No more typing reviews! Try our Samantha, our new voice AI agent.

VMware VeloCloud SD-WAN vs Zscaler Zero Trust Exchange Platform comparison

Sponsored
 

Comparison Buyer's Guide

Executive SummaryUpdated on Feb 8, 2026

Review summaries and opinions

We asked business professionals to review the solutions they use. Here are some excerpts of what they said:
 

Categories and Ranking

iboss
Sponsored
Ranking in Secure Access Service Edge (SASE)
8th
Average Rating
8.4
Reviews Sentiment
6.9
Number of Reviews
21
Ranking in other categories
Secure Web Gateways (SWG) (5th), Internet Security (3rd), Web Content Filtering (1st), Cloud Access Security Brokers (CASB) (7th), ZTNA as a Service (8th)
VMware VeloCloud SD-WAN
Ranking in Secure Access Service Edge (SASE)
12th
Average Rating
8.2
Reviews Sentiment
6.6
Number of Reviews
55
Ranking in other categories
Software Defined WAN (SD-WAN) Solutions (6th), WAN Edge (5th)
Zscaler Zero Trust Exchange...
Ranking in Secure Access Service Edge (SASE)
2nd
Average Rating
8.4
Reviews Sentiment
6.9
Number of Reviews
67
Ranking in other categories
Data Loss Prevention (DLP) (6th), Cloud Access Security Brokers (CASB) (8th), Application Control (5th), ZTNA as a Service (1st), Remote Browser Isolation (RBI) (1st)
 

Mindshare comparison

As of April 2026, in the Secure Access Service Edge (SASE) category, the mindshare of iboss is 2.5%, up from 1.7% compared to the previous year. The mindshare of VMware VeloCloud SD-WAN is 3.4%, up from 2.7% compared to the previous year. The mindshare of Zscaler Zero Trust Exchange Platform is 9.1%, down from 11.5% compared to the previous year. It is calculated based on PeerSpot user engagement data.
Secure Access Service Edge (SASE) Mindshare Distribution
ProductMindshare (%)
Zscaler Zero Trust Exchange Platform9.1%
iboss2.5%
VMware VeloCloud SD-WAN3.4%
Other85.0%
Secure Access Service Edge (SASE)
 

Featured Reviews

Ashok Ananthula - PeerSpot reviewer
Senior Consultant Proxy Engineering at a financial services firm with 10,001+ employees
Cloud gateway has strengthened remote web security and now needs better Mac and ISP support
The problem our organization had is that iboss failed for the Mac devices. It is not able to give a successful agent for the Mac agents. That is where in 2025, we had to migrate to the Palo Alto-based platform. If your use case is for just Windows laptops,you can consider this platform as an option One issue is the data center resiliency part. In India especially, they are not tied up with the Tier 1 ISPs like Tata or Airtel; they were having Tier 2 ISPs and encountered many issues reaching few major sites that my organization depends on, and they were having problems that they could not fix quickly. They also lack a mechanism to route that traffic within their data center; rather, they ask customers to make a pac file change to route it to Singapore explicitly. It would be better if they route from their backend , i mean even if I send it to India DC, they should be able to route it internally to make that work; however, they fail to do that and ask the customer to route it in the pac file. Another suggestion is that in China, they do not have the proper setup; they used to have numerous problems with slowness and lack of premium circuits in China as well. That leads to multiple sites working slowly with latency-related issues. So the main issue is the ISP-related problems that need to be solved.
KF
At Messer Manager, Network & Communications (Americas) at a manufacturing company with 5,001-10,000 employees
Dynamic Multipath Optimization transforms network with high-quality circuits and cost-effective bandwidth
VMware VeloCloud SD-WAN has truly transformed our environment, providing significantly more bandwidth at lower costs, which is essential for tasks like Teams calls. Its Dynamic Multipath Optimization allows us to use both high-quality and cost-effective circuits concurrently, avoiding the frustration of unused backup circuits. Additionally, real-time application prioritization offers MPLS-like quality of service using internet circuits, resulting in a cost-effective network solution.
Vibin Thomas - PeerSpot reviewer
Team Lead, Technical Content Security at Valuepoint Systems
Zero trust access has transformed remote connectivity and now simplifies secure app usage
Zscaler Zero Trust Exchange Platform, especially Zscaler Private Access, is very strong, though there are a few areas where improvements can be made. One challenge observed is around initial troubleshooting and visibility. While Zscaler Private Access provides logs, it can sometimes take time to pinpoint the exact cause of access issues, especially in complex environments with multiple policies and identity integration. Another area is the dependency on identity and connector health. Since Zscaler Private Access is heavily reliant on app connectors and identity providers, any issues with these components can impact user access, making proper monitoring critical. During the initial setup, policy configuration and application onboarding require careful planning, especially for larger environments with many applications. These challenges are manageable with proper design and monitoring. Overall, the platform delivers strong security and user experience. I would recommend a few improvements, especially around user interface, reporting, and troubleshooting experience. From a user interface perspective, while the platform is powerful, the policy configuration and navigation can feel complex, especially for new users. A more simplified and intuitive layout for policy mapping and application access would help reduce the learning curve. In terms of reporting, Zscaler Private Access provides logs, but having more built-in customizable dashboards and analytics would be very helpful. Better visibility into user access patterns, application performance, and real-time troubleshooting insights would improve operational efficiency. From a support and troubleshooting standpoint, it would be beneficial to have more granular centralized visibility, allowing for quick end-to-end tracing of a user request from authentication to application access without switching between multiple views. These improvements would make the platform even more efficient, especially for large-scale enterprise environments.

Quotes from Members

We asked business professionals to review the solutions they use. Here are some excerpts of what they said:
 

Pros

"The iboss solution gives me the ability to scan the traffic through all the ports, through all the 131,000 PCP and UDP ports, and with this ability, we have the granularity also for consults over social media and applications on mobile, and this is an advantage that the customers are looking for right now."
"Technical support is pretty sharp and very responsive."
"The security aspect of the solution, particularly the malware behind it, is excellent. That's something that really helped us out. It's not just a simple proxy that just blocks the insights of potential threats that come on behind it. They do malware detection and that helps us a lot."
"We chose iboss for both zero trust and proxy (SWG) because their SWG was superior."
"The solution has massively improved our security posture, giving us full visibility into what our staff does online."
"I would definitely recommend iboss for web filtering purposes to other organizations or individuals."
"iboss is pretty scalable. They provide good support. The case managers you work with to coordinate what you need are pretty good."
"iboss is among the few products providing inline filtering where no application is needed on the device. It operates on the network side and is not device-based. This feature was one of the main reasons why we stayed with them for so long."
"Increases the performance of applications and is easy to deploy."
"If one circuit crashes, we are able to switch to a second circuit without any disruption in connection."
"I have found the dynamic multipoint protocol(DNPO) most useful because it can tell you which is the best circuit to use for different types of traffic."
"It's scalable."
"The most valuable feature is the dynamic multipath optimization."
"VeloCloud developed DMPO to increase performance and connectivity."
"My advice to others would be to trust the solution and buy it."
"I find the application-aware routing feature to be the most valuable."
"We don't need to connect anymore. It is automatically connected when you log on in Windows."
"The initial setup is easy."
"The most valuable features of Zscaler Private Access are its ability to integrate with multiple IDPs and application segmentation."
"The most valuable features of Zscaler SASE include web filtering, application control, and the private access configuration."
"The platform offers advanced threat protection features and embedded AI/ML capabilities, making it more proactive in blocking threats."
"The product’s most valuable features are data discovery, activity control, and zero trust exchange."
"The agent's versatility is notable, used for digital experience monitoring to collect valuable endpoint metrics for troubleshooting."
"The product provides a seamless user experience."
 

Cons

"The reporting feature needs improvement."
"I am currently doing a PoC of the zero trust aspect of it. Compared to other similar solutions, it is hard to get around each feature. It takes a while to get used to it."
"Regarding pricing, setup costs, and licensing, iboss is not cheap, and that's my only concern."
"File integrity monitoring would be very advantageous as an additional feature."
"Our biggest problem with their service was it did not recognize the device and filtering did not always work correctly."
"The reporting feature needs improvement. It doesn't give you the expected results. It is quite difficult to get the specific reports needed, and it is not as intuitive as the rest of the platform."
"To scale up, a new iboss Node Blade Chassis must be purchased."
"Its pricing could be better."
"VeloCloud needs improvement in terms of its security features."
"The solution needs improvement on security features and should include two firewalls. Cloud VPN can’t support any link. The solution needs to also improve the availability of centralized internal management. It needs to have debug detection and Deep Packet Detection features as well. The documentation for VMware is also hard to find."
"The solution doesn't offer failover between their own devices. If I want to, I should be able to put the two devices at the side, so there can be a failover."
"VMware SD-WAN could improve by having more partnerships with other vendors."
"The initial setup of VMware SD-WAN was simple. However, it took six days to complete."
"Implementing VMware is much more difficult, time-consuming, and expensive than implementing Fortinet or Check Point."
"There is room for improvement with respect to security."
"VeloCloud needs improvement in terms of its security features."
"On a scale from one to ten, I would rate Zscaler Private Access at only a three or four."
"On the improvement side, when we bypass certain internet traffic types, it's currently recommended to have a one-click option, but audio and video aren't always supported. Thus, we need to bypass that kind of traffic. So, it is an area of improvement."
"It has massive room for improvement. The Zscaler product itself is okay, but it doesn't give enough granularity for us as an organization to stipulate rules or processes, especially for data-driven services."
"The tool must provide IP-blocking features."
"Setup is a bit complex because there are many steps that need to be taken before onboarding and activating the solution."
"There could be additional ways to define proximity. Additionally, they should provide some exclusion options for specific policies and an ability to control the DLP engine."
"We have issues with the tool's maintenance and networking. It should be able to work in offline mode as well."
"The only issue with Zscaler Cloud DLP is that it only gives you DLP protection from web traffic, which is flowing out, while a full-blown DLP solution such as Forcepoint or Symantec gives you DLP coverage for multiple channels. Zscaler Cloud DLP doesn't give you coverage for email, fax, and USB channels, and this is the only challenge or room for improvement in the solution. It's just an extension on top of what you're buying on the proxy, so it's just an added layer, and it doesn't cover DLP on a very broad level. I'm unsure if Zcaler is in the business of competing with a full-blown DLP solution, and if there's a plan to expand the features of Zscaler Cloud DLP beyond the web channel because you'll have to deploy a full-blown agent for it. I'm unsure if this is on the cards because the solution is just an added layer that you get with your proxy. I've asked the Zcaler team whether there's a plan to go full DLP in the future, but I didn't get a positive response. There isn't any feature I'd like added to Zscaler Cloud DLP currently, because anything you could think of that should be in cloud or SaaS solutions is already there, except for machine learning, as it's the only functionality that seems to be lacking in the solution. Machine learning is an additional policy available in other DLP solutions in the market, but my team didn't find it in Zscaler Cloud DLP."
 

Pricing and Cost Advice

"It is not expensive, and it is also not cheap. iboss is priced right in the sweet spot for the number of features it offers."
"It is expensive compared to one of its competitors."
"It is probably in line with other solutions, but I do not deal with the financial side."
"We have not priced the solution recently, but they were competitive with other vendors in the past."
"We had the cost of purchasing a new appliance along with the implementation and licensing costs. However, the following year, the cost of just licensing was similar to what was paid the previous year for a new appliance along with the implementation and licensing costs."
"The overall pricing for iboss is very competitive and transparent."
"You need to pay for a license to use this product."
"We make monthly payments toward the licensing costs of the solution."
"The solution's price combines the license and the bandwidth you used."
"Overall pricing could be lower. It is much more expensive than traditional hardware vendor pricing."
"The minimum cost is $10,000 a month to have a monitoring station set up."
"The price of VMware SD-WAN is less expensive than some solutions, such as Cisco."
"The price is reasonable for this solution, but the only challenge for us is that the Rand currency fluctuates to the dollar and provides some complexities. The price might go up just because the Rand has actually lost value."
"The price of the solution could be reduced."
"Pricing for Zscaler Private Access is moderate. It's acceptable, though I can't give you the exact price currently. It's not too expensive, and on a scale of one to five, I would rate it a four out of five in terms of pricing."
"The pricing is expensive and on the higher end. Honestly, in my opinion, it is not worth the price."
"It's an affordable solution"
"The pricing is quite high, especially when it comes to the gateway."
"Zscaler Private Access is extremely expensive."
"As per industry leads, Zscaler CASB is an expensive solution."
"My company is a Zscaler Private Access partner, so the customers pay for the license fees."
"It's expensive currently. But when purchasing for a large number of users, there's room to negotiate. It's really up to the procurement team."
report
Use our free recommendation engine to learn which Secure Access Service Edge (SASE) solutions are best for your needs.
886,932 professionals have used our research since 2012.
 

Top Industries

By visitors reading reviews
Financial Services Firm
11%
Computer Software Company
9%
Manufacturing Company
9%
Construction Company
7%
Manufacturing Company
9%
Computer Software Company
9%
Construction Company
9%
Financial Services Firm
9%
Financial Services Firm
12%
Manufacturing Company
9%
Computer Software Company
9%
Insurance Company
6%
 

Company Size

By reviewers
Large Enterprise
Midsize Enterprise
Small Business
By reviewers
Company SizeCount
Small Business7
Midsize Enterprise7
Large Enterprise8
By reviewers
Company SizeCount
Small Business24
Midsize Enterprise14
Large Enterprise20
By reviewers
Company SizeCount
Small Business16
Midsize Enterprise12
Large Enterprise44
 

Questions from the Community

What needs improvement with iboss?
iboss can increase security in cyberspace. I have heard they are doing DDoS filtering, but I am not certain if they a...
What is your primary use case for iboss?
I use iboss for corporate VPN and all the corporate VRF, with basically all user traffic proxying to the internet.
What is your experience regarding pricing and costs for iboss?
Regarding pricing, setup costs, and licensing, iboss is not cheap, and that's my only concern. There are cheaper alte...
What are the biggest differences between Fortinet Fortigate and VMware SD-WAN?
One of our favorite things about Fortinet Fortigate is that you can deploy on the cloud or on premises. It is a very ...
What is your experience regarding pricing and costs for VMware SD-WAN?
When it comes to setup cost and licensing cost for VMware, it is on the expensive side relative to the market. We are...
What needs improvement with VMware SD-WAN?
The improvement needed for VMware VeloCloud SD-WAN is in the security area. The security part is the main issue for u...
What is the better solution - Prisma Access or Zscaler Private Access?
We looked into Prisma Access before choosing Zscaler Private Access (ZPA). Palo Alto’s Prisma Access is a secure ac...
What needs improvement with Zscaler SASE?
The solution needs to improve a lot of aspects.
What is your primary use case for Zscaler SASE?
We are using Zscaler Zero Trust Exchange for its Zscaler Internet Access service. It provides web security, DLP, data...
 

Also Known As

iBoss Cloud Platform
VMware SD-WAN, VeloCloud
Zscaler SASE, Zscaler DLP, Zscaler CASB, Zscaler CSPM, Zscaler Browser Isolation, Zscaler Posture Control
 

Overview

 

Sample Customers

More than 4,000 global enterprises trust the iboss Cloud Platform to support their modern workforces, including a large number of Fortune 50 companies.
Redmond, Coca Cola, Roka Bioscience, MetTel, Deutsche Telekom, Rockford Construction,  The Bay Club, tru Independence, Triton Management Services, DevCon, AXPM
Siemens, AutoNation, GE, NOV
Find out what your peers are saying about VMware VeloCloud SD-WAN vs. Zscaler Zero Trust Exchange Platform and other solutions. Updated: April 2026.
886,932 professionals have used our research since 2012.