Cloudflare One vs Prisma Access by Palo Alto Networks comparison

Cloudflare and Palo Alto Networks are both solutions in the Secure Access Service Edge (SASE) category. Cloudflare is ranked #10 with an average rating of 8.4, while Palo Alto Networks is ranked #1 with an average rating of 8.2. Cloudflare holds a 7.6% mindshare in SASE, compared to Palo Alto Networks’s 14.8% mindshare. Additionally, 100% of Cloudflare users are willing to recommend the solution, compared to 92% of Palo Alto Networks users who would recommend it.

Comparison Buyer's Guide

Download the report

Executive SummaryUpdated on Jun 22, 2025

Prisma Access and Cloudflare One compete in the cybersecurity market, providing security solutions for businesses. Prisma Access holds an advantage with its comprehensive security suite, while Cloudflare One is valued for its simplicity and cost-effectiveness.

Features: Prisma Access offers a comprehensive set of security features including zero trust, DLP, and a next-generation firewall. It also integrates seamlessly with cloud environments and provides extensive monitoring capabilities. Cloudflare One is appreciated for its integrated DDoS protection, efficient CDN performance, and zero-trust access capabilities.

Room for Improvement: Prisma Access users are concerned about the complexity of pricing models, the need for better troubleshooting support, and occasional latency issues. Cloudflare One could enhance its feature set beyond DDoS protection, improve the onboarding process, and provide better visibility into specific rule settings within its WAF.

Ease of Deployment and Customer Service: Prisma Access is versatile, supporting hybrid and mixed cloud environments with a wide range of deployment options. However, configuration can be complex. Cloudflare One is designed for ease of use, particularly in public cloud environments, offering quick setup and integration. Customer support for Cloudflare generally receives positive feedback.

Pricing and ROI: Prisma Access is often perceived as expensive, offering extensive security features valued by larger enterprises. Cloudflare One is seen as more cost-effective, with transparent pricing that appeals to smaller businesses, resulting in a favorable ROI perception.

To learn more, read our detailed Cloudflare One vs. Prisma Access by Palo Alto Networks Report (Updated: November 2025).

Buyer's Guide

Cloudflare One vs. Prisma Access by Palo Alto Networks

November 2025

Download the complete report

Helped 872,869 peers since 2012

Review summaries and opinions

We asked business professionals to review the solutions they use. Here are some excerpts of what they said:

Categories and Ranking

iboss

Mindshare comparison

As of November 2025, in the Secure Access Service Edge (SASE) category, the mindshare of iboss is 2.1%, up from 1.4% compared to the previous year. The mindshare of Cloudflare One is 7.6%, down from 8.7% compared to the previous year. The mindshare of Prisma Access by Palo Alto Networks is 14.8%, down from 18.5% compared to the previous year. It is calculated based on PeerSpot user engagement data.

Secure Access Service Edge (SASE) Market Share Distribution
Product	Market Share (%)
Prisma Access by Palo Alto Networks	14.8%
iboss	2.1%
Cloudflare One	7.6%
Other	75.5%

Secure Access Service Edge (SASE)

Featured Reviews

Matt Crockford

Head of Cybersecurity at SES Water

It's easy to roll out, and their understanding of our business made it seamless

One aspect we value about iboss is its simplicity. Their customer service is brilliant, and they are super responsive and knowledgeable. It's easy to roll out, and their understanding of our business made it seamless. We were impressed by the solution's mental health function, which can detect if someone needs help. It scans what users are browsing and flags warning signs so we can check to see if they are okay. We've had to use it a couple of times. The user interface is highly intuitive. Our IT team picked it up with minimal training. It's arranged so that it's easy to find where things are. Another advantage is the single pane of glass console, which gives you visibility into what's happening. We're not fully there yet because we haven't implemented zero trust, but we're excited about the possibilities from the demos we've seen. We launched a POC of iboss' ChatGPT Risk Protection feature two weeks ago. AI is a great tool, but you need to be careful what you put into it. My biggest fear is employees inputting sensitive corporate information or customer PII data into one of these chatbots. I was impressed by our trial of the feature. It's exactly what we wanted. Now, when a user goes to ChatGPT, there's a banner warning them not to share information, and we can block conversations containing customer data like bank details and email addresses. I don't want to stop people from using it, but we need visibility. We've only tried it on a test group of 15 people. You can configure it to look for specific keywords or integrate it with your DLP policy if you have that configured

Read full review

Carlos Alam Hernandez Baruch

Engineer at SITMEXICO

The solution enables seamless security management and fosters a learning environment

Feedback could be enhanced. While I work efficiently with Clover as a partner in Mexico City, sometimes the information and requests are easier to manage with more concrete solutions. For the solution stopping us for e-learning, I appreciate the concept yet need more resources or courses in Mexico, preferably in Spanish. Certifications are easy, however, I require more real-world environments and instructors.

Read full review

Roberto Pastorino

Network and Cybersecurity Consultant at a tech services company with 11-50 employees

Have supported client adoption of security solutions but need more control over infrastructure

It's a working solution. It's not the easiest, but no DLP solution is easy. With Netskope, the whole infrastructure is proprietary. Prisma Access by Palo Alto Networks is using a service in AWS, and it's not totally a proprietary infrastructure. Sometimes a third-party outage could impact the whole operability. I'm not certain if the vendor is moving towards sovereignty of infrastructure at this moment, but from what I saw in the past, there was this reliance on third parties for the infrastructure: AWS, GCP, Oracle, and others. This is one point of attention for me. I would prefer more proprietary infrastructure.

Read full review

Quotes from Members

We asked business professionals to review the solutions they use. Here are some excerpts of what they said:

Pros

"I would rate the technical support of iboss a solid 10 without a shadow of a doubt."

"Our primary use case for this product is DLP,"

"The iboss system is highly reliable. The false positive rates are small compared to some other systems we've experienced through other partner agencies who use competing solutions."

"Valuable features: Within the filter: Controls (Web categories, applications, and Allow/Block list) and Network (local Subnets). Within the reporter: Logs (Event Log) and Reports."

"First of all, the security policies are essential. I do not have to rely solely on Active Directory for our users."

"From a use-case scenario, what I like the most is the plug-in. I like the fact that we can do the filtering of these devices offsite independent of the network they are connected to, and we do not have to have traffic coming back inside our network."

"iboss is among the few products providing inline filtering where no application is needed on the device. It operates on the network side and is not device-based. This feature was one of the main reasons why we stayed with them for so long."

"Granular setup, which was able to set different levels of filters using the OUs in the AD."

More iboss pros

"Cloudflare DDoS mitigates DDoS attacks."

"Cloudflare is simple to use."

"Enables me to work from two locations."

"The simplicity of the solution is its valuable features as almost no effort was needed to learn the configurations. It is also one of the cheapest firewalls available in this category."

"I'm very satisfied with the environment and the dashboard."

"The tool also offers good scalability, and the dashboard, along with real-time analytics, is very good."

"Clover is the best product globally."

"Cloudflare is by far the most effective solution that I have come across."

More Cloudflare One pros

"Customers are quite happy with Prisma Access by Palo Alto Networks because there is less spending on technologies."

"We have an application called ADEM that helps us troubleshoot network-related issues. It helps us to isolate an issue whether it is on the ISP level, endpoint level, or system access level."

"Its hands-off security and the fact that we don't have to maintain it are the most valuable features."

"The always-on feature is fantastic for the users. They don't have to think about it. When they go to a coffee shop to do work, there's no need to remember to toggle the VPN on. We'll protect them. URL filtering is the same at home as it is in the office."

"Palo Alto Firewall is one of the best firewalls in the world."

"Prisma helped us build a moat around our production systems. It's now impossible to log into our production from a non-MDM laptop. Prisma Access provides decent security overall."

"The performance is good."

"You have the ability to create your own expressions for your data. Palo Alto understands that DLP is not the same for all consumers. You might have a particular need to fulfill, and they give you the opportunity to create a custom expression to match the specific format that you have. For a confidential file property that you have in your files, you can add a metadata field. It gives you that opportunity to create that."

More Prisma Access by Palo Alto Networks pros

Cons

"The reporting feature needs improvement. It doesn't give you the expected results. It is quite difficult to get the specific reports needed, and it is not as intuitive as the rest of the platform."

"To scale up, a new iboss Node Blade Chassis must be purchased."

"The solution could be stronger on the integration side and offer more cloud applications like G Suite or Oracle."

"The area I would like to see improvement in is the ability with in the reporter to navigate directly to the content the user is traversing. It is kind of there, but it's not perfect. Quite frequently, I receive links that lead me to pages with error messages."

"If they could implement an extra security layer preventing access to iboss from the open internet, it would be great."

"The reporting feature needs improvement."

"SSL decryption: We had issues with learners using apps instead of using web browsers. This type of encryption is tough for any appliance in a BYOD environment."

"File integrity monitoring would be very advantageous as an additional feature."

More iboss cons

"Feedback could be enhanced."

"For the topic of improvement, providing some training material is one of my suggestions."

"When there are any dynamic changes in complex applications, the tool takes a lot of time, making its analytics-related area a major matter of concern where improvements are needed."

"Cloudflare DDoS has poor technical support."

"Cloudflare Zero Trust Platform needs to improve its documentation. It took time to do the implementation."

"Lacks a VPN feature to provide a secure connection to the data center."

"They don't have a person to provide support for customers using the solution under their free plan."

"The free plan has limitations. For example, I can only set up three rules, and the application firewall is unavailable."

More Cloudflare One cons

"It is a managed firewall. When you run into issues and have to troubleshoot, there is a fair amount of restriction. You run into a couple of restrictions where you don't have any visibility on what is happening on the Palo Alto managed infrastructure, and you need to get on a call to get technical assistance from Palo Alto's technical support. You have to get them to work with you to fix the problem. I would definitely like them to work on the visibility into what happens inside Palo Alto's infrastructure. It is not about getting our hands onto their infrastructure to do troubleshooting or fixing problems; it is just about getting more visibility. This will help us in guiding technical support folks to the area where they need to work."

"Palo Alto Prisma 10 came out over a year ago. Palo Alto added this identity management feature. The legacy way Palo Alto selected which user is sitting on an IP address it passes through has been clunky."

"The Prisma Access could improve in terms of adding more machine learning and AI capabilities to automate tasks such as incident response."

"The licensing model isn't flexible enough. It's an all-or-nothing model. Other providers in the market allow you to buy modules or add-ons separately. With Prisma Access, you have to purchase the same module for all users."

"The solution’s stability could be improved."

"I would like to see better pricing and an easier logging process. Also, if there was a way to log a global log, everything could go onto the system. It would be better if there was a third log, otherwise one would have to do everything manually."

"We would like to see improvements in the licensing; currently, Palo Alto provides 500 to 1000 licenses for users, and we want to see 1500 to 2000 licenses for one version."

"The product's price is an area of concern where improvements are required. The solution's price should be lowered."

More Prisma Access by Palo Alto Networks cons

Pricing and Cost Advice

"It is not expensive, and it is also not cheap. iboss is priced right in the sweet spot for the number of features it offers."

"It is probably in line with other solutions, but I do not deal with the financial side."

"We had the cost of purchasing a new appliance along with the implementation and licensing costs. However, the following year, the cost of just licensing was similar to what was paid the previous year for a new appliance along with the implementation and licensing costs."

"The overall pricing for iboss is very competitive and transparent."

"We have not priced the solution recently, but they were competitive with other vendors in the past."

"It is expensive compared to one of its competitors."

"The pricing is somewhere in the middle. I would rate the pricing a seven out of ten."

"The solution's pricing lacks transparency."

"The solution is not that expensive."

"The prices are slightly expensive."

"The pricing of the solution is cheap. The licensing cost is also very low. I rate the cost and pricing a three out of ten."

"Cloudflare Zero Trust Platform's pricing is good."

"My company has to make yearly payments towards the licensing costs attached to the solution. There are no hidden charges apart from the licensing costs of the solution."

"The price tag is no longer $200,000, but rather $300,000 to $400,000. It's twice."

"There's no reason not to buy the enterprise version that gives you unlimited PoPs, but you must understand the limitations you impose on yourself if you do that. If you go crazy, that allowlist will be too big for Kubernetes clusters."

"It's pricey, it's not cheap. But you get what you pay for."

"The licensing fees are paid on a yearly basis and for what we get, the price is good."

"Prisma Access is one of the best compared to other products on the market. The cost is favorable, and Palo Alto provides a simple architecture, so I recommend the solution to anyone using a different product. There are no hidden costs besides the license; what you see is what you get."

"They price their products using credit modules."

"The pricing is very friendly. It's not confusing to figure out your workload and how much you'd be paying for the solution."

"Prisma SaaS is more expensive than similar solutions but I think it's worth it."

"The licensing model for this product is complicated and changes all the time, making it very hard for the user to comprehend the configuration."

More Prisma Access by Palo Alto Networks pricing and cost advice

See which vendors are best for you

Use our free recommendation engine to learn which Secure Access Service Edge (SASE) solutions are best for your needs.

See recommendations

872,869 professionals have used our research since 2012.

Top Industries

By visitors reading reviews

Financial Services Firm

11%

Computer Software Company

11%

Manufacturing Company

Comms Service Provider

Computer Software Company

15%

Comms Service Provider

11%

Financial Services Firm

Manufacturing Company

Computer Software Company

12%

Financial Services Firm

12%

Manufacturing Company

11%

Government

Company Size

By reviewers

Large Enterprise

Midsize Enterprise

Small Business

By reviewers
Company Size	Count
Small Business	6
Midsize Enterprise	6
Large Enterprise	5

By reviewers
Company Size	Count
Small Business	9
Midsize Enterprise	2
Large Enterprise	10

By reviewers
Company Size	Count
Small Business	23
Midsize Enterprise	21
Large Enterprise	27

Questions from the Community

What needs improvement with iboss?

For zero trust implementation, we encountered complexity issues, especially with a large infrastructure company Exxon...

See all answers

What is your primary use case for iboss?

Previously when I used iboss, we did the POC for iboss for ExxonMobil. Four or five people wanted to move from our ol...

See all answers

What is your experience regarding pricing and costs for iboss?

Regarding pricing, setup costs, and licensing, iboss is not cheap, and that's my only concern. There are cheaper alte...

See all answers

What do you like most about Cloudflare Access?

The tool also offers good scalability, and the dashboard, along with real-time analytics, is very good.

See all answers

What is your experience regarding pricing and costs for Cloudflare Access?

The price of Cloudflare Access is the same as compared to Akamai, but I get better performance from Cloudflare. My co...

See all answers

What needs improvement with Cloudflare Access?

Cloudflare Access has strong integration with Microsoft, among other platforms. However, when it comes to Kaspersky, ...

See all answers

What is the better solution - Prisma Access or Zscaler Private Access?

We looked into Prisma Access before choosing Zscaler Private Access (ZPA). Palo Alto’s Prisma Access is a secure ac...

See all answers

What do you like most about Prisma Access by Palo Alto Networks?

The most valuable features of the solution are in the areas of the secure remote access it provides while also being ...

See all answers

What is your experience regarding pricing and costs for Prisma Access by Palo Alto Networks?

From my experience, Palo Alto is more expensive compared to solutions like Netskope and Triscale.

See all answers

Comparisons

Netskope vs iboss

Compared 14% of the time

Zscaler Internet Access vs iboss

Compared 13% of the time

Cisco Umbrella vs iboss

Compared 13% of the time

Check Point Harmony SASE (formerly Perimeter 81) vs iboss

Compared 8% of the time

Zscaler Zero Trust Exchange Platform vs iboss

Compared 4% of the time

More iboss Competitors

Cato SASE Cloud Platform vs Cloudflare One

Compared 5% of the time

Twingate vs Cloudflare One

Compared 5% of the time

Zscaler Zero Trust Exchange Platform vs Cloudflare One

Compared 4% of the time

AWS Shield vs Cloudflare One

Compared 4% of the time

Netskope vs Cloudflare One

Compared 4% of the time

More Cloudflare One Competitors

Netskope vs Prisma Access by Palo Alto Networks

Compared 13% of the time

Zscaler Internet Access vs Prisma Access by Palo Alto Networks

Compared 11% of the time

Cisco Umbrella vs Prisma Access by Palo Alto Networks

Compared 8% of the time

FortiSASE vs Prisma Access by Palo Alto Networks

Compared 6% of the time

Prisma SD-WAN vs Prisma Access by Palo Alto Networks

Compared 3% of the time

More Prisma Access by Palo Alto Networks Competitors

Product Reports

Buyer's Guide

iboss

October 2025

Download iboss product report

Buyer's Guide

Cloudflare One

November 2025

Download Cloudflare One product report

Buyer's Guide

Prisma Access by Palo Alto Networks

October 2025

Prisma Access by Palo Alto Networks report

Download Prisma Access by Palo Alto Networks product report

Also Known As

iBoss Cloud Platform

Cloudflare Area 1 Email Security, Cloudflare Bot Management, Cloudflare Gateway, Cloudflare Zero Trust Platform, Cloudflare DDoS, Cloudflare SASE & SSE Platform

Palo Alto Networks Prisma Access, Prisma Access, GlobalProtect, Palo Alto GlobalProtect Mobile Security Manager, Prisma SaaS by Palo Alto Networks, Prisma Access

Overview

Iboss offers a comprehensive cloud-based security platform valued for its scalability and autonomous features, ensuring robust security with easy deployment and management capabilities.

Renowned for its robust security architecture, Iboss integrates seamlessly within diverse networks, delivering efficient granular filtering and advanced content categorization. Its single pane of glass console provides ease of management, allowing rapid scalability suitable for rapidly deploying environments. Operates in BYOD setups due to inline filtering without device installation. Integration with cloud-based applications enhances user control, and features like SASE, SSL inspection, and ChatGPT risk protection stand as highlights. Despite its strengths, users have pointed out areas for enhancement like direct navigation in reports, SSL decryption, and better cloud integration while having room to improve data loss prevention.

What are the most important features of Iboss?

Scalability: Supports rapid deployment across diverse networks.
SASE: A consolidated approach to secure access.
SSL Inspection: Ensures safe data transmission.
Granular Filtering: Detailed control over accessible content.
Single Pane Management: Unifies control through a centralized console.

What benefits should users consider in reviews?

Cost-effectiveness: Offers competitive pricing with robust features.
Autonomous Operation: Reduces management overhead.
Responsive Support: Provides assistance when needed.
Flexible Deployment: Available for both cloud and on-premises environments.

The usage of Iboss spans educational institutions, specifically K-12, to enforce internet policies, protect data, and support remote work environments. It provides web filtering and security frameworks to ensure safe browsing. Its platform-as-a-service model offers flexibility for both cloud-based and on-premises requirements, integrating seamlessly to deliver enhanced security features suitable for various deployment needs including zero trust, CASB, and network security for work-from-home setups.

iboss

Cloudflare One is a single-vendor Secure Access Service Edge (SASE) platform that enables Zero Trust security and any-to-any connectivity across enterprise applications, users, devices, and networks. Cloudflare One helps organizations simplify, modernize, and consolidate their IT architecture by converging security and networking services on our single global network and control plane.

Many organizations start by adopting our Security Service Edge (SSE) services — like ZTNA, SWG, CASB, and DLP — to reduce their attack surface, stop threats like phishing and ransomware, protect data, and apply identity-based Zero Trust verification across web, SaaS, and private app environments. Others prioritize simplifying network connectivity across offices, data centers, and cloud environments with our WANaaS.

Every service is available for customers to run in every location across Cloudflare’s global network, which today spans 330+ cities in 120+ countries, so you can scale connectivity with fast, consistent protections everywhere.

Cloudflare

Prisma Access by Palo Alto Networks provides consistent security for all users and applications across your remote networks. Prisma Access grants users safe access to the cloud and data center applications and the internet as well. In addition, the solution combines all of your security and networking capabilities into a single cloud-delivered platform, enabling flexible hybrid workforces.

Prisma Access can be managed two ways:

Cloud Managed
Panorama Managed

Prisma Access delivers both networking and security services, including:

SD-WAN
VPN
Zero Trust network access (ZTNA)
Quality of service (QoS)
Clean Pipe
Firewall as a service (FWaaS)
DNS Security
Threat Prevention
Cloud secure web gateway (SWG)
Data loss prevention (DLP)
Cloud access security broker (CASB)

Prisma Access by Palo Alto Networks Features

Prisma Access by Palo Alto Networks has many valuable key features including: App-ID, User-ID, Device-ID, SSL Decryption, Dynamic User Group (DUG) Monitoring, AI/ML-Based Detection, IoT Security, Reporting, URL Filtering, Enterprise Data Loss Prevention (DLP), Digital Experience Monitoring (DEM)*, Logging, Policy Automation, Intrusion Prevention System (IPS), and many more.

Prisma Access by Palo Alto Networks Benefits

Some of the benefits of using Prisma Access by Palo Alto Networks include:

Security: Prisma Access gives you consistent security to protect against cyberattacks, with enforcement of policy at every location. By implementing Prisma Access, you also gain protection that works to prevent known and unknown malware, exploits, credential theft, command and control, and many other attack vectors across all ports and protocols.
Global connectivity: Prisma Access provides global coverage through use of its connectivity layer.
Scalability: With Prisma Access, scaling is automatically managed and is scalable, flexible, and agile.
Instant deployment: Deployment is fast, eliminating wasted time that may otherwise be associated with setting up a solution, operating it, or shipping hardware in order to get started.

Reviews from Real Users

Below are some reviews and helpful feedback written by Microsoft Azure Synapse Analytics

users who are currently using the solution.

PeerSpot user Partha D., Global Network Tech Lead at a computer software company, speaks about his experience using the product, saying, "It protects all app traffic so that users can gain access to all apps. Unlike other solutions that only work from ports 80 and 443, which are predominantly for web traffic, Prisma Access covers all protocols and works on all traffic patterns... The most sophisticated attacks can arise from sources that are not behind 80/443."

Tejas J., a Sr. Cloud Security Architect at a computer software company, mentions that "it is geographically dispersed, and it sits on top of Google and AWS platforms. Therefore, you don't face the standard issues, such as latency or bandwidth issues, that you usually face in the case of on-prem data centers.”

Another PeerSpot reviewer, Max I., Associate Director at Cognizant, comments that "Security is absolutely spot-on, really top-notch. It's the result of all the components that come together, such as the HIP [Host Information Profile] and components like Forcepoint, providing end-user content inspection, and antivirus. It incorporates DLP features and that's fantastic because Prisma Access makes sure that all of the essential prerequisites are in place before a user can log in or can be tunneled into."

Palo Alto Networks

Sample Customers

More than 4,000 global enterprises trust the iboss Cloud Platform to support their modern workforces, including a large number of Fortune 50 companies.

23andMe

Concord Hospital, State of Colorado, Essilor International, RheinLand Versicherungsgruppe, University of Westminster, Universidade Nove de Julho, SPAR Austria, CAME Group, ZipRealty, Greenhill & Co., IKT Agder, Aviva Stadium, Animal Logic, Management & Training Corporation, Brigham Young University Hawaii, School District of Chilliwack

Buyer's Guide

Cloudflare One vs. Prisma Access by Palo Alto Networks

November 2025

Free Report: Cloudflare One vs. Prisma Access by Palo Alto Networks

Find out what your peers are saying about Cloudflare One vs. Prisma Access by Palo Alto Networks and other solutions. Updated: November 2025.

DOWNLOAD NOW

872,869 professionals have used our research since 2012.

See our Cloudflare One vs. Prisma Access by Palo Alto Networks report.

See our list of best Secure Access Service Edge (SASE) vendors, best Secure Web Gateways (SWG) vendors, and best Cloud Access Security Brokers (CASB) vendors.

We monitor all Secure Access Service Edge (SASE) reviews to prevent fraudulent reviews and keep review quality high. We do not post reviews by company employees or direct competitors. We validate each review for authenticity via cross-reference with LinkedIn, and personal follow-up with the reviewer when necessary.