Try our new research platform with insights from 80,000+ expert users

FortiSASE vs Zscaler Internet Access comparison

Sponsored
 

Comparison Buyer's Guide

Executive SummaryUpdated on Jan 12, 2025

Review summaries and opinions

We asked business professionals to review the solutions they use. Here are some excerpts of what they said:
 

Categories and Ranking

iboss
Sponsored
Average Rating
8.4
Reviews Sentiment
7.0
Number of Reviews
16
Ranking in other categories
Secure Web Gateways (SWG) (10th), Internet Security (4th), Web Content Filtering (3rd), Cloud Access Security Brokers (CASB) (8th), ZTNA as a Service (11th), Secure Access Service Edge (SASE) (10th)
FortiSASE
Average Rating
7.8
Reviews Sentiment
7.5
Number of Reviews
14
Ranking in other categories
Secure Access Service Edge (SASE) (9th)
Zscaler Internet Access
Average Rating
8.2
Reviews Sentiment
7.0
Number of Reviews
52
Ranking in other categories
Secure Web Gateways (SWG) (2nd), Internet Security (2nd)
 

Mindshare comparison

Secure Access Service Edge (SASE)
Secure Web Gateways (SWG)
 

Featured Reviews

Matt Crockford - PeerSpot reviewer
It's easy to roll out, and their understanding of our business made it seamless
One aspect we value about iboss is its simplicity. Their customer service is brilliant, and they are super responsive and knowledgeable. It's easy to roll out, and their understanding of our business made it seamless. We were impressed by the solution's mental health function, which can detect if someone needs help. It scans what users are browsing and flags warning signs so we can check to see if they are okay. We've had to use it a couple of times. The user interface is highly intuitive. Our IT team picked it up with minimal training. It's arranged so that it's easy to find where things are. Another advantage is the single pane of glass console, which gives you visibility into what's happening. We're not fully there yet because we haven't implemented zero trust, but we're excited about the possibilities from the demos we've seen. We launched a POC of iboss' ChatGPT Risk Protection feature two weeks ago. AI is a great tool, but you need to be careful what you put into it. My biggest fear is employees inputting sensitive corporate information or customer PII data into one of these chatbots. I was impressed by our trial of the feature. It's exactly what we wanted. Now, when a user goes to ChatGPT, there's a banner warning them not to share information, and we can block conversations containing customer data like bank details and email addresses. I don't want to stop people from using it, but we need visibility. We've only tried it on a test group of 15 people. You can configure it to look for specific keywords or integrate it with your DLP policy if you have that configured
Peter VanDorp - PeerSpot reviewer
Improved our operational efficiency because we manage one system now that manages all the sub-pieces to it
Deep packet inspection is easier to deploy in the FortiSASE environment. It's much simpler to configure one-touch deployment. It was considerably more convoluted to get that to work using FortiClient. All that processing horsepower is happening in Fortinet's cloud infrastructure, reducing the load on our local routers and on-prem FortiGate firewalls. There wasn't much of a learning curve because we are already a Fortinet organization. We still use all the same pieces, but the interface is slightly different. Still, I don't think the average user would have difficulty picking the solution up. They've got some excellent documentation and support to help you through any questions you may have. FortiSASE lets us manage everything from one web interface. That's the most significant benefit. We also use FortiManager, but it could only do so much when we only used on-prem systems. We still need to touch the EMS server and a few other interfaces to make all the pieces work. FortiSASE puts everything in one place. If something doesn't work, you've got support there to help you out. Previously, we had local support, but it's more complicated because you needed to explain your environment. The SASE environment is under their control, so they know what it looks like and what they're dealing with.
ShanavasVK - PeerSpot reviewer
Helps maintain a consistent posture of internet security while getting rid of VPN and hovering into zero trust
There could be a better way for the tool to categorize the traffic. For example, the tool does exceptions and everything overall. If I want to give guest access or provide access to guest users or any other internet access and if it does not go through the SSL inspection because, in our company, we can't have the root certificate on a device that we don't manage, which can be called out as an exception or an exclusion, but that doesn't provide a proper reflection of the picture of what is happening in the environment. There are granularities bringing it down. The tool I used or still have is Zscaler Cloud Connector to protect the cloud environment, which can have a bit more user-friendly installation and setup, and it would help a lot. The deployment process of Zscaler Cloud Connector needs to be more user-friendly. Improvements are required in the exception category. For example, suppose I report on a monthly basis what the breaches and traffic violating the SSL inspection area are coming from. In that case, I may find that half of them may be coming through some guest network, meaning the tool doesn't differentiate between the guest or normal networks or the corporate networks. Having options to differentiate different networks would be ideal so that it can show a true picture of things to users, as half of the things in the tool are not in our control and are not of our concern.

Quotes from Members

We asked business professionals to review the solutions they use. Here are some excerpts of what they said:
 

Pros

"It was a very easy product to install. It can be deployed very fast."
"We were impressed by the solution's mental health function, which can detect if someone needs help. It scans what users are browsing and flags warning signs so we can check to see if they are okay. We've had to use it a couple of times."
"iboss is easy to use despite its complexity. Multiple engineers manage it, but it's significantly more straightforward to administer than traditional VPNs and web proxies."
"iboss is pretty scalable. They provide good support. The case managers you work with to coordinate what you need are pretty good."
"Iboss is a solution that prevents advanced persistent threats, and has a zero tolerance for attacks."
"The iboss system is highly reliable. The false positive rates are small compared to some other systems we've experienced through other partner agencies who use competing solutions."
"Technical support is pretty sharp and very responsive."
"I would definitely recommend iboss for web filtering purposes to other organizations or individuals."
"This advantage is having the ability to create an SPA unit of FortiGate."
"It is easy to integrate with Fortinet."
"The technical support from Fortinet is highly commendable, and I rate it as nine out of ten."
"FortiSASE can operate in a cloud environment with client certificates for authorizations and access control using features like PostCheck."
"The solution is easy to deploy and simple to manage."
"It has AI-based detections for any signature-less virus or any unknown vulnerabilities."
"We utilize the web filtering part of FortiCASB for our network security."
"I feel that it is a stable solution...It is a scalable solution."
"The users are at different locations, and Zscaler helps us to put the organization's central security controls on these roaming users."
"We use ZIA for outbound internet connectivity. The internet traffic of on-prem users will be directed to the ZIA cloud for security checks and web filtering."
"The policies are very intuitive and easy to configure, with very little possibility of messing things up."
"Zscalar Internet Access is for Internet security, like an Internet security gateway. I like how it runs seamlessly in the background with a single sign-on. The controls you can have on devices for Internet security are good, and it doesn't impact speed wherever you're connected. Overall, I think it's very good so far."
"The most valuable features I found in Zscaler Internet Access are the restriction of users for a particular URL, the security feature related to stopping DDoS, and the VPN."
"For our needs, the cloud-native proxy architecture is a very good solution. We are moving away from on-prem appliances and moving more toward cloud-based solutions. Zscaler is a good fit for our strategy. This architecture helps with cyber threats because we inspect most of the traffic and we can see that a lot of threats are stopped directly in the secure web gateway."
"The protection is most valuable."
"Zscaler Internet Access's roaming user feature is most valuable and is much better compared to other secure web gateways."
 

Cons

"Fold that in with the risk intelligence they're getting from all of the different subscriptions they are a part of. Now, these security companies subscribe to things like emerging threats, databases, etc. You can fold all this intelligence to decide what's happening on an endpoint. I would love to see them start moving into that space. That would compete directly with Microsoft. Maybe that's why they haven't. Having that ability native within the solution would be great. The other area in which I would love to see improvement is more detailed descriptions of why they block websites."
"Sometimes, obviously, there are bugs."
"SSL decryption: We had issues with learners using apps instead of using web browsers. This type of encryption is tough for any appliance in a BYOD environment."
"If they could implement an extra security layer preventing access to iboss from the open internet, it would be great."
"Sometimes when you call in support, you get someone who is just following a sheet. It feels like a runaround. You feel that you are running into that support wall."
"Sometimes the agent stops working in iboss, and we have to reinstall the agent."
"Our biggest problem with their service was it did not recognize the device and filtering did not always work correctly."
"To scale up, a new iboss Node Blade Chassis must be purchased."
"The main concern is that if the client is using another firewall, they cannot establish a private channel with the Cisco cloud."
"The current high-tech version of FortiSASE is not recommended due to its heavy loading."
"Security and support are two areas with certain shortcomings in the product where improvements are required."
"FortiSASE is a work in progress. One area where there is room for improvement is the ability to use FortiSASE on an endpoint that doesn't have the client on it. Other solutions do that by building a VPN tunnel from their on-prem router into the SASE environment. FortiSASE doesn't have that feature yet, but it is on the roadmap for Q3 of this year. I've seen it in their development environment."
"FortiSASE is an expensive product and the cost is indeed high."
"Some of the solution's back-end connectivity and visibility are not robust and could be improved."
"While connectivity from outside to inside is okay, inside to outside is not."
"They need to have more concise or precise ways to come up with the return on investment for convincing or presenting this to customers."
"The performance needs improvement. Some areas create performance issues and, depending on the use cases, require reconfiguration to perform again."
"In terms of user experience, it could be better."
"We'd like for them to include some sort of antivirus tool."
"​When you have appliances, SSL inspection is always a headache due to poor performance and/or lack of ciphers implemented. ​"
"Do not expect to pay for the service and start using it, like Gmail. Zscaler requires a proper implementation to be done to make it successful."
"They block Zscaler IPs when the traffic origin is from Zscaler IPs. They've been blocked by certain government organizations so the end users are not able to visit those websites unless we ask them to unblock those IP. This is a bit problematic."
"An improvement would be if they could provide an out-of-the-box experience, like 20 to 30 features all ready to go. In comparison, LogRhythm offers out-of-the-box features. With Zscaler Internet Access, there is firewall IPS, multiple security services, filtering, DLP, and CASB browser isolation. These are things that all users are going to be using. However, when an administrator or architect would start building this, I would definitely need to engage professional services to help clients do it."
"Zscaler Internet Access could improve by adding a VPN feature."
 

Pricing and Cost Advice

"We had the cost of purchasing a new appliance along with the implementation and licensing costs. However, the following year, the cost of just licensing was similar to what was paid the previous year for a new appliance along with the implementation and licensing costs."
"It is probably in line with other solutions, but I do not deal with the financial side."
"It is expensive compared to one of its competitors."
"It is not expensive, and it is also not cheap. iboss is priced right in the sweet spot for the number of features it offers."
"The overall pricing for iboss is very competitive and transparent."
"We have not priced the solution recently, but they were competitive with other vendors in the past."
"I rate the product price an eight on a scale of one to ten, where one is high price, and ten is low price."
"I rate the product's price a six on a scale of one to ten, where one is low price and ten is high price."
"I can only speak about the pricing for education users because we get discounts. Other users aren't going to get the same price, but FortiSASE is competitive with the other products out there. All the solutions came in at the same price, so it just came down to the product that works best for us."
"On a scale from one to ten, where one is cheap and ten is expensive, I rate the solution's pricing a three out of ten."
"We have found the solution to be expensive."
"​Be aware that you will need to invest some time and money to adapt your environment for Zscaler (traffic redirection, software deployment, authentication, etc).​"
"The pricing is an issue. It is expensive compared to other firewalls on the market."
"Price-wise, the tool is reasonable compared to the other products in the market but it is not a very low-priced tool. The solution does provide value for money."
"The price of Zscaler Internet Access should improve, it is expensive."
"ZIA follows a subscription model pricing and charges you based on the number of users. I would say its price is good."
"Licenses are available on a per-host basis. Some features like sandboxing require an additional fee, but most standard features are included in the license."
"We pay around 6,500 INR per user per year, which is very expensive. I would rate Zscaler's pricing one out of five."
report
Use our free recommendation engine to learn which Secure Access Service Edge (SASE) solutions are best for your needs.
847,772 professionals have used our research since 2012.
 

Top Industries

By visitors reading reviews
Computer Software Company
13%
Financial Services Firm
12%
Manufacturing Company
9%
Government
6%
Computer Software Company
22%
Manufacturing Company
8%
Financial Services Firm
7%
Construction Company
6%
Educational Organization
23%
Computer Software Company
13%
Financial Services Firm
9%
Manufacturing Company
9%
 

Company Size

By reviewers
Large Enterprise
Midsize Enterprise
Small Business
 

Questions from the Community

What do you like most about iboss?
Content filtering is the most useful feature of iboss.
What needs improvement with iboss?
I have the same complaint about them that I have about other software companies. Sometimes when you call in support, ...
What is your primary use case for iboss?
We are a PreK-12 public school district, and we use iboss to filter internet content for our students at home and sta...
What do you like most about FortiSASE ?
The integration with the company's existing security infrastructure enhanced our security posture since it was a stra...
What is your experience regarding pricing and costs for FortiSASE ?
The pricing for FortiCASB is competitive and not expensive. I rate the price as eight out of ten. There may be additi...
What needs improvement with FortiSASE ?
Improvements should focus on security. Although FortiCASB performs well in many areas, I believe its security aspects...
Which is the better security solution - Cisco Umbrella or Zscaler?
Cisco Umbrella and Zscaler Internet Access are two broad-spectrum Internet security solutions that I have tried. Zs...
Which is better, Zscaler internet access or Netsckope CASB?
We researched Netskope but ultimately chose Zscaler. Netskope is a cloud access security broker that helps identify ...
 

Also Known As

iBoss Cloud Platform
No data available
ZIA
 

Overview

 

Sample Customers

More than 4,000 global enterprises trust the iboss Cloud Platform to support their modern workforces, including a large number of Fortune 50 companies.
Information Not Available
Ulster-Greene ARC, BanRegio, HDFC, Ralcorp Holdings Inc., British American Tobacco, Med America Billing Services Inc., Lanco Group, Aquafil, Telefonica, Swisscom, Brigade Group
Find out what your peers are saying about FortiSASE vs. Zscaler Internet Access and other solutions. Updated: May 2023.
847,772 professionals have used our research since 2012.