Cloudflare One vs Prisma SD-WAN comparison

Cloudflare and Palo Alto Networks are both solutions in the Secure Access Service Edge (SASE) category. Cloudflare is ranked #7 with an average rating of 8.7, while Palo Alto Networks is ranked #8 with an average rating of 8.6. Cloudflare holds a 8.3% mindshare in SASE, compared to Palo Alto Networks’s 2.6% mindshare. Additionally, 100% of Cloudflare users are willing to recommend the solution, compared to 100% of Palo Alto Networks users who would recommend it.

Comparison Buyer's Guide

Download the report

Executive SummaryUpdated on Dec 12, 2024

Prisma SD-WAN and Cloudflare One both compete in the network and security solutions category. Based on user feedback, Prisma SD-WAN stands out for its extensive features and application insight, while Cloudflare One is noted for its ease of use and economical pricing.

Features: Prisma SD-WAN offers excellent VPN tunnel management, deep application visibility, and advanced capabilities like Zero Touch Provisioning. It supports application prioritization and provides comprehensive analytics. Cloudflare One delivers strong DDoS protection, convenient rate limiting, and user-friendly application-based access. Its integration into a single console further simplifies management.

Room for Improvement: Prisma SD-WAN needs more intuitive traffic alerts, enhanced documentation, and faster technical support. Cloudflare One could improve by offering better rule insights, more detailed onboarding guidance, and refined cost management. Both solutions also have room for a more streamlined setup experience.

Ease of Deployment and Customer Service: Prisma SD-WAN is favored for hybrid and on-premises setups, offering flexibility but necessitating significant initial configuration. Customer support response times can be slow. Cloudflare One, being primarily cloud-based, is easy to deploy yet has opportunities to improve its customer service and support documentation.

Pricing and ROI: Prisma SD-WAN is considered premium with high initial costs but offers substantial ROI thanks to automation and reduced outages. Cloudflare One, with more transparent and cost-effective pricing, provides significant savings over traditional tools. Both solutions justify their pricing with enhanced network capabilities and security features.

To learn more, read our detailed Cloudflare One vs. Prisma SD-WAN Report (Updated: December 2024).

Buyer's Guide

Cloudflare One vs. Prisma SD-WAN

December 2024

Download the complete report

Helped 830,596 peers since 2012

Review summaries and opinions

We asked business professionals to review the solutions they use. Here are some excerpts of what they said:

Categories and Ranking

iboss

Mindshare comparison

As of January 2025, in the Secure Access Service Edge (SASE) category, the mindshare of iboss is 1.7%, up from 1.6% compared to the previous year. The mindshare of Cloudflare One is 8.3%, up from 6.6% compared to the previous year. The mindshare of Prisma SD-WAN is 2.6%, down from 4.7% compared to the previous year. It is calculated based on PeerSpot user engagement data.

Secure Access Service Edge (SASE)

Featured Reviews

Jack Hamm

Vice President of Security and Engineering at a retailer with 10,001+ employees

We experienced benefits immediately but the report generation is lagging

iboss excels on the networking side but lags slightly behind competitors like Zscaler and Netskope in terms of security feature parity. I'd like to see them accelerate development on the security side, particularly around data loss prevention. Using iboss for DLP instead of traditional endpoint solutions is preferable, but its current feature set requires some clunky workarounds. I'd also like to see better integration of DLP into the platform. Additionally, while it's improving, reporting can be slow at times. This is problematic when generating reports for executives who expect them immediately. I'd like to see further improvements in reporting speed and efficiency.

Read full review

Leandro Soares Costa

Coordinator of the Architecture Security Team at TOTVS

Replaces traditional VPN and enables endpoint exposition

It's the endpoint exposition. We don't need to expose our VPN server to the internet and need a zero-test solution. I can apply some conditional access to the endpoint that's connecting to our network to check their security policies or the security condition of their workstation. Once the workstation is trying to connect to my internal network, then I would like to check the discrete condition of these endpoints that are trying to access my internal network. We created some conditional access. We have CrowdStrike, to check if the CrowdStrike is installed, to check if it's updated, and to check for Windows updates. We created some conditional policies to check it.

Read full review

CarlosNascimento

Senior Cyber Security Consultant at Compwyre

Has high-speed dynamic routing and a good traffic shaping feature for managing bandwidth

The dynamic routing in Prisma SD-WAN is high-speed and valuable because it quickly adjusts, so users do not realize the link is down. The traffic shaping feature is also handy. In branches with poor internet connections, traffic shaping allows us to restrict and manage bandwidth effectively. This ensures no single user can consume all the bandwidth, and it reserves equal parts of the link for all users. For example, we can share the link equally in a small office with ten people. Prisma SD-WAN is highly effective in handling network failovers and ensuring business continuity. It includes redundancy, failover capabilities, and extensive monitoring tools. If one customer experiences an attack, updates are provided to all other customers to prevent similar threats.

Read full review

Quotes from Members

We asked business professionals to review the solutions they use. Here are some excerpts of what they said:

Pros

"The security aspect of the solution, particularly the malware behind it, is excellent. That's something that really helped us out. It's not just a simple proxy that just blocks the insights of potential threats that come on behind it. They do malware detection and that helps us a lot."

"Valuable features: Within the filter: Controls (Web categories, applications, and Allow/Block list) and Network (local Subnets). Within the reporter: Logs (Event Log) and Reports."

"We were impressed by the solution's mental health function, which can detect if someone needs help. It scans what users are browsing and flags warning signs so we can check to see if they are okay. We've had to use it a couple of times."

"From a use-case scenario, what I like the most is the plug-in. I like the fact that we can do the filtering of these devices offsite independent of the network they are connected to, and we do not have to have traffic coming back inside our network."

"Granular setup, which was able to set different levels of filters using the OUs in the AD."

"Iboss is a solution that prevents advanced persistent threats, and has a zero tolerance for attacks."

"Content filtering is the most useful feature of iboss."

"The solution has massively improved our security posture, giving us full visibility into what our staff does online."

More iboss pros

"It will take the blow rather than our applications should an attack occur."

"Cloudflare DDoS mitigates DDoS attacks."

"The solution has different options that can be used to differentiate DDoS attacks."

"The capabilities of the software are strong enough for me to do what it's supposed to do. For me, we don't need to do a lot of configuration on our site. We just enable it and monitor it."

"Cloudflare is by far the most effective solution that I have come across."

"The tool also offers good scalability, and the dashboard, along with real-time analytics, is very good."

"It is a stable solution."

"It's the endpoint exposition. We don't need to expose our VPN server to the internet and need a zero-test solution. I can apply some conditional access to the endpoint that's connecting to our network to check their security policies or the security condition of their workstation. Once the workstation is trying to connect to my internal network, then I would like to check the discrete condition of these endpoints that are trying to access my internal network. We created some conditional access. We have CrowdStrike, to check if the CrowdStrike is installed, to check if it's updated, and to check for Windows updates. We created some conditional policies to check it."

More Cloudflare One pros

"Prisma SD-WAN is recommended due to its comprehensive capabilities."

"Prisma SD-WAN is intuitive. We have a better idea of the different tools we can use and jump between the menus quickly."

"When it comes to supporting large, complex, network architectures, it's a very simple architecture. The main component is the fabric. It's very easy to troubleshoot if there is an issue happening in the underlying network."

"Prisma's analytics provide a lot of valuable data. I like the internet health chart that shows latency, dropped packets, MOS for data quality, etc. It also runs a continuous speed test in the background. I've used it multiple times to troubleshoot internet connections when the service provider has attempted to claim nothing is wrong with the circuit. It gives me data to send them showing we're not getting the speed we should, or there is constant packet loss."

"The solution allows our network to be self-healing in the event of a loss of connectivity between different locations."

"I like the link monitoring and analytics. These are the features that set Prisma apart from other products. Prisma works well with large, complex networks. One of my clients is a top bank in the United States, and Prisma has performed well for that customer."

"The solution's most valuable feature is the visibility of the logs."

"Prisma supports all of the applications we're currently using."

More Prisma SD-WAN pros

Cons

"Fold that in with the risk intelligence they're getting from all of the different subscriptions they are a part of. Now, these security companies subscribe to things like emerging threats, databases, etc. You can fold all this intelligence to decide what's happening on an endpoint. I would love to see them start moving into that space. That would compete directly with Microsoft. Maybe that's why they haven't. Having that ability native within the solution would be great. The other area in which I would love to see improvement is more detailed descriptions of why they block websites."

"SSL decryption: We had issues with learners using apps instead of using web browsers. This type of encryption is tough for any appliance in a BYOD environment."

"Its pricing could be better."

"I am currently doing a PoC of the zero trust aspect of it. Compared to other similar solutions, it is hard to get around each feature. It takes a while to get used to it."

"Sometimes, obviously, there are bugs."

"Their on-premise hardware's network interface is capped at one gigabit, which is sort of a problem. If you stand a filter up where all traffic flows through that, according to them, in order to go above a gigabit, you have to have multiple devices, which in today's IT seems a little bit silly. They could easily put in an SFP port into their device that could accommodate 10 gigs or at least offer a box."

"The reporting feature needs improvement. It doesn't give you the expected results. It is quite difficult to get the specific reports needed, and it is not as intuitive as the rest of the platform."

"The area I would like to see improvement in is the ability with in the reporter to navigate directly to the content the user is traversing. It is kind of there, but it's not perfect. Quite frequently, I receive links that lead me to pages with error messages."

More iboss cons

"The tool should provide on-premise versions. Currently, all versions are cloud-based."

"The pricing is an area that can be improved. Pricing, as far as I recall, was the source of our problems."

"The free plan has limitations. For example, I can only set up three rules, and the application firewall is unavailable."

"Cloudflare DDoS has poor technical support."

"For the topic of improvement, providing some training material is one of my suggestions."

"The initial onboarding was causing us some confusion."

"The software has automated alerts, but the automated alerts are not available in the mobile app."

"The response time for support must be reduced."

More Cloudflare One cons

"The solution should include custom ports and group voice connections."

"Customer support is our biggest pain point. The quality of support has gone down a little since we initially deployed this product. I don't know if this is due to turnover at Palo Alto or a lack of training. It is now taking one or two days to get an initial response that says, "Hey, we've looked into this, can you pull this data for us?" In the past, we'd immediately get a response."

"They could add more advanced security features to the product."

"Sometimes, during the product's initial setup phase, bypass pair or couple ports don't come up normally, and it requires an hour and a half to troubleshoot to reset the box from Prisma SD-WAN to factory default."

"We are incorporating their zone-based firewalls. Prisma SD-WAN has limited documentation on how it manipulates traffic, e.g., how it is interacting with TCP and UDP. We recently had some traffic that was black holing. We literally had to do packet captures to see that the new zone-based firewall, which runs on top of Prisma SD-WAN, was causing issues."

"The pricing model could be improved to make it more affordable for smaller companies."

"Prisma could be a little cheaper."

"There are two parallel things that we want Palo Alto to work on. First, customers want a unified appliance that does the work of all firewalls in addition to SD-WAN. Second, the cloud presence should be completely automated. If I purchase the SASE architecture, I shouldn't worry about deployments in Prisma Access or on Prisma SD-WAN. It should be deployed in one go."

More Prisma SD-WAN cons

Pricing and Cost Advice

"We have not priced the solution recently, but they were competitive with other vendors in the past."

"It is not expensive, and it is also not cheap. iboss is priced right in the sweet spot for the number of features it offers."

"It is probably in line with other solutions, but I do not deal with the financial side."

"It is expensive compared to one of its competitors."

"The overall pricing for iboss is very competitive and transparent."

"The prices are slightly expensive."

"The price tag is no longer $200,000, but rather $300,000 to $400,000. It's twice."

"The solution is not that expensive."

"The pricing of the solution is cheap. The licensing cost is also very low. I rate the cost and pricing a three out of ten."

"The pricing is somewhere in the middle. I would rate the pricing a seven out of ten."

"Cloudflare Zero Trust Platform's pricing is good."

"My company has to make yearly payments towards the licensing costs attached to the solution. There are no hidden charges apart from the licensing costs of the solution."

"The solution's pricing lacks transparency."

"This solution stood out because it cost considerably less than the other SD-WAN solutions out there from Cisco."

"If you're already invested in a Palo Alto product, it would be logical to use this solution. If not, there might be some other solutions that are more viable in terms of pricing."

"Prisma SD-WAN is a pretty expensive solution."

"It is more expensive than Fortinet."

"On a scale from one to ten, where one is cheap and ten is expensive, I rate the solution's pricing an eight out of ten."

See which vendors are best for you

Use our free recommendation engine to learn which Secure Access Service Edge (SASE) solutions are best for your needs.

See recommendations

830,596 professionals have used our research since 2012.

Top Industries

By visitors reading reviews

Computer Software Company

13%

Financial Services Firm

12%

Manufacturing Company

Government

Computer Software Company

16%

Financial Services Firm

10%

Comms Service Provider

Manufacturing Company

Educational Organization

27%

Computer Software Company

10%

Financial Services Firm

Manufacturing Company

Company Size

By reviewers

Large Enterprise

Midsize Enterprise

Small Business

Questions from the Community

What do you like most about iboss?

Content filtering is the most useful feature of iboss.

See all answers

What needs improvement with iboss?

I have the same complaint about them that I have about other software companies. Sometimes when you call in support, ...

See all answers

What is your primary use case for iboss?

We are a PreK-12 public school district, and we use iboss to filter internet content for our students at home and sta...

See all answers

What do you like most about Cloudflare Access?

The tool also offers good scalability, and the dashboard, along with real-time analytics, is very good.

See all answers

What is your experience regarding pricing and costs for Cloudflare Access?

The price of Cloudflare Access is the same as compared to Akamai, but I get better performance from Cloudflare. My co...

See all answers

What needs improvement with Cloudflare Access?

Cloudflare Access has strong integration with Microsoft, among other platforms. However, when it comes to Kaspersky, ...

See all answers

What do you like most about Prisma SD-WAN?

The product's initial setup phase is straightforward.

See all answers

What is your experience regarding pricing and costs for Prisma SD-WAN?

The price for Prisma is a bit high, but it is a premium service. The higher tier provides flexibility and scalability...

See all answers

What needs improvement with Prisma SD-WAN?

If Palo Alto could open the platform to manage other SD-WANs, it would be beneficial. Currently, it only manages Palo...

See all answers

Comparisons

Zscaler Internet Access vs iboss

Compared 18% of the time

Cisco Umbrella vs iboss

Compared 15% of the time

Prisma Access by Palo Alto Networks vs iboss

Compared 11% of the time

Netskope vs iboss

Compared 10% of the time

Cato SASE Cloud Platform vs iboss

Compared 8% of the time

More iboss Competitors

Twingate vs Cloudflare One

Compared 12% of the time

AWS Shield vs Cloudflare One

Compared 8% of the time

Prisma Access by Palo Alto Networks vs Cloudflare One

Compared 8% of the time

Cato SASE Cloud Platform vs Cloudflare One

Compared 6% of the time

Zscaler Zero Trust Exchange Platform vs Cloudflare One

Compared 4% of the time

More Cloudflare One Competitors

Prisma Access by Palo Alto Networks vs Prisma SD-WAN

Compared 22% of the time

Cisco Catalyst SD-WAN vs Prisma SD-WAN

Compared 21% of the time

Fortinet FortiGate vs Prisma SD-WAN

Compared 17% of the time

Meraki SD-WAN vs Prisma SD-WAN

Compared 14% of the time

More Prisma SD-WAN Competitors

Product Reports

Buyer's Guide

iboss

January 2025

Download iboss product report

Buyer's Guide

Cloudflare One

January 2025

Download Cloudflare One product report

Buyer's Guide

Prisma SD-WAN

December 2024

Download Prisma SD-WAN product report

Also Known As

iBoss Cloud Platform

Cloudflare Area 1 Email Security, Cloudflare Bot Management, Cloudflare Gateway, Cloudflare Zero Trust Platform, Cloudflare DDoS, Cloudflare SASE & SSE Platform

CloudGenix

Learn More

iboss

Cloudflare

Palo Alto Networks

Overview

iboss offers a comprehensive security platform designed for diverse use cases such as web filtering, data loss protection, corporate proxy services, and URL filtering.

iboss integrates advanced features to address dynamic security needs, leveraging its strength in SASE, ZTNA, AI initiatives, and cloud integration, while ensuring seamless operations for remote work. It excels in historical forensics, malware protection, and flexible cloud deployments. Users benefit from comprehensive traffic scanning, robust malware detection, and PaaS capabilities that reduce hardware management. An intuitive admin console ensures efficient management with content filtering and low false positives. SSL decryption enhances security, while DLP protects data in AI conversations. Deployment is rapid and scalable, allowing effortless integration with emerging technologies.

What features does iboss offer?

Granular Web Filtering: Provides precise control over web content access.
Traffic Scanning: Monitors data through multiple ports for security breaches.
Malware Detection: Ensures superior protection against malware threats.
PaaS Capabilities: Eliminates need for hardware management.
SSL Decryption: Enhances data protection by decrypting secure connections.
DLP Capabilities: Safeguards data during AI interactions.

What benefits and ROI should users consider?

Scalability: Adapts quickly to growing demands and emerging tech integration.
Rapid Deployment: Reduces time to implement security measures.
User-Friendly Admin Console: Facilitates efficient operations management.
Low False Positives: Increases accuracy of threat detection systems.

iboss finds significant application in sectors such as education, where web filtering for K-12 is crucial, and in corporate environments requiring robust proxy services and URL filtering for network security. Its adaptability is essential in scenarios demanding flexible, decentralized security frameworks, particularly for remote work setups.

Cloudflare One is a single-vendor Secure Access Service Edge (SASE) platform that enables Zero Trust security and any-to-any connectivity across enterprise applications, users, devices, and networks. Cloudflare One helps organizations simplify, modernize, and consolidate their IT architecture by converging security and networking services on our single global network and control plane.

Many organizations start by adopting our Security Service Edge (SSE) services — like ZTNA, SWG, CASB, and DLP — to reduce their attack surface, stop threats like phishing and ransomware, protect data, and apply identity-based Zero Trust verification across web, SaaS, and private app environments. Others prioritize simplifying network connectivity across offices, data centers, and cloud environments with our WANaaS.

Every service is available for customers to run in every location across Cloudflare’s global network, which today spans 330+ cities in 120+ countries, so you can scale connectivity with fast, consistent protections everywhere.

Simplify management, enable app-defined SD-WAN policies and deliver a secure, cloud-delivered branch today with the Industry’s first next-generation SD-WAN.

Sample Customers

More than 4,000 global enterprises trust the iboss Cloud Platform to support their modern workforces, including a large number of Fortune 50 companies.

23andMe

Open Networking User Group, Columbia Sportswear Company, Coca Cola

Buyer's Guide

Cloudflare One vs. Prisma SD-WAN

December 2024

Free Report: Cloudflare One vs. Prisma SD-WAN

Find out what your peers are saying about Cloudflare One vs. Prisma SD-WAN and other solutions. Updated: December 2024.

DOWNLOAD NOW

830,596 professionals have used our research since 2012.

See our Cloudflare One vs. Prisma SD-WAN report.

See our list of best Secure Access Service Edge (SASE) vendors.

We monitor all Secure Access Service Edge (SASE) reviews to prevent fraudulent reviews and keep review quality high. We do not post reviews by company employees or direct competitors. We validate each review for authenticity via cross-reference with LinkedIn, and personal follow-up with the reviewer when necessary.