We compared Prisma SD-WAN and Prisma Access across several parameters based on our users' reviews. After reading the collected data, you can find our conclusion below:
Features: Prisma SD-WAN provides deep application visibility, centralized control, and the option to utilize local breakouts for internet connections. Prisma Access stands out for its ease of use, advanced security features, and global performance.
Room for Improvement: Prisma SD-WAN has room for improvement in various areas such as routing behavior, alerts and monitoring, and event analysis. Prisma Access could benefit from enhancements in error handling, latency, and integration with other cloud architectures.
Ease of Deployment: Some users experienced issues with existing traffic paths while setting up Prisma SD-WAN, which required several hours or more to resolve. Similarly, the setup process for Prisma Access varied in complexity and duration based on the size and requirements of the organization. While some users found it straightforward, others mentioned the need for expertise and assistance.
Service and Support: The feedback about Prisma SD-WAN's customer service varies. Some customers appreciated the support team's expertise, while others have noticed a decrease in the quality. Prisma Access's customer service has received mixed reviews. Some customers expressed a desire for better technical support, while others have had positive experiences with prompt responses and knowledgeable engineers.
Pricing: Prisma SD-WAN is less expensive than some solutions like Cisco, but Zscaler is even cheaper. Prisma Access is a more expensive solution, but users say the price is justified by its quality and features.
ROI: Prisma SD-WAN reduces costs and downtime while helping customers meet audit requirements. Prisma Access excels in identifying security concerns, seamlessly integrating with various products, and delivering instant value.
Comparison Results: Prisma SD-WAN offers useful features like in-depth application visibility, centralized control, and flexibility in WAN management. It has room for improvement in terms of routing behavior, documentation, and device reliability. Prisma Access is praised for its strong security features and ease of administration. It faces challenges with its user interface, configuration, and geographic coverage. Prisma SD-WAN is considered more affordable than other solutions, while Prisma Access is seen as higher-priced but justifiable for its quality.
"On the outside, the main differentiation is because Lookout ingest. They have ingested basically all of the apps for the last ten years and all the versions of all the apps, and we have that in a corporate database that allows us to do very large-scale machine learning and analysis on that data set. That's not something that any of the competitors really have the capability to do because they don't have access to the data set. A lot of the apps you can no longer get them because that version of the app is five or six years old, and it just doesn't exist anywhere anymore, except within our infrastructure. So, the ability to have that very rich dataset and learn from that dataset is a real differentiator."
"The solution is stable."
"The protection offered by the product is the most valuable feature. It detects vulnerabilities or traps on our users' phones and then prompts them to clean up their devices. Tools we used previously would only discover, which required us to gather information on the backend, so Lookout is a welcome upgrade."
"The most valuable features are the antivirus as a whole, the anti-malware, and all of the protection features that scan our enterprise devices."
"Its hands-off security and the fact that we don't have to maintain it are the most valuable features."
"The most valuable feature is the zero-trust part of this solution."
"The Autonomous Digital Experience Management (ADEM) offered by Palo Alto is a good reporting tool. It gives insights into how things are going within the network. It takes all the data from the users' endpoints and does an analysis, and it suggests changes as well."
"Its frontend is user-friendly. It is easy to use for us."
"The initial setup is very straightforward."
"The protection for web-based applications was helpful for my colleagues who didn't want a particular application on their devices. And the non-web access protection was more for our developers because they were writing and building code on their computers. Prisma Access was able to protect them."
"It's great that we can make sure a machine meets the minimum requirements before users are allowed to log in."
"The visibility perspective is pretty cool. If I want to know how much data is being used for a specific project, I can look at how much data has been used, from which region, and which users have been connected. That visibility is very good so that I can see how many licenses we have and how many are used."
"I like the link monitoring and analytics. These are the features that set Prisma apart from other products. Prisma works well with large, complex networks. One of my clients is a top bank in the United States, and Prisma has performed well for that customer."
"When it comes to supporting large, complex, network architectures, it's a very simple architecture. The main component is the fabric. It's very easy to troubleshoot if there is an issue happening in the underlying network."
"Prisma's analytics provide a lot of valuable data. I like the internet health chart that shows latency, dropped packets, MOS for data quality, etc. It also runs a continuous speed test in the background. I've used it multiple times to troubleshoot internet connections when the service provider has attempted to claim nothing is wrong with the circuit. It gives me data to send them showing we're not getting the speed we should, or there is constant packet loss."
"I like that the integration with Palo Alto is easy."
"It is flexible to use the internet connection via local breakouts without going to data centers."
"Prisma SD-WAN is intuitive. We have a better idea of the different tools we can use and jump between the menus quickly."
"The product's initial setup phase is straightforward."
"The security offered by the solution is pretty good."
"The stability depends on the service from where you access it. Because sometimes, the place you are in, you have Gateway. You don't have Gateway. The gateway is overutilized. At the end, you need to go through their gateways. And this is the key point here. You have a tracking point. If it's not well orchestrated, and it scales up as you add more to the existing team, you will suffer"
"We just submitted an enhancement request reflecting the main area we want to see improvement in; the APIs. Currently, we're able to build dashboards, but it's somewhat backward because we use our MDM API to create them. Lookout should provide API to customers so we can query our data and use it in our cloud, and this is the only outstanding area for improvement with the product right now."
"From the analysis that we've done, they do seem to be maybe a step behind in trying to enter the market with a new solution. But when they do pick up, they do come out with some good products."
"Lookout was moving into the SSE space. And so their work on SecureWeb Gateway and SD-WAN is still sort of evolving."
"I would like the solution to support a different type of authentication. We can't configure a secondary method for our portal."
"The product's current price is an area of shortcoming where improvements are required."
"My clients would like to see a more feature-rich product."
"We would like to see improvements in the licensing; currently, Palo Alto provides 500 to 1000 licenses for users, and we want to see 1500 to 2000 licenses for one version."
"We've run into some challenges, having hit a lot of bugs over the past year in the deployment of GlobalProtect. We've had our fair share of issues that I haven't been happy with. We're working with the support organization to remediate them and waiting for updated releases. The response on getting the bugs fixed has not been what I would consider adequate for a product like this."
"I haven't seen any SD-WAN configuration capability. If Prisma Access would support SD-WAN, that would help... SD-WAN devices should be able to reach Prisma Access, and Palo Alto should support different, vendor-specific devices, not just Palo Alto devices, for SD-WAN configuration."
"The solution needs to be more compatible with other solutions. This is specifically a problem for us when it comes to healthcare applications. They have proprietary connection types and things of that nature that make compatibility a challenge sometimes."
"It is a managed firewall. When you run into issues and have to troubleshoot, there is a fair amount of restriction. You run into a couple of restrictions where you don't have any visibility on what is happening on the Palo Alto managed infrastructure, and you need to get on a call to get technical assistance from Palo Alto's technical support. You have to get them to work with you to fix the problem. I would definitely like them to work on the visibility into what happens inside Palo Alto's infrastructure. It is not about getting our hands onto their infrastructure to do troubleshooting or fixing problems; it is just about getting more visibility. This will help us in guiding technical support folks to the area where they need to work."
"Event correlation and analysis capabilities do not help minimize the number of alarms from a single event. That is the problem. We are getting a lot of incidents, and there is some issue with the correlation. That is still a drawback."
"The only con is the pricing because it's more premium."
"We are incorporating their zone-based firewalls. Prisma SD-WAN has limited documentation on how it manipulates traffic, e.g., how it is interacting with TCP and UDP. We recently had some traffic that was black holing. We literally had to do packet captures to see that the new zone-based firewall, which runs on top of Prisma SD-WAN, was causing issues."
"I would also like to see improvement in the product training for customers. Palo Alto has not initiated very much training but they have to do so because this is a new product. If you have experience in a legacy environment, and you are moving to Prisma SD-WAN, you don't have a training framework. That is one of the disadvantages."
"Prisma SD-WAN's technical support should be improved."
"I'd like to see them move more towards CASB."
"The tool needs to work on price and complexity."
"Customer support is our biggest pain point. The quality of support has gone down a little since we initially deployed this product. I don't know if this is due to turnover at Palo Alto or a lack of training. It is now taking one or two days to get an initial response that says, "Hey, we've looked into this, can you pull this data for us?" In the past, we'd immediately get a response."
More Prisma Access by Palo Alto Networks Pricing and Cost Advice →
Prisma Access by Palo Alto Networks is ranked 1st in Secure Access Service Edge (SASE) with 58 reviews while Prisma SD-WAN is ranked 10th in Secure Access Service Edge (SASE) with 12 reviews. Prisma Access by Palo Alto Networks is rated 8.2, while Prisma SD-WAN is rated 8.6. The top reviewer of Prisma Access by Palo Alto Networks writes "Integration with Palo Alto platforms such as Cortex Data Lake and Autofocus gives us visibility into our attack surface". On the other hand, the top reviewer of Prisma SD-WAN writes "A stable tool that offers a good uptime and ensures a return on investment". Prisma Access by Palo Alto Networks is most compared with Zscaler Zero Trust Exchange, Netskope , Cisco Umbrella, Zscaler Internet Access and Microsoft Defender for Cloud Apps, whereas Prisma SD-WAN is most compared with Cisco SD-WAN, Meraki SD-WAN, Fortinet FortiGate, Aruba EdgeConnect SD-WAN Platform and VMware SD-WAN. See our Prisma Access by Palo Alto Networks vs. Prisma SD-WAN report.
See our list of best Secure Access Service Edge (SASE) vendors.
We monitor all Secure Access Service Edge (SASE) reviews to prevent fraudulent reviews and keep review quality high. We do not post reviews by company employees or direct competitors. We validate each review for authenticity via cross-reference with LinkedIn, and personal follow-up with the reviewer when necessary.