prisma SD-WAN

Compared 14% of the time

More Prisma SD-WAN Competitors

Product Reports

Buyer's Guide

iboss

February 2025

Download iboss product report

Buyer's Guide

Cloudflare One

February 2025

Download Cloudflare One product report

Buyer's Guide

Prisma SD-WAN

January 2025

Download Prisma SD-WAN product report

Also Known As

iBoss Cloud Platform

Cloudflare Area 1 Email Security, Cloudflare Bot Management, Cloudflare Gateway, Cloudflare Zero Trust Platform, Cloudflare DDoS, Cloudflare SASE & SSE Platform

CloudGenix

Overview

iboss offers a comprehensive security platform designed for diverse use cases such as web filtering, data loss protection, corporate proxy services, and URL filtering.

iboss integrates advanced features to address dynamic security needs, leveraging its strength in SASE, ZTNA, AI initiatives, and cloud integration, while ensuring seamless operations for remote work. It excels in historical forensics, malware protection, and flexible cloud deployments. Users benefit from comprehensive traffic scanning, robust malware detection, and PaaS capabilities that reduce hardware management. An intuitive admin console ensures efficient management with content filtering and low false positives. SSL decryption enhances security, while DLP protects data in AI conversations. Deployment is rapid and scalable, allowing effortless integration with emerging technologies.

What features does iboss offer?

Granular Web Filtering: Provides precise control over web content access.
Traffic Scanning: Monitors data through multiple ports for security breaches.
Malware Detection: Ensures superior protection against malware threats.
PaaS Capabilities: Eliminates need for hardware management.
SSL Decryption: Enhances data protection by decrypting secure connections.
DLP Capabilities: Safeguards data during AI interactions.

What benefits and ROI should users consider?

Scalability: Adapts quickly to growing demands and emerging tech integration.
Rapid Deployment: Reduces time to implement security measures.
User-Friendly Admin Console: Facilitates efficient operations management.
Low False Positives: Increases accuracy of threat detection systems.

iboss finds significant application in sectors such as education, where web filtering for K-12 is crucial, and in corporate environments requiring robust proxy services and URL filtering for network security. Its adaptability is essential in scenarios demanding flexible, decentralized security frameworks, particularly for remote work setups.

iboss

Cloudflare One is a single-vendor Secure Access Service Edge (SASE) platform that enables Zero Trust security and any-to-any connectivity across enterprise applications, users, devices, and networks. Cloudflare One helps organizations simplify, modernize, and consolidate their IT architecture by converging security and networking services on our single global network and control plane.

Many organizations start by adopting our Security Service Edge (SSE) services — like ZTNA, SWG, CASB, and DLP — to reduce their attack surface, stop threats like phishing and ransomware, protect data, and apply identity-based Zero Trust verification across web, SaaS, and private app environments. Others prioritize simplifying network connectivity across offices, data centers, and cloud environments with our WANaaS.

Every service is available for customers to run in every location across Cloudflare’s global network, which today spans 330+ cities in 120+ countries, so you can scale connectivity with fast, consistent protections everywhere.

Cloudflare

Simplify management, enable app-defined SD-WAN policies and deliver a secure, cloud-delivered branch today with the Industry’s first next-generation SD-WAN.

Palo Alto Networks

Sample Customers

More than 4,000 global enterprises trust the iboss Cloud Platform to support their modern workforces, including a large number of Fortune 50 companies.

23andMe

Open Networking User Group, Columbia Sportswear Company, Coca Cola

Buyer's Guide

Cloudflare One vs. Prisma SD-WAN

January 2025

Free Report: Cloudflare One vs. Prisma SD-WAN

Find out what your peers are saying about Cloudflare One vs. Prisma SD-WAN and other solutions. Updated: January 2025.

DOWNLOAD NOW

832,891 professionals have used our research since 2012.

See our Cloudflare One vs. Prisma SD-WAN report.

See our list of best Secure Access Service Edge (SASE) vendors.

We monitor all Secure Access Service Edge (SASE) reviews to prevent fraudulent reviews and keep review quality high. We do not post reviews by company employees or direct competitors. We validate each review for authenticity via cross-reference with LinkedIn, and personal follow-up with the reviewer when necessary.