Cloudflare Zero Trust Services vs. Palo Alto Networks Prisma Access

I wanted to securely connect to my servers without getting tracked by malicious attackers, even though I was on public Wi-Fi. Security was my top priority, and I also wanted a setup that was easy and quick to start and provided great network performance. Cloudflare's Zero trust matches my criteria for becoming my first choice.

Incentivized

Depending on the complexity of your equipment, devices, the network you are with, the size of your company, or the budget you are willing to pay, you should consider buying Prisma. I have in mind that it is a tool to make the leap to extra security for your devices; it is a complex tool that cannot be learned in a single day. Without a doubt, I would recommend her to a company that has a proven track record and knows what it wants.

Incentivized

• Block access to known bad, risky, or unwanted destinations at the DNS or HTTP level.
• Excellent protection for remote users.
• Best in class browser isolation techniques.

Incentivized

• A single pane of glass in the Palo Alto ecosystem
• A nice policy-based enforcement GUI that is easily managed
• Many authentication configuration options supported.
• Good technical support options with email and phone based.

Incentivized

• Cloudflare picks the nearest device location to route the traffic, but It would be great if we could select any particular location.
• Cloudflare enables monitoring for all the connected clients; it would be great if we could monitor any individual client device while keeping some client devices private.
• Sometimes, its DNS is not able to resolve a few project websites; we have to manually purge the cache and even disable the Security to get the work done. So, it would be better if we could manually provide a DNS list or whitelist some websites.

Incentivized

• It has created another area for us to manage some of the internet traffic for our users. Sites being open on-site and not on remote access or vice versa.
• In general, the certificates are easier to handle than while on Cisco solution, it is still a pain to get the remote device a cert in place if it has "broken."
• We would like to lock in the ability of which gateway we use to connect to the network. While it's not been an issue for us we have seen some oddness when using a different gateway than the preferred one.

Incentivized

Within a few hours, new engineers are trained in basic tasks and are quite happy they are able to resolve issues independently. After SSO is configured, onboarding is as simple as signing into m365 via a web browser popup.

Incentivized

I still say that Palo Alto Networks Prisma Access is the best. I love their GUI, their policies are easy to manage, the sales team is VERY helpful (especially when support is not). I still recommend them to everyone I talk to.

Incentivized

Good chat support from the portal for basic questions and minor issues. The enterprise support line is provided as well.

As long as all Cloudflare products and services rely on anycast technology, in a complex approach Cloudflare is faster and more relevant for cloud applications. The balance between security and performance is fully established. Also, Cloudflare has quite a good stack for API connection protection, like the API Shield example, which makes it more effective compared to F5 for example. Warp as a ZTNA agent gives better visibility and device posture information than FortiClient does.

Incentivized

Palo Alto Networks Prisma Access is better than all the choices we looked at. With our in-house knowledge, ease of use, and Palo track record for innovating and having excellent security, it was a no-brainer to go with Palo Alto Networks Prisma Access. That being said, watch out for Cato.

Incentivized

• Cloudflare has provided us with 100% uptime even during planned maintenance
• Cloudflare has reduced time for engineering fixes from hours (or days) to minutes in some cases (primarily through Workers)

Incentivized

• This solved our problem of having more than one piece of software to manage access for different types of mobile devices.
• Reduced our cost of needing multiple licenses to manage our VPN connectivity outside of the office.

Incentivized