We performed a comparison between Palo Alto Networks NG Firewalls and Zscaler Internet Access based on real PeerSpot user reviews.
Find out in this report how the two Firewalls solutions compare in terms of features, pricing, service and support, easy of deployment, and ROI."The most valuable features are the possibility of having one fabric for switching on security."
"This solution has solid UTM features combined with a nice GUI."
"It's great for capturing the traffic and troubleshooting it."
"The initial setup is straightforward."
"Using this product makes the VPN seamless and almost invisible to me in the sense that I don't have to think about it."
"The initial installation is very straightforward."
"The most valuable features are simplicity, management, and that it's constantly evolving."
"The most valuable features are the enterprise modeling and the simple interface."
"I like that Palo Alto does a good job of keeping the firewall updated with the latest threat signatures."
"Most of the features in Palo Alto are very valuable."
"You can easily integrate it with Active Directory, and you can use the GlobalProtect VPN for internal and external purposes. The URL Filtering is also clear and the application filtering is a plus. The application filtering is much better when you compare it to FortiGate or other firewall vendors."
"The strengths of Palo Alto Networks NG Firewalls are application visibility and application awareness. Their strong point is identifying applications for traffic. So all of the policies that are configured are related to the application and not to a port."
"It's very important that Palo Alto NG Firewalls embed machine learning into the core of the firewall to provide inline, real-time attack prevention. That increases our security posture... The firewall is able to capture it and flag it and it is easy to mitigate as soon as we see something like that happening, to secure the environment more, in real time."
"I can enable the features I want and configure the policies based on the user and not all users and network traffic, making firewall management much easier."
"The GUI is simple and the solution is straightforward."
"With our High availability pair, we have had no downtime for several years, since it was first put it in production."
"The most valuable features I found in Zscaler Internet Access are the restriction of users for a particular URL, the security feature related to stopping DDoS, and the VPN."
"The protection is most valuable."
"After a proper implementation, the maintenance is very low."
"The solution’s customer service is good."
"For our needs, the cloud-native proxy architecture is a very good solution. We are moving away from on-prem appliances and moving more toward cloud-based solutions. Zscaler is a good fit for our strategy. This architecture helps with cyber threats because we inspect most of the traffic and we can see that a lot of threats are stopped directly in the secure web gateway."
"Overall, we're very happy with our product."
"Stability-wise, I rate the solution a nine and a half out of ten...The setup phase was easy."
"Zscaler Internet Access protects using data loss prevention. If you have a CASB exposing your cloud out into the network, then Zscaler Internet Access will go ahead and control that unknown cloud application in the CASB, protecting it. There is also data detection with exact data match. This improves the data coming into your cloud so you are protecting it."
"The biggest "gotcha" is that if the client purchases what they call the UTM shared bundle, which has unified threat management on both, it's not as easy to manage if you have more than one firewall."
"The solution can have more features in a single box that can be multi-applied to integrate everything."
"We would like to see an upgrade to the VPN feature, we are using the VPN from outside of our office and there is a limitation to 10 connections, more connections would be suitable."
"The Web-filter in this solution is not very good."
"The main aspect of FortiGate that could be improved is load balancing. Our management team does not want to buy another appliance for only load balancing."
"There is a lot of improvement needed with SSL-VPN."
"Technical support is good but the response time could be faster."
"Some of the filtering is not robust, you can escape it with a VPN. Some of the users bypass some of the filters. It catches some but it also misses some, that area could be improved. It's functioning reasonably but there's room for improvement in that area."
"Overall it is good. It is reliable and easy to understand. However, the monitoring feature could be improved."
"This solution cannot be implemented on-premises; it's only a cloud solution. The price is high as well."
"Generating reports is not so easy."
"The data loss prevention (DLP) capabilities need to be beefed up."
"I wish that the Palos had better system logging for the hardware itself."
"The solution is very expensive. There are cheaper options on the market."
"In the future, I would like to see more OTP features."
"There is a web-based GUI to do management, but you need to know how the machine or firewall operates. There are hundreds of different menus and options. I have used other firewalls before. Just implementing or designing a policy with Palo Alto, if you want a certain port to be open to different IP addresses, then that could take 20 to 25 clicks. That is just testing it out. It is quite complex to do. Whereas, with other places, you tell it, "Okay, I want this specific port open and this IP address to have access to it." That was it. However, not with Palo Alto, which is definitely more complex."
"It also needs better integration with other applications as well. There are some restrictions."
"Technical support could be better."
"We'd like to have more plugins and integration."
"We'd like for them to include some sort of antivirus tool."
"When you have appliances, SSL inspection is always a headache due to poor performance and/or lack of ciphers implemented. "
"Currently, the solution's interface is not that user-friendly."
"An improvement would be if they could provide an out-of-the-box experience, like 20 to 30 features all ready to go. In comparison, LogRhythm offers out-of-the-box features. With Zscaler Internet Access, there is firewall IPS, multiple security services, filtering, DLP, and CASB browser isolation. These are things that all users are going to be using. However, when an administrator or architect would start building this, I would definitely need to engage professional services to help clients do it."
"One thing that they could improve is the ability to import rules from other platforms."
More Palo Alto Networks NG Firewalls Pricing and Cost Advice →
Palo Alto Networks NG Firewalls is ranked 6th in Firewalls with 162 reviews while Zscaler Internet Access is ranked 2nd in Secure Web Gateways (SWG) with 46 reviews. Palo Alto Networks NG Firewalls is rated 8.6, while Zscaler Internet Access is rated 8.2. The top reviewer of Palo Alto Networks NG Firewalls writes "We get reports back from WildFire on a minute-by-minute basis". On the other hand, the top reviewer of Zscaler Internet Access writes "Provides integrated CASB and file sandboxing but could be less expensive ". Palo Alto Networks NG Firewalls is most compared with Check Point NGFW, Azure Firewall, Meraki MX, Sophos XG and Netgate pfSense, whereas Zscaler Internet Access is most compared with Cisco Umbrella, Microsoft Defender for Cloud Apps, Netskope , Prisma Access by Palo Alto Networks and Appgate SDP. See our Palo Alto Networks NG Firewalls vs. Zscaler Internet Access report.
We monitor all Firewalls reviews to prevent fraudulent reviews and keep review quality high. We do not post reviews by company employees or direct competitors. We validate each review for authenticity via cross-reference with LinkedIn, and personal follow-up with the reviewer when necessary.